dependabot[bot] opened a new pull request, #27890: URL: https://github.com/apache/camel/pull/27890
Bumps [dev.toonformat:jtoon](https://github.com/toon-format/toon-java) from 2.0.5 to 2.0.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/toon-format/toon-java/releases";>dev.toonformat:jtoon's releases</a>.</em></p> <blockquote> <h2>v2.0.7</h2> <p>Release 2.0.7</p> <h2>v2.0.6</h2> <p>Release 2.0.6</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/toon-format/toon-java/blob/main/CHANGELOG.md";>dev.toonformat:jtoon's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>This project adheres to Semantic Versioning and follows a Keep a Changelog-like format.</p> <h2>[Unreleased]</h2> <h2>[2.0.6] - 2026-10-07</h2> <h3>Changed</h3> <ul> <li>Conformance raised from spec 4.1.2 to <strong>4.3</strong>. The 23 conformance fixture files are byte-identical to the spec repository at <code>v4.3.0</code> (<code>dfbc459</code>, including the four pinned fixture cases).</li> <li><strong>Array-header classification follows §5.2 of spec 4.3</strong>: a line whose first unquoted <code>[</code> precedes its first unquoted colon must match the §6 grammar, or strict mode rejects it (<code>a[1:</code> with an unclosed bracket segment, <code>a[2:]{x}</code> without its colon) while non-strict decoders read it as a key-value line. Any whitespace – space, tab or NBSP – between a key and its bracket segment now prevents array-header interpretation (§5.2, §6, §14.2).</li> <li><strong>Non-strict decoding no longer returns <code>null</code> on invalid input.</strong> It applies the leniencies the spec names – such as count mismatches, indentation depth jumps and skipped over-indented lines – and throws <code>IllegalArgumentException</code> wherever the spec names none (§14).</li> </ul> <h3>Fixed</h3> <ul> <li> <p><strong>The encoder no longer drops nested arrays that mix primitives and objects</strong> inside list items.</p> </li> <li> <p><strong>A line without an unquoted colon is a scalar line, never a header</strong>, and a scalar line outside root primitive position is an error in any mode, including among skipped over-indented lines and as a root scalar followed by other lines (§5, §5.2, §14.2).</p> </li> <li> <p><strong>A <code>[</code>-led line without a well-formed header is a key-value line</strong>: a lone bracket stays part of the key, and in non-strict mode a malformed bracket segment such as <code>[03]</code> or <code>[invalid]</code> does too. An unclosed quote in an unquoted key opens a span to the end of the line, so no header follows it (§5.2, §6).</p> </li> <li> <p><strong>Non-strict mode adopts the depth of a jumped first line</strong> in objects, lists, tabular rows and keyed entries; an indented first line of the document is over-indented, <code>null</code> and <code>[]</code> included (§8, §14.2).</p> </li> <li> <p><strong>Strict mode rejects a blank line anywhere inside a list's span</strong> and an over-indented line under a list item, while non-strict mode keeps a list item's fields after a blank line (§12, §14.2).</p> </li> <li> <p><strong>A field list ends its header line</strong>: strict mode rejects inline content after it (<code>items[1]{a}: 1</code>) and a malformed keyless header (<code>[1]{a}}:</code>) instead of dropping what follows, and non-strict mode reads such a line as a key-value pair. A field list spanning the colon (<code>[1]{x:y}</code>) and a keyless header with a field list as a list item (<code>- [1]{a}:</code>) are strict-mode errors that non-strict decoders read as key-value pairs (§6, §14.2).</p> </li> <li> <p><strong><code>maxArraySize</code> bounds the actual element count</strong> of inline, list, tabular and keyed forms in either mode; only the comparison with the declared <code>[N]</code> stays strict-only.</p> </li> <li> <p><strong>Header parsing:</strong> empty field entries and malformed nested field groups are rejected, a length beyond the <code>long</code> range still forms a header, and a line below a bare <code>key[N]:</code> header carries no values (§6, §9).</p> </li> <li> <p><strong>Key and value tokens:</strong> <code>: 1</code> decodes as the empty key, <code>\uXXXX</code> escapes with a surrogate or a non-ASCII digit are rejected, a carriage return before CRLF is content, a backslash outside quotes is a literal character (<code>a\: b</code> has the key <code>a\</code>), a list ends at a hyphen without a following space, and tabular rows sit exactly one level below their header in strict mode (§7, §9, §12).</p> </li> <li> <p><strong>Documentation code examples corrected:</strong> array headers no longer carry an invalid comma (<code>users[2]{id,name}</code> — comma is implied), tab-delimited examples contain real tab characters instead of spaces, the pipe tabular header declares its field list with pipes (<code>users[2|]{id|name}</code>), the multi-value value catalogs are valid inline arrays, and the README tab output matches the encoder byte-for-byte.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/toon-format/toon-java/commit/6f31d63b1a892eb87175401b9619ad5a8496a135";><code>6f31d63</code></a> Spec 4.4.0 (<a href="https://redirect.github.com/toon-format/toon-java/issues/220";>#220</a>)</li> <li><a href="https://github.com/toon-format/toon-java/commit/15b18b0e6f3861566b2fc9db5110b5cfadc7cda9";><code>15b18b0</code></a> feat: spec v4.3 conformance, docs example fixes, release 2.0.6 (<a href="https://redirect.github.com/toon-format/toon-java/issues/219";>#219</a>)</li> <li><a href="https://github.com/toon-format/toon-java/commit/21ca532e05881f9044cd8ebc8f2e5d15b0395170";><code>21ca532</code></a> feat: support spec v4.2.1 (<a href="https://redirect.github.com/toon-format/toon-java/issues/217";>#217</a>)</li> <li><a href="https://github.com/toon-format/toon-java/commit/c0f6ca03f7971ea47b5419271beb54b730730154";><code>c0f6ca0</code></a> Fix Issues (<a href="https://redirect.github.com/toon-format/toon-java/issues/216";>#216</a>)</li> <li><a href="https://github.com/toon-format/toon-java/commit/b081df4a0a1e8508caa0a06a75fad0b31d19ff8f";><code>b081df4</code></a> auto: update dependency verification metadata [skip ci]</li> <li><a href="https://github.com/toon-format/toon-java/commit/c13f016cb98eb5e213f3704b0a05e2def1654aab";><code>c13f016</code></a> chore(deps): bump gradle-wrapper from 9.7.1 to 9.8.0 (<a href="https://redirect.github.com/toon-format/toon-java/issues/204";>#204</a>)</li> <li><a href="https://github.com/toon-format/toon-java/commit/010603b2dfdf7828828f0c13442da291732955fc";><code>010603b</code></a> docs: update version to 2.0.5 in README</li> <li>See full diff in <a href="https://github.com/toon-format/toon-java/compare/v2.0.5...v2.0.7";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
