amazon-ion / ion-python

A Python implementation of Amazon Ion.
https://amazon-ion.github.io/ion-docs/
Apache License 2.0
261 stars 51 forks source link

Update python-rapidjson requirement from ~=1.9 to ~=1.19 #360

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Updates the requirements on python-rapidjson to permit the latest version.

Changelog

Sourced from python-rapidjson's changelog.

1.19 (2024-07-28)


* Properly dump subclasses of ``float`` with custom ``__repr__()`` method ( `issue [#213](https://github.com/python-rapidjson/python-rapidjson/issues/213)`__)

__ python-rapidjson/python-rapidjson#213

1.18 (2024-06-29)

  • Expose PEP-484 typing stubs, thanks to Rodion Kosianenko and GoodWasHere (PR [#204](https://github.com/python-rapidjson/python-rapidjson/issues/204)__)

    __ python-rapidjson/python-rapidjson#204

1.17 (2024-05-18)


* Use `current master`__ version of rapidjson

__ https://github.com/Tencent/rapidjson/compare/5e17dbed34eef33af8f3e734820b5dc547a2a3aa...ab1842a2dae061284c0a62dca1cc6d5e7e37e346

1.16 (2024-02-28)

  • Produce Python 3.8 wheels again, I deactivated it too eagerly, it's in security fixes only mode, not yet reached its end-of-life state

1.15 (2024-02-28)


* Honor the `recursion limit`__ also at parse time, to avoid attacks as described by
  `CVE-2024-27454`__

__ https://docs.python.org/3.12/library/sys.html#sys.setrecursionlimit __ https://monicz.dev/CVE-2024-27454

1.14 (2023-12-14)

  • Produce binary wheels for macOS/arm64, thanks to timothyjlaurent (PR [#195](https://github.com/python-rapidjson/python-rapidjson/issues/195)__)

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)