Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 16, 2023

Bumps fastjson from 1.2.76 to 2.0.23.

Release notes

Sourced from fastjson's releases.

fastjson 2.0.23版本发布

这又是一个BUG FIX功能增强版本,大家根据需要升级。

Issues

  1. 修复通过JSONType指定FieldBased某些场景下导致空指针的问题 #1054
  2. 修复某些场景toJavaObject会导致内存溢出的问题 #1047
  3. 修复2.0.22引入的泛型参数为BigDecimal时序列化异常的问题 #1049
  4. 修复JSON.toJSONString(object, filter, ...features)存在filter时features不生效 #1030
  5. 修复JSON.parseArray某些场景处理非法输入不报错的问题 #1058
  6. 增强对JSONPath.remove的支持 #1059
  7. 增掐对日期格式不匹配场景的支持 #1060 #1067
  8. 修复输入类型不匹配的支持 #1061
  9. 增加LocalDateTime格式自动识别格式yyyyMMddHHmmssSSS #1065
  10. 增加none-string key Map类型对autotype的支持 #1069
  11. 修复JSONPath在[*]嵌套语法extract某些场景结果不对的问题 #1070
  12. 修复offset不为0时处理注释不对的问题 #1073

MAVEN依赖配置

<dependency>
	<groupId>com.alibaba.fastjson2</groupId>
	<artifactId>fastjson2</artifactId>
	<version>2.0.23</version>
</dependency>
  • 1.x 兼容版本
<dependency>
	<groupId>com.alibaba</groupId>
	<artifactId>fastjson</artifactId>
	<version>2.0.23</version>
</dependency>
  • Spring 5 extension配置
<dependency>
	<groupId>com.alibaba</groupId>
	<artifactId>fastjson2-extension-spring5</artifactId>
	<version>2.0.23</version>
</dependency>
  • Spring 6 extension配置
<dependency>
	<groupId>com.alibaba</groupId>
	<artifactId>fastjson2-extension-spring6</artifactId>
</tr></table> 

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [fastjson](https://github.com/alibaba/fastjson2) from 1.2.76 to 2.0.23.
- [Release notes](https://github.com/alibaba/fastjson2/releases)
- [Commits](https://github.com/alibaba/fastjson2/commits/2.0.23)

---
updated-dependencies:
- dependency-name: com.alibaba:fastjson
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 16, 2023
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 20, 2023

Superseded by #60.

@dependabot dependabot bot closed this Feb 20, 2023
@dependabot dependabot bot deleted the dependabot/maven/com.alibaba-fastjson-2.0.23 branch February 20, 2023 12:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant