CNDB-18296: Upgrading jackson dependencies to 2.21.4

[scottfines]

addresses CVE-2026-54512 for Cassandra dependencies.

Fixes CNDB-18296

[github-actions]

Checklist before you submit for review

• This PR adheres to the Definition of Done
• Make sure there is a PR and ticket in the CNDB project updating the Converged Cassandra version
• Use NoSpamLogger for log lines that may appear frequently in the logs
• Verify test results on Butler
• Test coverage for new/modified code is > 80%
• Proper code formatting
• Proper title for each commit staring with the project-issue number, like CNDB-1234
• Each commit has a meaningful description
• Each commit is not very long and contains related changes
• Renames, moves and reformatting are in distinct commits
• All new files should contain the IBM copyright header instead of the Apache License one (no DataStax copyright any longer)

[jkni]

jackson-annotations abandoned point releases as they were mostly identical. We should set this to 2.21.

[plpesvc-ds]

❌ Build ds-cassandra-pr-gate/PR-2489 rejected by Butler

---

3 regressions found
See build details here

---

Found 3 new test failures

Test	Explanation	Runs	Upstream
o.a.c.distributed.test.AbortedQueryLoggerTest.testLogsReadMetrics	REGRESSION	🔴	0 / 30
o.a.c.index.sai.cql.VectorCompaction100dTest.testZeroOrOneToManyCompaction[version=ec enableNVQ=true]	REGRESSION	🔴	0 / 30
o.a.c.index.sai.cql.VectorSiftSmallTest.testMultiSegmentBuild[ed false]	REGRESSION	🔴	0 / 30

---

Found 4 known test failures

[jkni]

LGTM