Skip to content

build(deps): bump org.json:json from 20251224 to 20260814 - #582

Merged
jcputney merged 1 commit into
mainfrom
dependabot/maven/org.json-json-20260814
Sep 9, 2026
Merged

jcputney merged 1 commit into
mainfrom
dependabot/maven/org.json-json-20260814

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026 •

Copy link
Copy Markdown
Contributor

Bumps org.json:json from 20251224 to 20260814.

Release notes

Sourced from org.json:json's releases.

20260814

Pull Request Description
#1070 Fix XML.unescape for valid whitespace chars

20260719

Pull Request Description
#1069 pre-release-20260719 prep for next release
#1068 Max number length config for BigInteger and BigDecimal
#1067 bound BigDecimal→BigInteger expansion in objectToBigInteger (completes CVE-2026-59171 fix)
#1065 Fixes CVE-2026-59171
#1062 Refactor CDL row serialization for readability
#1061 Restore lenient jsonarray allow consecutive commas and insert null
#1058 Docs and warnings cleanup

20260522

Pull Request Description
#1054 pre-release-20260522 prep for next release
#1053 update security.md with key data
#1046 Validate XML numeric character references before string construction
#1044 Ignore static fields in JSONObject.fromJson()
#1041 Enhance README with license clarification
#1039 Fix XML forceList parsing issue
#1038 Fix input validation in XMLTokener.unescapeEntity()
#1037 Fix ClassCastException in JSONML.toJSONArray and toJSONObject
#1029 add badge to external hosted javadoc
#1028 Refactoring: Fix sonarqube reliability issues
#1027 Save/restore default locale in test
Changelog

Sourced from org.json:json's changelog.

20260814 Fixes XML.unescape whitespace handling

20260719 Fixes CVE-2026-59171 very large BigInteger, BigDecimal

20260522 Publish key data, recent commits for minor fixes

Commits
  • 6c14048 Merge pull request #1073 from stleary/pre-release-20260814
  • 34efda6 pre-release-20260814 initial commit
  • 22ab2fb Update jar file link in README
  • 392a352 Fix formatting of the latest release jar file link
  • b594a32 Merge pull request #1070 from dong0713/fix/xml-unescape-whitespace-control-chars
  • 94854a1 Fix XML.unescape rejecting valid whitespace numeric character references
  • 1795e8c Merge pull request #1069 from stleary/pre-release-20260719
  • da757c6 pre-release-20260719 oops forgot to update new unit tests for strict mode
  • d24bc9e pre-release-20260719 initial commit
  • 80efb52 Merge pull request #1068 from stleary/max-number-length-config
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 18, 2026
@github-actions github-actions Bot added the build-ci Build or CI changes label Aug 18, 2026
@github-actions

github-actions Bot commented Aug 18, 2026 •

Copy link
Copy Markdown
Contributor

📊 Benchmark Results

Triggered by workflow run.

Benchmark Score Error Unit
🟢 detectModuleType 0.002 ±0.000 ms/op
🟢 parseModule 2.060 ±7.872 ms/op
🟢 detectModuleType 0.000 ±0.000 ms/op
🟢 parseModule 0.117 ±0.450 ms/op
🟢 detectModuleType 0.231 ±0.558 ms/op
🟢 parseModule 0.659 ±2.884 ms/op
🟢 detectModuleType 0.176 ±0.389 ms/op
🟢 parseModule 1.695 ±8.148 ms/op

✅ All benchmarks passed performance thresholds.

@dependabot
dependabot Bot force-pushed the dependabot/maven/org.json-json-20260814 branch 4 times, most recently from f5427a7 to 03de798 Compare August 24, 2026 11:12
@dependabot
dependabot Bot force-pushed the dependabot/maven/org.json-json-20260814 branch 3 times, most recently from 5f134df to fa805e7 Compare August 31, 2026 11:12
@dependabot
dependabot Bot force-pushed the dependabot/maven/org.json-json-20260814 branch 8 times, most recently from 05560b0 to 4315f68 Compare September 8, 2026 11:11
Bumps [org.json:json](https://github.com/douglascrockford/JSON-java) from 20251224 to 20260814.
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](stleary/JSON-java@2025122...2026081)

---
updated-dependencies:
- dependency-name: org.json:json
  dependency-version: '20260814'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/org.json-json-20260814 branch from 4315f68 to 723b378 Compare September 9, 2026 21:17
@jcputney
jcputney merged commit cbdfa72 into main Sep 9, 2026
15 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/org.json-json-20260814 branch September 9, 2026 23:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build-ci Build or CI changes dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant