search

wanglingsong / JsonSurfer

A streaming JsonPath processor in Java
MIT License
292 stars 55 forks source link

Bump the minor-updates group with 10 updates #94

Closed dependabot[bot] closed 9 months ago

dependabot[bot] commented 9 months ago

Bumps the minor-updates group with 10 updates:

Package From To
ch.qos.logback:logback-classic 1.4.11 1.4.14
org.mockito:mockito-core 5.5.0 5.8.0
org.apache.maven.plugins:maven-javadoc-plugin 3.6.0 3.6.2
com.fasterxml.jackson.core:jackson-databind 2.15.2 2.16.0
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor 2.15.2 2.16.0
com.fasterxml.jackson.dataformat:jackson-dataformat-smile 2.15.2 2.16.0
com.fasterxml.jackson.dataformat:jackson-dataformat-ion 2.15.2 2.16.0
com.fasterxml.jackson.dataformat:jackson-dataformat-protobuf 2.15.2 2.16.0
com.fasterxml.jackson.dataformat:jackson-dataformat-avro 2.15.2 2.16.0
com.alibaba:fastjson 2.0.40 2.0.42

Updates ch.qos.logback:logback-classic from 1.4.11 to 1.4.14

Commits
  • 407f935 prepare release 1.4.14
  • 7018a36 fix missing deseialization filter init call, enable commented out test case
  • 8a746eb start work on 1.4.14-SNAPSHOT
  • 7ee000a prepare release 1.4.13
  • 867bf58 remove superflus system.out call
  • 88abf59 prepare release 1.4.12
  • 2cd8cab cater for array size marked with -1
  • 9c782b4 prevent DOS attacks using on malicious serialized input
  • f6d690d further support for Virtual threads, issues 737
  • 9a1fc44 add support for Virtual threads
  • Additional commits viewable in compare view


Updates org.mockito:mockito-core from 5.5.0 to 5.8.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.8.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.8.0

v5.7.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.7.0

v5.6.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.6.0

... (truncated)

Commits
  • aecf6b5 Handle mismatch of number of type arguments (#3190)
  • d742cc8 Bump com.diffplug.spotless from 6.23.1 to 6.23.2 (#3188)
  • 12ac4d6 Bump com.diffplug.spotless from 6.23.0 to 6.23.1 (#3186)
  • d187f7b Bump actions/setup-java from 3 to 4 (#3185)
  • 74633b8 Throw error when mocking sealed abstract enum (#3167)
  • 290a8e1 Apply spotless to all java projects (#3184)
  • b6554b2 Fix interference between spies when spying on records (#3173)
  • bfee15d Bump com.diffplug.spotless from 6.22.0 to 6.23.0 (#3182)
  • a0cc22d Add module for Java 21 tests (#3180)
  • ed10195 Bump org.jetbrains.kotlin:kotlin-gradle-plugin from 1.9.20 to 1.9.21 (#3176)
  • Additional commits viewable in compare view


Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.6.0 to 3.6.2

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.6.2

🐛 Bug Fixes

📦 Dependency updates

Commits
  • 28a89f1 [maven-release-plugin] prepare release maven-javadoc-plugin-3.6.2
  • 16ca43f [maven-release-plugin] prepare for next development iteration
  • 88bc4a5 Align IT after MJAVADOC-716
  • 4b881e8 Bump org.codehaus.mojo:mrm-maven-plugin from 1.5.0 to 1.6.0
  • 45a8d29 [MJAVADOC-716] Fix stale files detection failing because of the added newline...
  • afb2dee [MJAVADOC-713] Skipping Javadoc reportset leaves empty Javadoc link in site
  • 4bad23f [MJAVADOC-730] Deprecate parameter "old"
  • 8364883 [MJAVADOC-777] Bump org.codehaus.plexus:plexus-java from 1.1.2 to 1.2.0 (#245)
  • 6fa9c86 [MJAVADOC-762] don't share state between tests (#218)
  • 05b12e8 [MJAVADOC-726] exclude velocity (#243)
  • Additional commits viewable in compare view


Updates com.fasterxml.jackson.core:jackson-databind from 2.15.2 to 2.16.0

Commits


Updates com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 2.15.2 to 2.16.0

Commits


Updates com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.15.2 to 2.16.0

Commits


Updates com.fasterxml.jackson.dataformat:jackson-dataformat-ion from 2.15.2 to 2.16.0

Commits


Updates com.fasterxml.jackson.dataformat:jackson-dataformat-protobuf from 2.15.2 to 2.16.0

Commits


Updates com.fasterxml.jackson.dataformat:jackson-dataformat-avro from 2.15.2 to 2.16.0

Commits


Updates com.alibaba:fastjson from 2.0.40 to 2.0.42

Release notes

Sourced from com.alibaba:fastjson's releases.

fastjson 2.0.42发布

这又是例行的BUG修复小版本，大家按需升级。

Issues

  1. 修复JSONB协议反序列化读取java.time类型的NULL值报错的问题 #1855
  2. 反序列化增加JSONReader.Feature.ErrorOnUnknownProperties，支持当输入非预期字段时报错 #1944
  3. 修复使用兼容包的JSONPath.set不兼容的问题 #1922
  4. 修复反序列化超过256位小数时报错的问题，缺省支持2048位小数 #1919
  5. 修复序列化时List类型字段配置JSONField.serializeUsing无效的问题 #1948
  6. 修复序列化时List类型字段配置JSONField.serializeFeatures WriteClassName无效的问题 #1947
  7. 修复序列化时WriteNullNumberAsZero和WriteLongAsString组合不生效的问题 #1893
  8. 修复JSONPath在连续数组访问时空值报错的问题 #1965
  9. 修复不支持多行注释的问题 #1954
  10. 修复输入对象类型输入空数组"[]"报错的问题（兼容）#1971
  11. 修复处理JacksonAnnotation的问题 #1985
  12. 修复LocalDate类型反序列化输入'Z'后缀格式UTC时区结果不对的问题 #1993

MAVEN依赖配置

<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.42</version>
</dependency>
  • android4兼容版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.42.android4</version>
</dependency>
  • 1.x 兼容版本
<dependency>
    <groupId>com.alibaba</groupId>
    <artifactId>fastjson</artifactId>
    <version>2.0.42</version>
</dependency>
  • Spring 5 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring5</artifactId>
</tr></table>

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
wanglingsong commented 9 months ago

@chillb0nes any idea to fix it?

chillb0nes commented 9 months ago

Hmm... I'm pretty sure original github actions config was copy-pasted from github documentation, so I'm surprised it does not work.

I opened https://github.com/wanglingsong/JsonSurfer/pull/95

Also you may want to rerun dependabot scanning manually after merge, check https://stackoverflow.com/a/77502174

dependabot[bot] commented 9 months ago

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.