build(deps): patch test Jackson dependencies

[jbeckwith-oai]

Summary

• align the WireMock test dependency graph on Jackson BOM 2.21.5 in the core and OkHttp client modules
• remove Jackson 2.20.1 from every resolvable Gradle configuration
• preserve the SDK's published Jackson 2.18.9 runtime and intentional Jackson 2.14.0 compatibility test floor

This targets Dependabot alerts #59, #95, #97, #99, and #101.

Why

WireMock 3.13.2 imports Jackson BOM 2.20.1. That version is present only in test dependency metadata and the isolated compatibility harness, but it is affected by the recent Jackson Core and Databind advisories on the 2.19+ line. Importing the fixed 2.21.5 BOM at testImplementation is the narrowest update that removes that vulnerable line without raising any consumer-facing or compatibility baseline.

Compatibility

• test dependency metadata resolves Jackson Core and Databind 2.21.5
• normal SDK tests still resolve the published Jackson 2.18.9 release
• the older-Jackson compatibility suite still resolves Jackson 2.14.0
• generated Maven POMs and Gradle module metadata contain neither Jackson 2.21.5 nor the test BOM
• no source, binary API, runtime dependency, or published dependency scope changes

Validation

• exhaustive scan of every resolvable Gradle configuration: no Jackson 2.20.1 remains
• dependency insight for test metadata, normal test runtime, and compatibility runtime
• Maven POM and Gradle module metadata inspection
• ./scripts/test --rerun-tasks
• ./scripts/lint
• ./scripts/build --rerun-tasks
• ProGuard and R8 tests

[openai-sdks]

OkTest Summary

✅ 237/237 SDK tests passed in 15.767s for Java SDK PR #807.

Test results — 42 files

Test	Result	Time
tests/chat-completions-complex-body.test.ts	✅ Passed	220ms
tests/chat-completions-create.test.ts	✅ Passed	644ms
tests/chat-completions-stream.test.ts	✅ Passed	355ms
tests/files-content-binary.test.ts	✅ Passed	265ms
tests/files-create-multipart.test.ts	✅ Passed	366ms
tests/files-list-pagination.test.ts	✅ Passed	279ms
tests/initialize-config.test.ts	✅ Passed	190ms
tests/instance-isolation.test.ts	✅ Passed	245ms
tests/models-list.test.ts	✅ Passed	170ms
tests/responses-background-lifecycle.test.ts	✅ Passed	306ms
tests/responses-body-method-errors.test.ts	✅ Passed	470ms
tests/responses-cancel-timeout.test.ts	✅ Passed	199ms
tests/responses-cancel.test.ts	✅ Passed	268ms
tests/responses-compact-retries.test.ts	✅ Passed	396ms
tests/responses-compact.test.ts	✅ Passed	355ms
tests/responses-create-advanced-stream.test.ts	✅ Passed	321ms
tests/responses-create-advanced.test.ts	✅ Passed	1.238s
tests/responses-create-disconnect.test.ts	✅ Passed	1.05s
tests/responses-create-errors.test.ts	✅ Passed	303ms
tests/responses-create-malformed-api-responses.test.ts	✅ Passed	355ms
tests/responses-create-retries.test.ts	✅ Passed	258ms
tests/responses-create-stream-failures.test.ts	✅ Passed	275ms
tests/responses-create-stream-timeout.test.ts	✅ Passed	286ms
tests/responses-create-stream-wire.test.ts	✅ Passed	5.899s
tests/responses-create-stream.test.ts	✅ Passed	161ms
tests/responses-create-terminal-states.test.ts	✅ Passed	452ms
tests/responses-create-timeout.test.ts	✅ Passed	237ms
tests/responses-create.test.ts	✅ Passed	224ms
tests/responses-delete.test.ts	✅ Passed	282ms
tests/responses-input-items-errors.test.ts	✅ Passed	282ms
tests/responses-input-items-list.test.ts	✅ Passed	332ms
tests/responses-input-items-options.test.ts	✅ Passed	167ms
tests/responses-input-tokens-count-timeout.test.ts	✅ Passed	242ms
tests/responses-input-tokens-count.test.ts	✅ Passed	358ms
tests/responses-malformed-inputs.test.ts	✅ Passed	4.744s
tests/responses-not-found-errors.test.ts	✅ Passed	397ms
tests/responses-parse.test.ts	✅ Passed	567ms
tests/responses-retrieve-retries.test.ts	✅ Passed	1.059s
tests/responses-retrieve.test.ts	✅ Passed	359ms
tests/responses-stored-method-errors.test.ts	✅ Passed	970ms
tests/retry-behavior.test.ts	✅ Passed	3.407s
tests/sdk-error-shape.test.ts	✅ Passed	391ms

View OkTest run #29785993785

_{SDK merge (507de4693bc5) · head (1b4116f7a239) · base (de56d63c2e1e) · OkTest (38f2e7c0559b)}

[HAYDEN-OAI]

looks good — i verified the jackson BOM stays test-only: no 2.20.1 remains in resolvable configurations, normal test/runtime lanes stay on 2.18.9, the compatibility lane keeps its 2.14.0 floor, and generated POM/module metadata do not leak the test BOM.