matomo-org / matomo-sdk-android

SDK for Android to measure your apps with Matomo. Works on Android phones, tablets, Fire TV sticks, and more!
BSD 3-Clause "New" or "Revised" License
386 stars 163 forks source link

Bump org.json:json from 20220924 to 20230227 #403

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps org.json:json from 20220924 to 20230227.

Release notes

Sourced from org.json:json's releases.

20230227

Pull Request Description
#723 Protect JSONML from stack overflow exceptions caused by recursion
#720 Limit the XML nesting depth for CVE-2022-45688
#711 Revert pull 707 - interviewbit spam
#704 Move javadoc comments above the interface definition to make it visible
#703 Update Releases.md for JSONObject(Map): Throws NPE if key is null
#696 Update JSONPointerTest for NonDex compatibility
#694 Pretty print XML
#692 Example.md syntax highlight and indentation
#691 Create unit tests for various number formats
Changelog

Sourced from org.json:json's changelog.

20230227 Fix for CVE-2022-45688 and recent commits

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
codecov-commenter commented 1 year ago

Codecov Report

Merging #403 (60226b7) into master (d1f739f) will not change coverage. The diff coverage is n/a.

:mega: This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@            Coverage Diff            @@
##             master     #403   +/-   ##
=========================================
  Coverage     87.15%   87.15%           
  Complexity      372      372           
=========================================
  Files            32       32           
  Lines          1432     1432           
  Branches        164      164           
=========================================
  Hits           1248     1248           
  Misses          115      115           
  Partials         69       69           

:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more