chore(deps): bump org.jetbrains.kotlinx:kotlinx-serialization-json from 1.8.0 to 1.11.0 #13

Open

dependabot[bot] wants to merge 1 commit from dependabot/gradle/org.jetbrains.kotlinx-kotlinx-serialization-json-1.11.0 into main

dependabot[bot] commented

2026-08-24 15:54:27 +00:00

(Migrated from github.com)

Bumps org.jetbrains.kotlinx:kotlinx-serialization-json from 1.8.0 to 1.11.0.

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's releases.

1.11.0

This release is based on Kotlin 2.3.20 and provides a new Json exceptions API and some bugfixes and improvements.

Expose Json exceptions structure

To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes JsonException, JsonDecodingException, and JsonEncodingException are now public. They have relevant public properties, such as shortMessage, path, offset, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: #1930, #1877.

Ability to hide user input from exception messages for security/privacy reasons.

Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property exceptionsWithDebugInfo is added to JsonConfiguration. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See #2590 for more details.

Bugfixes and improvements

CBOR: Relax value range check when decoding numbers (#3167)

Use a specialized writeDecimalLong method for IO stream integrations in Json (#3152)

1.10.0

This release is based on Kotlin 2.3.0 and contains all of the changes from 1.10.0-RC. The only additional change is a fix for ProtoBuf packing of Kotlin unsigned types (#3079). Big thanks to KosmX for contributing the fix.

For your convenience, the changelog for 1.10.0-RC is duplicated below:

Stabilization of APIs

kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs. The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:

Json configuration options: decodeEnumsCaseInsensitive, allowTrailingComma, allowComments, and prettyPrintIndent. (#3100)

@EncodeDefault annotation and its modes. (#3106)

JsonUnquotedLiteral constructor function (#2900)

JsonPrimitive constructor function overloads that accept unsigned types. (#3117)

JSON DSL functions on JsonElement with Nothing? overloads. (#3117)

Readiness for return value checker

Kotlin 2.3.0 introduces a new feature aimed at helping you to catch bugs related to the accidentally ignored return value of the function. kotlinx-serialization 1.10.0-RC code is fully marked for this feature, meaning that you can get warnings for unused function calls like Json.encodeToString(...). To get the warnings, the feature has to be enabled in your project as described here.

Polymorphism improvements

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's changelog.

1.11.0 / 2026-04-10

This release is based on Kotlin 2.3.20 and provides new Json exceptions API and some bugfixes and improvements.

Expose Json exceptions structure

To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes JsonException, JsonDecodingException, and JsonEncodingException are now public. They have relevant public properties, such as shortMessage, path, offset, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: #1930, #1877.

Ability to hide user input from exception messages for security/privacy reasons.

Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property exceptionsWithDebugInfo is added to JsonConfiguration. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See #2590 for more details.

Bugfixes and improvements

CBOR: Relax value range check when decoding numbers (#3167)

Use a specialized writeDecimalLong method for IO stream integrations in Json (#3152)

1.10.0 / 2026-01-21

This release is based on Kotlin 2.3.0 and contains all of the changes from 1.10.0-RC. The only additional change is a fix for ProtoBuf packing of Kotlin unsigned types (#3079). Big thanks to KosmX for contributing the fix.

For your convenience, the changelog for 1.10.0-RC is duplicated below:

Stabilization of APIs

kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs. The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:

Json configuration options: decodeEnumsCaseInsensitive, allowTrailingComma, allowComments, and prettyPrintIndent. (#3100)

@EncodeDefault annotation and its modes. (#3106)

JsonUnquotedLiteral constructor function (#2900)

JsonPrimitive constructor function overloads that accept unsigned types. (#3117)

JSON DSL functions on JsonElement with Nothing? overloads. (#3117)

Readiness for return value checker

... (truncated)

Commits

6956af2 Prepare 1.11 release
390d84c Merge remote-tracking branch 'origin/master' into dev
431fe2d Use local repo for publishing (#3171)
05c12b6 Add usage attribute to "testRepositories" configuration
a4e1f08 Bump Kover version to 0.9.8 release (#3174)
304e858 Expose Json exceptions structure (#3145)
4a0338e Included G Play SDK verification file for core-jvm (#3169)
421f64c CBOR: Relax value range check when decoding numbers (#3167)
85a4f12 KT-84955: mark apple x64 tagets as deprecated error
bd38b0e Remove dead code
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.jetbrains.kotlinx:kotlinx-serialization-json](https://github.com/Kotlin/kotlinx.serialization) from 1.8.0 to 1.11.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Kotlin/kotlinx.serialization/releases">org.jetbrains.kotlinx:kotlinx-serialization-json's releases</a>.</em></p> <blockquote> <h2>1.11.0</h2> <p>This release is based on Kotlin 2.3.20 and provides a new Json exceptions API and some bugfixes and improvements.</p> <h2>Expose Json exceptions structure</h2> <p>To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes <code>JsonException</code>, <code>JsonDecodingException</code>, and <code>JsonEncodingException</code> are now public. They have relevant public properties, such as <code>shortMessage</code>, <code>path</code>, <code>offset</code>, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: <a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/1930">#1930</a>, <a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/1877">#1877</a>.</p> <h2>Ability to hide user input from exception messages for security/privacy reasons.</h2> <p>Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property <code>exceptionsWithDebugInfo</code> is added to <code>JsonConfiguration</code>. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See <a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/2590">#2590</a> for more details.</p> <h2>Bugfixes and improvements</h2> <ul> <li>CBOR: Relax value range check when decoding numbers (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3167">#3167</a>)</li> <li>Use a specialized writeDecimalLong method for IO stream integrations in Json (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3152">#3152</a>)</li> </ul> <h2>1.10.0</h2> <p>This release is based on Kotlin 2.3.0 and contains all of the changes from 1.10.0-RC. The only additional change is a fix for ProtoBuf packing of Kotlin unsigned types (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3079">#3079</a>). Big thanks to <a href="https://github.com/KosmX">KosmX</a> for contributing the fix.</p> <blockquote> <p>For your convenience, the changelog for 1.10.0-RC is duplicated below:</p> </blockquote> <h2>Stabilization of APIs</h2> <p>kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs. The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:</p> <ul> <li><code>Json</code> configuration options: <code>decodeEnumsCaseInsensitive</code>, <code>allowTrailingComma</code>, <code>allowComments</code>, and <code>prettyPrintIndent</code>. (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3100">#3100</a>)</li> <li><code>@EncodeDefault</code> annotation and its modes. (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3106">#3106</a>)</li> <li><code>JsonUnquotedLiteral</code> constructor function (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/2900">#2900</a>)</li> <li><code>JsonPrimitive</code> constructor function overloads that accept unsigned types. (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3117">#3117</a>)</li> <li>JSON DSL functions on <code>JsonElement</code> with <code>Nothing?</code> overloads. (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3117">#3117</a>)</li> </ul> <h2>Readiness for return value checker</h2> <p>Kotlin 2.3.0 <a href="https://kotlinlang.org/docs/whatsnew23.html#unused-return-value-checker">introduces a new feature</a> aimed at helping you to catch bugs related to the accidentally ignored return value of the function. kotlinx-serialization 1.10.0-RC code is fully marked for this feature, meaning that you can get warnings for unused function calls like <code>Json.encodeToString(...)</code>. To get the warnings, the feature has to be enabled in your project as <a href="https://kotlinlang.org/docs/unused-return-value-checker.html#configure-the-unused-return-value-checker">described here</a>.</p> <h2>Polymorphism improvements</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Kotlin/kotlinx.serialization/blob/master/CHANGELOG.md">org.jetbrains.kotlinx:kotlinx-serialization-json's changelog</a>.</em></p> <blockquote> <h1>1.11.0 / 2026-04-10</h1> <p>This release is based on Kotlin 2.3.20 and provides new Json exceptions API and some bugfixes and improvements.</p> <h2>Expose Json exceptions structure</h2> <p>To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes <code>JsonException</code>, <code>JsonDecodingException</code>, and <code>JsonEncodingException</code> are now public. They have relevant public properties, such as <code>shortMessage</code>, <code>path</code>, <code>offset</code>, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: <a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/1930">#1930</a>, <a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/1877">#1877</a>.</p> <h2>Ability to hide user input from exception messages for security/privacy reasons.</h2> <p>Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property <code>exceptionsWithDebugInfo</code> is added to <code>JsonConfiguration</code>. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See <a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/2590">#2590</a> for more details.</p> <h2>Bugfixes and improvements</h2> <ul> <li>CBOR: Relax value range check when decoding numbers (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3167">#3167</a>)</li> <li>Use a specialized writeDecimalLong method for IO stream integrations in Json (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3152">#3152</a>)</li> </ul> <h1>1.10.0 / 2026-01-21</h1> <p>This release is based on Kotlin 2.3.0 and contains all of the changes from 1.10.0-RC. The only additional change is a fix for ProtoBuf packing of Kotlin unsigned types (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3079">#3079</a>). Big thanks to <a href="https://github.com/KosmX">KosmX</a> for contributing the fix.</p> <blockquote> <p>For your convenience, the changelog for 1.10.0-RC is duplicated below:</p> </blockquote> <h2>Stabilization of APIs</h2> <p>kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs. The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:</p> <ul> <li><code>Json</code> configuration options: <code>decodeEnumsCaseInsensitive</code>, <code>allowTrailingComma</code>, <code>allowComments</code>, and <code>prettyPrintIndent</code>. (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3100">#3100</a>)</li> <li><code>@EncodeDefault</code> annotation and its modes. (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3106">#3106</a>)</li> <li><code>JsonUnquotedLiteral</code> constructor function (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/2900">#2900</a>)</li> <li><code>JsonPrimitive</code> constructor function overloads that accept unsigned types. (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3117">#3117</a>)</li> <li>JSON DSL functions on <code>JsonElement</code> with <code>Nothing?</code> overloads. (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3117">#3117</a>)</li> </ul> <h2>Readiness for return value checker</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Kotlin/kotlinx.serialization/commit/6956af2e6073347c7832c3c5b374fa3b5a345956"><code>6956af2</code></a> Prepare 1.11 release</li> <li><a href="https://github.com/Kotlin/kotlinx.serialization/commit/390d84c68a19cbf7fa453dec22a333648bde49b4"><code>390d84c</code></a> Merge remote-tracking branch 'origin/master' into dev</li> <li><a href="https://github.com/Kotlin/kotlinx.serialization/commit/431fe2dc0a144300b33038820d24fc30302c8abc"><code>431fe2d</code></a> Use local repo for publishing (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3171">#3171</a>)</li> <li><a href="https://github.com/Kotlin/kotlinx.serialization/commit/05c12b60a6717b99053fb82e1f94d2f859727374"><code>05c12b6</code></a> Add usage attribute to "testRepositories" configuration</li> <li><a href="https://github.com/Kotlin/kotlinx.serialization/commit/a4e1f082ef2e72caa139b474c05657de6015da20"><code>a4e1f08</code></a> Bump Kover version to 0.9.8 release (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3174">#3174</a>)</li> <li><a href="https://github.com/Kotlin/kotlinx.serialization/commit/304e858ccc7066854637d86ab80056f5f2bcc094"><code>304e858</code></a> Expose Json exceptions structure (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3145">#3145</a>)</li> <li><a href="https://github.com/Kotlin/kotlinx.serialization/commit/4a0338ef5093d765138151bc30282e909ca459e4"><code>4a0338e</code></a> Included G Play SDK verification file for core-jvm (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3169">#3169</a>)</li> <li><a href="https://github.com/Kotlin/kotlinx.serialization/commit/421f64c74f0ea6d4a3cdc8dd483505366e3f6c8f"><code>421f64c</code></a> CBOR: Relax value range check when decoding numbers (<a href="https://redirect.github.com/Kotlin/kotlinx.serialization/issues/3167">#3167</a>)</li> <li><a href="https://github.com/Kotlin/kotlinx.serialization/commit/85a4f126ec491c77e2b3686cc22c1bae27a20783"><code>85a4f12</code></a> KT-84955: mark apple x64 tagets as deprecated error</li> <li><a href="https://github.com/Kotlin/kotlinx.serialization/commit/bd38b0e49bce38d1a55576e89856bc63990167ed"><code>bd38b0e</code></a> Remove dead code</li> <li>Additional commits viewable in <a href="https://github.com/Kotlin/kotlinx.serialization/compare/v1.8.0...v1.11.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.jetbrains.kotlinx:kotlinx-serialization-json&package-manager=gradle&previous-version=1.8.0&new-version=1.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin dependabot/gradle/org.jetbrains.kotlinx-kotlinx-serialization-json-1.11.0:dependabot/gradle/org.jetbrains.kotlinx-kotlinx-serialization-json-1.11.0

git checkout dependabot/gradle/org.jetbrains.kotlinx-kotlinx-serialization-json-1.11.0

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git checkout main

git merge --no-ff dependabot/gradle/org.jetbrains.kotlinx-kotlinx-serialization-json-1.11.0

git checkout dependabot/gradle/org.jetbrains.kotlinx-kotlinx-serialization-json-1.11.0

git rebase main

git checkout main

git merge --ff-only dependabot/gradle/org.jetbrains.kotlinx-kotlinx-serialization-json-1.11.0

git checkout dependabot/gradle/org.jetbrains.kotlinx-kotlinx-serialization-json-1.11.0

git rebase main

git checkout main

git merge --no-ff dependabot/gradle/org.jetbrains.kotlinx-kotlinx-serialization-json-1.11.0

git checkout main

git merge --squash dependabot/gradle/org.jetbrains.kotlinx-kotlinx-serialization-json-1.11.0

git checkout main

git merge --ff-only dependabot/gradle/org.jetbrains.kotlinx-kotlinx-serialization-json-1.11.0

git checkout main

git merge dependabot/gradle/org.jetbrains.kotlinx-kotlinx-serialization-json-1.11.0

git push origin main

No reviewers

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: ochenstarik/hermes-android#13

No description provided.