Closed dependabot-preview[bot] closed 5 years ago
Merging #80 into master will not change coverage. The diff coverage is
n/a
.
@@ Coverage Diff @@
## master #80 +/- ##
====================================
Coverage 0% 0%
====================================
Files 23 23
Lines 522 522
Branches 23 23
====================================
Misses 522 522
Continue to review full report at Codecov.
Legend - Click here to learn more
Δ = absolute <relative> (impact)
,ø = not affected
,? = missing data
Powered by Codecov. Last update eac8736...1f3e7b3. Read the comment docs.
Bumps fastjson from 1.2.58 to 1.2.59.
Release notes
*Sourced from [fastjson's releases](https://github.com/alibaba/fastjson/releases).* > ## fastjson-1.2.59发布,增强AutoType打开时的安全性 > 这个版本主要是补充AutoType黑名单,增强AutoType打开时的安全性。建议不要缺省打开AutoType,AutoType打开后,黑名单是无法保证是完整的。 > > # Issues > 1. 安全增强补充AutoType黑名单 > 2. 增强JSONPath对特别字符的支持 [#2515](https://github-redirect.dependabot.com/alibaba/fastjson/issues/2515) > 3. JSONPath.remove方法支持deepScan语法 > 4. 修复Field和Getter类型不一致时反序列化报错的问题 > 5. 修复JSONObject.toJavaObject报错的问题 [#2516](https://github-redirect.dependabot.com/alibaba/fastjson/issues/2516) > > # 相关链接 > * 下载 http://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.59/ > * 文档 https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98 > * 源码 https://github.com/alibaba/fastjson/tree/1.2.59Commits
- [`69fb121`](https://github.com/alibaba/fastjson/commit/69fb121cc09b8fdf6c4aa63fbb634c1e322641db) bug fix for issue [#2580](https://github-redirect.dependabot.com/alibaba/fastjson/issues/2580) - [`7731562`](https://github.com/alibaba/fastjson/commit/77315628fbe635ec417bc45c237527577092e742) bug fix toJavaObject, for issue [#2516](https://github-redirect.dependabot.com/alibaba/fastjson/issues/2516) - [`ee76c9d`](https://github.com/alibaba/fastjson/commit/ee76c9d7b34ad5df5f907e2085140e474079abcb) add blacklist - [`820d639`](https://github.com/alibaba/fastjson/commit/820d6393c06e4459030a52d3ea31d2c62b9348c3) add testcase for issue [#2387](https://github-redirect.dependabot.com/alibaba/fastjson/issues/2387) - [`fab95ad`](https://github.com/alibaba/fastjson/commit/fab95ad30d827fd66a5714f67c2ba29c73cbe8f2) bug fix for Field & Getter Type Not Match - [`8080dba`](https://github.com/alibaba/fastjson/commit/8080dba7d1fbf551ab0fb4d9106c7fc904923711) add more blacklist - [`fcc9c2a`](https://github.com/alibaba/fastjson/commit/fcc9c2ad45f54bbd18cc61792d9a4a75b8d0a77e) add ignore - [`c4c39ac`](https://github.com/alibaba/fastjson/commit/c4c39acd54580007c193ef9361349de1af2c8870) bug fixed for jsonpath reserve - [`c9abb11`](https://github.com/alibaba/fastjson/commit/c9abb11051242e8436101fc7dbc4a6436211b86c) jsonpath support new api reserve - [`08373a8`](https://github.com/alibaba/fastjson/commit/08373a8a41d5412270d3a34589afeee865829811) jsonpath support new api reserve - Additional commits viewable in [compare view](https://github.com/alibaba/fastjson/compare/1.2.58...1.2.59)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it). To ignore the version in this PR you can just close it - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) Finally, you can contact us by mentioning @dependabot.