Skip to content

Bump org.json:json from 20230618 to 20231013 - #40

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.json-json-20231013
Open

Bump org.json:json from 20230618 to 20231013#40
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.json-json-20231013

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubOct 17, 2023

Copy link
Copy Markdown

Bumps org.json:json from 20230618 to 20231013.

Release notes

Sourced from org.json:json's releases.

20231013

Pull RequestDescription
#793Reverted #761
#792update the docs for release 20231013
#783optLong vs getLong inconsistencies
#782Fix XMLTest.testIndentComplicatedJsonObjectWithArrayAndWithConfig() for Windows
#779add validity check for JSONObject constructors
#778Fix XMLTest.testIndentComplicatedJsonObjectWithArrayAndWithConfig() for Windows
#776Update [JUnit to version 4.13.2
#774Removing unneeded synchronization
#773Add optJSONArray method to JSONObject with a default value
#772Disallow nested objects and arrays as keys in objects
#779Unit test cleanup
#769Addressed Java 17 compile warnings
#764Update CodeQL action version
#761Add module-info
#759JSON parsing should detect embedded 
#753Updated new object methods
#752Fixes possible unit test bug when compiling/testing on Windows
Changelog

Sourced from org.json:json's changelog.

20231013 First release with minimum Java version 1.8. Recent commits, including fixes for CVE-2023-5072.

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [org.json:json](https://github.com/douglascrockford/JSON-java) from 20230618 to 20231013.
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](https://github.com/douglascrockford/JSON-java/commits)
---
updated-dependencies:
- dependency-name: org.json:json
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added the dependencies Pull requests that update a dependency file label Oct 17, 2023
@github-actions

Copy link
Copy Markdown

Thank you, @dependabot[bot], for the pull request. We will take a look at it and get back to you shortly.

@sonarqubecloud

Copy link
Copy Markdown

Kudos, SonarCloud Quality Gate passed! Quality Gate passed

BugA0 Bugs
VulnerabilityA0 Vulnerabilities
Security HotspotA0 Security Hotspots
Code SmellA0 Code Smells

No Coverage information No Coverage information
0.0%0.0% Duplication

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@Szymon-Przesmycki