From 7beb53fbec09c6ab887a2b4fc170cf82f2cc76c7 Mon Sep 17 00:00:00 2001
From: Arindam Singh <96876969+ar249@users.noreply.github.com>
Date: Mon, 4 May 2026 15:53:46 +0530
Subject: [PATCH] Update fastjson v1 from 1.2.83 to fastjson v2 2.0.61 and
 exclude transitive fastjson v1 dependency.

Fixes gh-1399

Signed-off-by: Arindam Singh <96876969+ar249@users.noreply.github.com>
---
 sofa-boot-project/sofaboot-dependencies/pom.xml | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/sofa-boot-project/sofaboot-dependencies/pom.xml b/sofa-boot-project/sofaboot-dependencies/pom.xml
index 7bac50f75..69ec4243b 100644
--- a/sofa-boot-project/sofaboot-dependencies/pom.xml
+++ b/sofa-boot-project/sofaboot-dependencies/pom.xml
@@ -34,7 +34,7 @@
         <!--3rd lib dependency-->
         <spring.cloud.version>2025.0.0</spring.cloud.version>
         <asm.version>9.8</asm.version>
-        <fastjson.version>1.2.83</fastjson.version>
+        <fastjson.version>2.0.61</fastjson.version>
         <javassist.version>3.29.2-GA</javassist.version>
         <protobuf.version>3.22.2</protobuf.version>
         <xerces.version>2.12.2</xerces.version>
@@ -530,6 +530,12 @@
                 <groupId>org.apache.rocketmq</groupId>
                 <artifactId>rocketmq-spring-boot-starter</artifactId>
                 <version>${rocketmq.spring.boot.starter.version}</version>
+                <exclusions>
+                    <exclusion>
+                        <groupId>com.alibaba</groupId>
+                        <artifactId>fastjson</artifactId>
+                    </exclusion>
+                </exclusions>
             </dependency>
 
             <dependency>
@@ -557,8 +563,8 @@
             </dependency>
 
             <dependency>
-                <groupId>com.alibaba</groupId>
-                <artifactId>fastjson</artifactId>
+                <groupId>com.alibaba.fastjson2</groupId>
+                <artifactId>fastjson2</artifactId>
                 <version>${fastjson.version}</version>
             </dependency>
 
@@ -691,6 +697,10 @@
                         <artifactId>spring</artifactId>
                         <groupId>org.springframework</groupId>
                     </exclusion>
+                    <exclusion>
+                        <groupId>com.alibaba</groupId>
+                        <artifactId>fastjson</artifactId>
+                    </exclusion>
                 </exclusions>
             </dependency>
             <dependency>