From 22443742c3d44b3229cc2738819bf1f16d51652e Mon Sep 17 00:00:00 2001
From: max <dingfengwang@yunify.com>
Date: Tue, 4 Aug 2026 10:19:45 +0800
Subject: [PATCH 1/2] deps: Update jackson to address CVE-2026-54515

Jackson 2.18.8 is affected by CVE-2026-54515, CVE-2026-59889 and
GHSA-mhm7-754m-9p8w. Update jackson-databind and jackson-dataformat-yaml
to 2.21.5, which reports no known vulnerabilities.

Switch to PropertyNamingStrategies.SNAKE_CASE, which has been available
since 2.12, to replace the deprecated PropertyNamingStrategy constant.

Jackson 2.x keeps a Java 8 baseline, so java8 support is retained.
---
 pom.xml                                               | 4 ++--
 src/main/java/com/qingstor/sdk/config/EnvContext.java | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/pom.xml b/pom.xml
index f39a0d4..bcc879f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -53,12 +53,12 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.18.8</version>
+            <version>2.21.5</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.dataformat</groupId>
             <artifactId>jackson-dataformat-yaml</artifactId>
-            <version>2.18.8</version>
+            <version>2.21.5</version>
         </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>
diff --git a/src/main/java/com/qingstor/sdk/config/EnvContext.java b/src/main/java/com/qingstor/sdk/config/EnvContext.java
index 098b919..5549ed4 100644
--- a/src/main/java/com/qingstor/sdk/config/EnvContext.java
+++ b/src/main/java/com/qingstor/sdk/config/EnvContext.java
@@ -19,7 +19,7 @@
 import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
 import com.fasterxml.jackson.annotation.JsonProperty;
 import com.fasterxml.jackson.databind.ObjectMapper;
-import com.fasterxml.jackson.databind.PropertyNamingStrategy;
+import com.fasterxml.jackson.databind.PropertyNamingStrategies;
 import com.fasterxml.jackson.dataformat.yaml.YAMLFactory;
 import com.qingstor.sdk.common.auth.Credentials;
 import com.qingstor.sdk.exception.QSException;
@@ -47,7 +47,7 @@ public class EnvContext implements ParamValidate, Credentials {
 
     static {
         om = new ObjectMapper(new YAMLFactory());
-        om.setPropertyNamingStrategy(PropertyNamingStrategy.SNAKE_CASE);
+        om.setPropertyNamingStrategy(PropertyNamingStrategies.SNAKE_CASE);
     }
 
     private String accessKeyId;

From a40ac97ee7eab21d8dbfac676921ed9ce0b78eac Mon Sep 17 00:00:00 2001
From: max <dingfengwang@yunify.com>
Date: Tue, 4 Aug 2026 10:19:58 +0800
Subject: [PATCH 2/2] Bump version to 2.6.9

---
 CHANGELOG.md                          | 10 ++++++++++
 docs/install.md                       |  2 +-
 docs/install_zh-CN.md                 |  2 +-
 pom.xml                               |  2 +-
 src/main/resources/version.properties |  2 +-
 5 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index cffcae6..fbaed02 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,16 @@
 
 All notable changes to QingStor SDK for JAVA will be documented in this file.
 
+## [v2.6.9] - 2026-08-04
+
+### Changed
+
+- Migrate `PropertyNamingStrategy.SNAKE_CASE` to `PropertyNamingStrategies.SNAKE_CASE`.
+
+### Fixed
+
+- Update jackson to 2.21.5 to address CVE-2026-54515, CVE-2026-59889 and GHSA-mhm7-754m-9p8w.
+
 ## [v2.6.8] - 2026-07-14
 
 ### Changed
diff --git a/docs/install.md b/docs/install.md
index 7f2b046..b0d540c 100644
--- a/docs/install.md
+++ b/docs/install.md
@@ -22,7 +22,7 @@ Maven:
 <dependency>
   <groupId>com.yunify</groupId>
   <artifactId>qingstor.sdk.java</artifactId>
-  <version>2.6.8</version>
+  <version>2.6.9</version>
 </dependency>
 ```
 
diff --git a/docs/install_zh-CN.md b/docs/install_zh-CN.md
index 8176ae0..5086fcb 100644
--- a/docs/install_zh-CN.md
+++ b/docs/install_zh-CN.md
@@ -22,7 +22,7 @@ Maven:
 <dependency>
   <groupId>com.yunify</groupId>
   <artifactId>qingstor.sdk.java</artifactId>
-  <version>2.6.8</version>
+  <version>2.6.9</version>
 </dependency>
 ```
 
diff --git a/pom.xml b/pom.xml
index bcc879f..1b23c5d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -5,7 +5,7 @@
 
     <groupId>com.yunify</groupId>
     <artifactId>qingstor.sdk.java</artifactId>
-    <version>2.6.8</version>
+    <version>2.6.9</version>
     <name>Qingcloud Qingstor SDK for Java</name>
     <description>The official QingStor SDK for the Java programming language.</description>
     <url>https://www.qingcloud.com/products/objectstorage/</url>
diff --git a/src/main/resources/version.properties b/src/main/resources/version.properties
index 9926eec..d1dd696 100644
--- a/src/main/resources/version.properties
+++ b/src/main/resources/version.properties
@@ -1 +1 @@
-version=2.6.8
+version=2.6.9