[SPARK-59833] Upgrade Jackson to 2.22.3 - #900

What changes were proposed in this pull request?

This PR aims to upgrade Jackson to 2.22.3.

jackson-annotations stays at 2.22 because it has no 2.22.3 release (2.22 is the version paired with 2.22.3 by jackson-bom).

jackson-module-scala_2.13 is upgraded to 2.22.3, the version paired by jackson-bom 2.22.3, instead of 2.22.3.1. The only change of 2.22.3.1 (#899) fixes a 2.22.3 regression in the deserialization of a Scala object with a JsonTypeInfo.As.PROPERTY type id, which is irrelevant to this project.

gradle/verification-metadata.xml was regenerated from scratch.

Why are the changes needed?

To bring the latest bug fixes and security fixes.

• Jackson 2.22.3 (2026-09-21, jackson-databind-2.22.3)
  • CVE-2026-89407: Optimize NumberInput.looksLikeValidNumber
  • CVE-2026-89425: Honor maxErrorTokenLength in UTF8DataInputJsonParser
  • CVE-2026-91776: Prevent unbounded growth of type id cache in TypeDeserializer
  • CVE-2026-91777: Avoid quadratic forward-reference resolution in Collection/Map deserializers
  • WriterBasedJsonGenerator throws ArrayIndexOutOfBoundsException when a zero-length custom escape ends exactly at the output buffer boundary (#1668)
  • UTF32Reader corrupts or drops the low surrogate when a supplementary character splits across a read() boundary (#1713)
  • Unresolved IPv6 InetSocketAddress serialized without brackets, losing port on round-trip (#6185)
  • Avoid quadratic forward-reference resolution in ObjectArrayDeserializer (#6205)
  • Support StreamReadConstraints.maxDocumentLength() in YAML parser (#737)

Does this PR introduce any user-facing change?

No.

How was this patch tested?

Pass the CIs.

Was this patch authored or co-authored using generative AI tooling?

Generated-by: Claude Opus 5.5