dependabot[bot] opened a new pull request, #13989: URL: https://github.com/apache/dubbo/pull/13989
Bumps [com.alibaba.fastjson2:fastjson2](https://github.com/alibaba/fastjson2) from 2.0.47 to 2.0.48. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/alibaba/fastjson2/releases";>com.alibaba.fastjson2:fastjson2's releases</a>.</em></p> <blockquote> <h2>fastjson 2.0.48发布</h2> <p>这又是一个性能优化 & Bug Fixed的版本，这个版本中，JSON.toJSONString和JSONB.toByte和JSONB.parseObject的性能有提升。</p> <h1>Issues</h1> <ol> <li>修复JSONType注解指定自定义序列化无效的问题 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2269";>#2269</a></li> <li>序列化OOM时ErrorMessage提示配置Feature.LargeObject <a href="https://redirect.github.com/alibaba/fastjson2/issues/2331";>#2331</a></li> <li>修复使用JSONB解析带format的Timestamp类会报错的问题 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2332";>#2332</a></li> <li>修复JSONWriter.Feature.BrowserCompatible在BigDecimal带小数的大数不生效的问题 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2283";>#2283</a></li> <li>新增JSONReader.Feature.NonErrorOnNumberOverflow，数值溢出时不报错 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2305";>#2305</a></li> <li>修复Set<!-- raw HTML omitted -->类型反序列化报错的问题 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2302";>#2302</a></li> <li>修复Fastjson1 带 $ref 的数据在 fastjson2 无法正确反序列化的问题 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2296";>#2296</a></li> <li>增强对LocalTime日期反序列化多种格式的识别 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2310";>#2310</a></li> <li>修复LocalDateTime类型Locale不生效的问题</li> <li>新增JSONWriter.Feature.SortMapEntriesByKeys，用于签名场景排序 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2318";>#2318</a></li> <li>反序列化float/double类型支持输入NaN <a href="https://redirect.github.com/alibaba/fastjson2/issues/2309";>#2309</a> <a href="https://redirect.github.com/alibaba/fastjson2/issues/2300";>#2300</a></li> <li>修复枚举类型自定义反序列化类型参数为空的问题 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2329";>#2329</a></li> <li>修增JSONReader.Feature.EmptyStringAsNull，可以将空字符串转换为null <a href="https://redirect.github.com/alibaba/fastjson2/issues/2317";>#2317</a></li> <li>修复Spring6版的FastJsonHttpMessageConverter存在问题，导致请求头不返回Content-Length <a href="https://redirect.github.com/alibaba/fastjson2/issues/2284";>#2284</a></li> <li>修复定制序列化时属性值如果是子类会失效 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2286";>#2286</a></li> <li>修复JSONObject类型不支持输入转以后的String类型输入（兼容） <a href="https://redirect.github.com/alibaba/fastjson2/issues/2334";>#2334</a></li> <li>修复配置JSONField(jsonDirect=true)时报错的问题 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2347";>#2347</a></li> <li>修复SupportSmartMatch全局配置无效的问题 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2349";>#2349</a></li> <li>修复泛型Class反序列化报错的问题 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2356";>#2356</a></li> <li>修复ObjectReaderCreator.createFieldReader偶发ConcurrentModificationException的问题 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2358";>#2358</a></li> <li>修复JSONField配置JSONReader.Feature.FieldBased 无效的问题 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2350";>#2350</a></li> <li>支持关闭解析Gson Annotation的开关 <a href="https://redirect.github.com/alibaba/fastjson2/issues/2346";>#2346</a></li> </ol> <h1>MAVEN依赖配置</h1> <pre lang="xml"><code><dependency> <groupId>com.alibaba.fastjson2</groupId> <artifactId>fastjson2</artifactId> <version>2.0.48</version> </dependency> </code></pre> <ul> <li>android5针对优化版本 这个版本和android4兼容版本基本一致，只是使用了java.nio.charset.StandardCharsets，后续将会不再升级android4兼容版本。</li> </ul> <pre lang="xml"><code><dependency> <groupId>com.alibaba.fastjson2</groupId> <artifactId>fastjson2</artifactId> <version>2.0.48.android5</version> </dependency> </code></pre> <ul> <li>android8针对优化版本 这个版本支持java.time和Optional</li> </ul> <pre lang="xml"><code><dependency> </tr></table> </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/alibaba/fastjson2/commit/d0313b4d80b55df4fe390a6cc9de2d586294c1bd";><code>d0313b4</code></a> 2.0.48 release</li> <li><a href="https://github.com/alibaba/fastjson2/commit/1d9105044442f9b74aff88078bc06f52db51f2cc";><code>1d91050</code></a> fix testcase</li> <li><a href="https://github.com/alibaba/fastjson2/commit/1e65fd094762537bab9305c299fe6e182977fb66";><code>1e65fd0</code></a> fix ObjectReaderCreator createObjectReader for Class<T></li> <li><a href="https://github.com/alibaba/fastjson2/commit/f55184d3f15d1298eff7a9d7e5f04b318f6602fe";><code>f55184d</code></a> fix writeWithFilter with SortMapEntriesByKeys</li> <li><a href="https://github.com/alibaba/fastjson2/commit/53c25d980bca4c7983539f60777de02a4d40e051";><code>53c25d9</code></a> fix readList<String> skipNull</li> <li><a href="https://github.com/alibaba/fastjson2/commit/534063d3a31ea48c9254631374d564804a793dfe";><code>534063d</code></a> improved LocalTime deserialize, for issue <a href="https://redirect.github.com/alibaba/fastjson2/issues/2310";>#2310</a></li> <li><a href="https://github.com/alibaba/fastjson2/commit/ea2a0327039cfa1c5af7c44921f5c0ed26d36834";><code>ea2a032</code></a> update projects using</li> <li><a href="https://github.com/alibaba/fastjson2/commit/ff8cb68b9ab5b22e2c8bd3d49744d90af697a0e9";><code>ff8cb68</code></a> Bump org.apache.flink:flink-json from 1.18.1 to 1.19.0</li> <li><a href="https://github.com/alibaba/fastjson2/commit/d569f8c9e15e8bee6b7cefeadbc6eb58c91ac25b";><code>d569f8c</code></a> Bump org.apache.maven.plugins:maven-assembly-plugin from 3.7.0 to 3.7.1</li> <li><a href="https://github.com/alibaba/fastjson2/commit/4f0ca3d7747995abc03f94d0a9ce698ab6c0b75a";><code>4f0ca3d</code></a> Bump net.minidev:json-smart from 2.5.0 to 2.5.1</li> <li>Additional commits viewable in <a href="https://github.com/alibaba/fastjson2/compare/2.0.47...2.0.48";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
