search

hydrogen-dev / SDK

Client SDKs for Hydrogen REST APIs
Apache License 2.0
6 stars 8 forks source link

Update dependency com.google.code.gson:gson to v2.8.9 #132

Closed mend-for-github-com[bot] closed 2 years ago

mend-for-github-com[bot] commented 2 years ago

This PR contains the following updates:

Package Update Change
com.google.code.gson:gson patch 2.8.1 -> 2.8.9

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 7.7 WS-2021-0419 #131

Release Notes

google/gson ### [`v2.8.9`](https://togithub.com/google/gson/blob/master/CHANGELOG.md#Version-289) - Make OSGi bundle's dependency on `sun.misc` optional ([#​1993](https://togithub.com/google/gson/issues/1993)). - Deprecate `Gson.excluder()` exposing internal `Excluder` class ([#​1986](https://togithub.com/google/gson/issues/1986)). - Prevent Java deserialization of internal classes ([#​1991](https://togithub.com/google/gson/issues/1991)). - Improve number strategy implementation ([#​1987](https://togithub.com/google/gson/issues/1987)). - Fix LongSerializationPolicy null handling being inconsistent with Gson ([#​1990](https://togithub.com/google/gson/issues/1990)). - Support arbitrary Number implementation for Object and Number deserialization ([#​1290](https://togithub.com/google/gson/issues/1290)). - Bump proguard-maven-plugin from 2.4.0 to 2.5.1 ([#​1980](https://togithub.com/google/gson/issues/1980)). - Don't exclude static local classes ([#​1969](https://togithub.com/google/gson/issues/1969)). - Fix `RuntimeTypeAdapterFactory` depending on internal `Streams` class ([#​1959](https://togithub.com/google/gson/issues/1959)). - Improve Maven build ([#​1964](https://togithub.com/google/gson/issues/1964)). - Make dependency on `java.sql` optional ([#​1707](https://togithub.com/google/gson/issues/1707)). ### [`v2.8.8`](https://togithub.com/google/gson/blob/master/CHANGELOG.md#Version-288) - Fixed issue with recursive types ([#​1390](https://togithub.com/google/gson/issues/1390)). - Better behaviour with Java 9+ and `Unsafe` if there is a security manager ([#​1712](https://togithub.com/google/gson/issues/1712)). - `EnumTypeAdapter` now works better when ProGuard has obfuscated enum fields ([#​1495](https://togithub.com/google/gson/issues/1495)). ### [`v2.8.7`](https://togithub.com/google/gson/blob/master/CHANGELOG.md#Version-287) - Fixed `ISO8601UtilsTest` failing on systems with UTC+X. - Improved javadoc for `JsonStreamParser`. - Updated proguard.cfg ([#​1693](https://togithub.com/google/gson/issues/1693)). - Fixed `IllegalStateException` in `JsonTreeWriter` ([#​1592](https://togithub.com/google/gson/issues/1592)). - Added `JsonArray.isEmpty()` ([#​1640](https://togithub.com/google/gson/issues/1640)). - Added new test cases ([#​1638](https://togithub.com/google/gson/issues/1638)). - Fixed OSGi metadata generation to work on JavaSE < 9 ([#​1603](https://togithub.com/google/gson/issues/1603)). ### [`v2.8.6`](https://togithub.com/google/gson/blob/master/CHANGELOG.md#Version-286) *2019-10-04* [GitHub Diff](https://togithub.com/google/gson/compare/gson-parent-2.8.5...gson-parent-2.8.6) - Added static methods `JsonParser.parseString` and `JsonParser.parseReader` and deprecated instance method `JsonParser.parse` - Java 9 module-info support ### [`v2.8.5`](https://togithub.com/google/gson/blob/master/CHANGELOG.md#Version-285) *2018-05-21* [GitHub Diff](https://togithub.com/google/gson/compare/gson-parent-2.8.4...gson-parent-2.8.5) - Print Gson version while throwing AssertionError and IllegalArgumentException - Moved `utils.VersionUtils` class to `internal.JavaVersion`. This is a potential backward incompatible change from 2.8.4 - Fixed issue [https://github.com/google/gson/issues/1310](https://togithub.com/google/gson/issues/1310) by supporting Debian Java 9 ### [`v2.8.4`](https://togithub.com/google/gson/blob/master/CHANGELOG.md#Version-284) *2018-05-01* [GitHub Diff](https://togithub.com/google/gson/compare/gson-parent-2.8.3...gson-parent-2.8.4) - Added a new FieldNamingPolicy, `LOWER_CASE_WITH_DOTS` that mapps JSON name `someFieldName` to `some.field.name` - Fixed issue [https://github.com/google/gson/issues/1305](https://togithub.com/google/gson/issues/1305) by removing compile/runtime dependency on `sun.misc.Unsafe` ### [`v2.8.3`](https://togithub.com/google/gson/blob/master/CHANGELOG.md#Version-283) *2018-04-27* [GitHub Diff](https://togithub.com/google/gson/compare/gson-parent-2.8.2...gson-parent-2.8.3) - Added a new API, `GsonBuilder.newBuilder()` that clones the current builder - Preserving DateFormatter behavior on JDK 9 - Numerous other bugfixes ### [`v2.8.2`](https://togithub.com/google/gson/blob/master/CHANGELOG.md#Version-282) *2017-09-19* [GitHub Diff](https://togithub.com/google/gson/compare/gson-parent-2.8.1...gson-parent-2.8.2) - Introduced a new API, `JsonElement.deepCopy()` - Numerous other bugfixes