chore(examples): pin Jackson in CDK infra and Kotlin examples (#2654)

* chore(examples): import jackson-bom 2.22.3 in examples and e2e handlers

* chore(examples): limit jackson-bom import to external dependencies

Author: phipag

examples/powertools-examples-core-utilities/cdk/infra/pom.xml

@@ -41,6 +41,19 @@
             </plugin>
         </plugins>
     </build>
+    <dependencyManagement>
+        <dependencies>
+            <!-- aws-cdk-lib pulls in vulnerable Jackson versions through jsii-runtime -->
+            <dependency>
+                <groupId>com.fasterxml.jackson</groupId>
+                <artifactId>jackson-bom</artifactId>
+                <version>2.22.3</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
     <dependencies>
         <!-- AWS Cloud Development Kit -->
         <dependency>

examples/powertools-examples-core-utilities/kotlin/build.gradle.kts

@@ -10,10 +10,11 @@ repositories {
 
 dependencies {
     implementation("com.amazonaws:aws-lambda-java-core:1.2.3")
-    implementation("com.fasterxml.jackson.core:jackson-annotations:2.15.1")
-    implementation("com.fasterxml.jackson.core:jackson-databind:2.15.3")
+    implementation(platform("com.fasterxml.jackson:jackson-bom:2.22.3"))
+    implementation("com.fasterxml.jackson.core:jackson-annotations")
+    implementation("com.fasterxml.jackson.core:jackson-databind")
     implementation("com.amazonaws:aws-lambda-java-events:3.16.0")
-    implementation("com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.15.2")
+    implementation("com.fasterxml.jackson.datatype:jackson-datatype-jsr310")
     implementation("org.aspectj:aspectjrt:1.9.20.1")
     aspect("software.amazon.lambda:powertools-tracing:2.10.0")
     aspect("software.amazon.lambda:powertools-logging-log4j:2.10.0")