build(deps-dev): bump json from 20210307 to 20230227 in /tck

[dependabot[bot]]

Bumps json from 20210307 to 20230227.

Release notes

Sourced from json's releases.

20230227

Pull Request	Description
#723	Protect JSONML from stack overflow exceptions caused by recursion
#720	Limit the XML nesting depth for CVE-2022-45688
#711	Revert pull 707 - interviewbit spam
#704	Move javadoc comments above the interface definition to make it visible
#703	Update Releases.md for JSONObject(Map): Throws NPE if key is null
#696	Update JSONPointerTest for NonDex compatibility
#694	Pretty print XML
#692	Example.md syntax highlight and indentation
#691	Create unit tests for various number formats

20220924

Pull Request	Description
#688	Update copyright to Public Domain
#687	Fix a typo
#685	JSONObject map type unit tests
#684	Remove v7 build from pipeline
#682	JSONString similarity
#675	stleary/JSON-java#675

20220320

Pull Request	Description
#660	Wrap StackOverflow with JSONException

20211205

Pull Request	Description
#651	IdentityHashSet for JSONObject cycle detection
#646	XMLParserConfiguration defined json arrays option
#645	Handle circular references in Java beans
#640	Unit tests for multiple backslashes in JSONPointer
#637	Reorganized README.md
#634	Update README with Unix examples
#631	Refactor JSONPointerTest
#626	Add CODE_OF_CONDUCT.md
#622	Clean up readme.md
#621	Clean up comments
#617	JSONObject.similar() numeric compare bug fix
#613	JsonObject.similar() number entry check bug fix
#610	optJSONObject() add default value
#607	Add Security.md policy page
#606	Clean up comments, add suppressWarning annotation
#604	Fixed incorrect cast getting float from array
#601	Added Examples.md for new users

... (truncated)

Changelog

Sourced from json's changelog.

20230227 Fix for CVE-2022-45688 and recent commits

20220924 New License - public domain, and some minor updates

20220320 Wrap StackOverflow with JSONException

20211205 Recent commits and some bug fixes for similar()

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/jakartaee/faces/network/alerts).

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.