ochenstarik/hermes-android
1
0
Fork 0
Code Issues Pull requests 15 Projects Releases Packages Wiki Activity Actions

chore(deps): bump org.json:json from 20240303 to 20260814 #7

Open
dependabot[bot] wants to merge 1 commit from dependabot/gradle/org.json-json-20260814 into main
pull from: dependabot/gradle/org.json-json-20260814
merge into: ochenstarik:main
Conversation 0 Commits 1 Files changed 1 +1 -1
dependabot[bot] commented 2026-08-24 15:54:14 +00:00 (Migrated from github.com)
Copy link

Bumps org.json:json from 20240303 to 20260814.

Release notes

Sourced from org.json:json's releases.

20260814

Pull Request Description
#1070 Fix XML.unescape for valid whitespace chars

20260719

Pull Request Description
#1069 pre-release-20260719 prep for next release
#1068 Max number length config for BigInteger and BigDecimal
#1067 bound BigDecimal→BigInteger expansion in objectToBigInteger (completes CVE-2026-59171 fix)
#1065 Fixes CVE-2026-59171
#1062 Refactor CDL row serialization for readability
#1061 Restore lenient jsonarray allow consecutive commas and insert null
#1058 Docs and warnings cleanup

20260522

Pull Request Description
#1054 pre-release-20260522 prep for next release
#1053 update security.md with key data
#1046 Validate XML numeric character references before string construction
#1044 Ignore static fields in JSONObject.fromJson()
#1041 Enhance README with license clarification
#1039 Fix XML forceList parsing issue
#1038 Fix input validation in XMLTokener.unescapeEntity()
#1037 Fix ClassCastException in JSONML.toJSONArray and toJSONObject
#1029 add badge to external hosted javadoc
#1028 Refactoring: Fix sonarqube reliability issues
#1027 Save/restore default locale in test

20251224

Pull Request Description
#1021 Add LTS JDK 25 build to github actions
#1020 Record type support
#1017 Refactoring: Fix some SonarQube issues
#1014 Refactoring: String check logic in CDL
#1013 Refactoring: FIx Sonarqube issues in JSONArray
#1011 Refactoring: Fix SonarQube issues in JSONObject
#1009 Fix strict mode check for period after number
#1008 Fixed JSONArray strict mode check for leading comma
#1006 JSONObject.fromJson() with unit tests
#1005 Refactoring: Fix sonarQube issues in JSONObject
#1004 Refactoring: Fix sonarcube issues in JSONObject
#1001 Refactoring: sonarqube issues in JSONObject
#1000 Refactoring: Fix some sonarcube issues from recent commits
#999 fixed some strict mode issues
#995 Fix regression XML parsing null with keepStrings

... (truncated)

Changelog

Sourced from org.json:json's changelog.

20260814 Fixes XML.unescape whitespace handling

20260719 Fixes CVE-2026-59171 very large BigInteger, BigDecimal

20260522 Publish key data, recent commits for minor fixes

20251224 Records, fromJson(), and recent commits

20250517 Strict mode hardening and recent commits

20250107 Restore moditect in pom.xml

20241224 Strict mode opt-in feature, and recent commits. This release does not contain module-info.class. It is not recommended if you need this feature.

Commits
  • 6c14048 Merge pull request #1073 from stleary/pre-release-20260814
  • 34efda6 pre-release-20260814 initial commit
  • 22ab2fb Update jar file link in README
  • 392a352 Fix formatting of the latest release jar file link
  • b594a32 Merge pull request #1070 from dong0713/fix/xml-unescape-whitespace-control-chars
  • 94854a1 Fix XML.unescape rejecting valid whitespace numeric character references
  • 1795e8c Merge pull request #1069 from stleary/pre-release-20260719
  • da757c6 pre-release-20260719 oops forgot to update new unit tests for strict mode
  • d24bc9e pre-release-20260719 initial commit
  • 80efb52 Merge pull request #1068 from stleary/max-number-length-config
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [org.json:json](https://github.com/douglascrockford/JSON-java) from 20240303 to 20260814. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/douglascrockford/JSON-java/releases">org.json:json's releases</a>.</em></p> <blockquote> <h2>20260814</h2> <table> <thead> <tr> <th>Pull Request</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1070">#1070</a></td> <td>Fix XML.unescape for valid whitespace chars</td> </tr> </tbody> </table> <h2>20260719</h2> <table> <thead> <tr> <th>Pull Request</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1069">#1069</a></td> <td>pre-release-20260719 prep for next release</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1068">#1068</a></td> <td>Max number length config for BigInteger and BigDecimal</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1067">#1067</a></td> <td>bound BigDecimal→BigInteger expansion in objectToBigInteger (completes CVE-2026-59171 fix)</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1065">#1065</a></td> <td>Fixes CVE-2026-59171</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1062">#1062</a></td> <td>Refactor CDL row serialization for readability</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1061">#1061</a></td> <td>Restore lenient jsonarray allow consecutive commas and insert null</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1058">#1058</a></td> <td>Docs and warnings cleanup</td> </tr> </tbody> </table> <h2>20260522</h2> <table> <thead> <tr> <th>Pull Request</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1054">#1054</a></td> <td>pre-release-20260522 prep for next release</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1053">#1053</a></td> <td>update security.md with key data</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1046">#1046</a></td> <td>Validate XML numeric character references before string construction</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1044">#1044</a></td> <td>Ignore static fields in JSONObject.fromJson()</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1041">#1041</a></td> <td>Enhance README with license clarification</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1039">#1039</a></td> <td>Fix XML forceList parsing issue</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1038">#1038</a></td> <td>Fix input validation in XMLTokener.unescapeEntity()</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1037">#1037</a></td> <td>Fix ClassCastException in JSONML.toJSONArray and toJSONObject</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1029">#1029</a></td> <td>add badge to external hosted javadoc</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1028">#1028</a></td> <td>Refactoring: Fix sonarqube reliability issues</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1027">#1027</a></td> <td>Save/restore default locale in test</td> </tr> </tbody> </table> <h2>20251224</h2> <table> <thead> <tr> <th>Pull Request</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1021">#1021</a></td> <td>Add LTS JDK 25 build to github actions</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1020">#1020</a></td> <td>Record type support</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1017">#1017</a></td> <td>Refactoring: Fix some SonarQube issues</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1014">#1014</a></td> <td>Refactoring: String check logic in CDL</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1013">#1013</a></td> <td>Refactoring: FIx Sonarqube issues in JSONArray</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1011">#1011</a></td> <td>Refactoring: Fix SonarQube issues in JSONObject</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1009">#1009</a></td> <td>Fix strict mode check for period after number</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1008">#1008</a></td> <td>Fixed JSONArray strict mode check for leading comma</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1006">#1006</a></td> <td>JSONObject.fromJson() with unit tests</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1005">#1005</a></td> <td>Refactoring: Fix sonarQube issues in JSONObject</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1004">#1004</a></td> <td>Refactoring: Fix sonarcube issues in JSONObject</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1001">#1001</a></td> <td>Refactoring: sonarqube issues in JSONObject</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1000">#1000</a></td> <td>Refactoring: Fix some sonarcube issues from recent commits</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/999">#999</a></td> <td>fixed some strict mode issues</td> </tr> <tr> <td><a href="https://redirect.github.com/douglascrockford/JSON-java/issues/995">#995</a></td> <td>Fix regression XML parsing null with keepStrings</td> </tr> </tbody> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md">org.json:json's changelog</a>.</em></p> <blockquote> <p>20260814 Fixes XML.unescape whitespace handling</p> <p>20260719 Fixes CVE-2026-59171 very large BigInteger, BigDecimal</p> <p>20260522 Publish key data, recent commits for minor fixes</p> <p>20251224 Records, fromJson(), and recent commits</p> <p>20250517 Strict mode hardening and recent commits</p> <p>20250107 Restore moditect in pom.xml</p> <p>20241224 Strict mode opt-in feature, and recent commits. This release does not contain module-info.class. It is not recommended if you need this feature.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/stleary/JSON-java/commit/6c140480797ad70a41df84bc8ebab405ca44656b"><code>6c14048</code></a> Merge pull request <a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1073">#1073</a> from stleary/pre-release-20260814</li> <li><a href="https://github.com/stleary/JSON-java/commit/34efda6423492a1f7f38c52241ade88c308e6cc0"><code>34efda6</code></a> pre-release-20260814 initial commit</li> <li><a href="https://github.com/stleary/JSON-java/commit/22ab2fb7245bb0c1a766c6aa11c905aa82315ef3"><code>22ab2fb</code></a> Update jar file link in README</li> <li><a href="https://github.com/stleary/JSON-java/commit/392a352901f509ad8c67fa6af3bea907f149dbeb"><code>392a352</code></a> Fix formatting of the latest release jar file link</li> <li><a href="https://github.com/stleary/JSON-java/commit/b594a3229cd43cdfc24d0bd1f233b11a31ab14bb"><code>b594a32</code></a> Merge pull request <a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1070">#1070</a> from dong0713/fix/xml-unescape-whitespace-control-chars</li> <li><a href="https://github.com/stleary/JSON-java/commit/94854a1dfafdf7ecf168a60593240ecce13e7634"><code>94854a1</code></a> Fix XML.unescape rejecting valid whitespace numeric character references</li> <li><a href="https://github.com/stleary/JSON-java/commit/1795e8cf26229229e7ab6fe4aeab0f51ffecda5a"><code>1795e8c</code></a> Merge pull request <a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1069">#1069</a> from stleary/pre-release-20260719</li> <li><a href="https://github.com/stleary/JSON-java/commit/da757c6656a84fe87cb4442f16153b3efe2ccaf3"><code>da757c6</code></a> pre-release-20260719 oops forgot to update new unit tests for strict mode</li> <li><a href="https://github.com/stleary/JSON-java/commit/d24bc9e5d6e9c79de0c154992108a91ce5c8970b"><code>d24bc9e</code></a> pre-release-20260719 initial commit</li> <li><a href="https://github.com/stleary/JSON-java/commit/80efb529d7fa19505a368ff0d2c123b7f12ed0ca"><code>80efb52</code></a> Merge pull request <a href="https://redirect.github.com/douglascrockford/JSON-java/issues/1068">#1068</a> from stleary/max-number-length-config</li> <li>Additional commits viewable in <a href="https://github.com/douglascrockford/JSON-java/compare/20240303...20260814">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.json:json&package-manager=gradle&previous-version=20240303&new-version=20260814)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/gradle/org.json-json-20260814:dependabot/gradle/org.json-json-20260814
git checkout dependabot/gradle/org.json-json-20260814

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git checkout main
git merge --no-ff dependabot/gradle/org.json-json-20260814
git checkout dependabot/gradle/org.json-json-20260814
git rebase main
git checkout main
git merge --ff-only dependabot/gradle/org.json-json-20260814
git checkout dependabot/gradle/org.json-json-20260814
git rebase main
git checkout main
git merge --no-ff dependabot/gradle/org.json-json-20260814
git checkout main
git merge --squash dependabot/gradle/org.json-json-20260814
git checkout main
git merge --ff-only dependabot/gradle/org.json-json-20260814
git checkout main
git merge dependabot/gradle/org.json-json-20260814
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
accessibility

Barrier affecting people with disabilities

  
bug

Something isn't working

  
dependencies

Pull requests that update a dependency file

  
documentation

Improvements or additions to documentation

  
duplicate

This issue or pull request already exists

  
enhancement

New feature or request

  
good first issue

Good for newcomers

  
help wanted

Extra attention is needed

  
invalid

This doesn't seem right

  
java

Pull requests that update java code

  
question

Further information is requested

  
rust

Pull requests that update rust code

  
wontfix

This will not be worked on

No labels
accessibility
bug
dependencies
documentation
duplicate
enhancement
good first issue
help wanted
invalid
java
question
rust
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: ochenstarik/hermes-android#7
No description provided.
Delete branch "dependabot/gradle/org.json-json-20260814"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?