[depfu]

We've tested your project with an updated dependency and got errors while installing the dependencies.

This version is either within the version range you specified or you haven't specified a version/range. To be able to test your project with the new version, we've taken the liberty of pinning the version for this branch and pull request.

name	version specification	new version
json	>= 2.0	3.1.0

Unfortunately, the build failed while installing dependencies. This means that while the new version is within the specified range, a version conflict between two or more packages will prohibit this version from being installed.

As this breaks fresh installs of your package, we've left this pull request open for you to investigate.

What changed?

✳️ json (>= 2.0 → 3.1.0) · Repo · Changelog

Release Notes

3.1.0 (from changelog)

• Added rfc8785 generator option to canonicalize the output. Replaces the json-canonicalization with numerous correctness fixes.
• Use the rb_len_t type introduced in Ruby 4.1 to allow for proper 64bit support on LP64 platforms (Windows).
• JRuby: parser errors now include the position (line, column and the message suffix) as well as json_path, matching the C extension.
• Improved the accuracy of parser error's line, column and snipets in presence of multibyte characters.
• Fix JSON.load to work correctly when provided a Zlib::GzipReader as IO source.
• Reject non-ASCII BINARY strings during JSON generation. This was deprecated since a long time and scheduled to be removed for 3.0.

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 44 commits:

• Release 3.1.0
• Refactor `rfc8785_sort_keys_proc`
• Handle invalid encoding in JSON path keys
• parser.c: only update the stack once fully spilled
• Fix parsing of number with out of range negative exponents
• Fix parsing of unescaped NULL bytes in strings
• ResumableParser: fix handling of incomplete unicode escape
• More hardening against adversarial `encode` methods
• Index the generated JSON array by rb_len_t
• Match rb_hash_bulk_insert fallback to Ruby's declaration
• Use rb_len_t for lengths given to the String API
• Use rb_len_t for the column of parse errors
• Use rb_len_t for String lengths
• Sort RFC 8785 keys after as_json conversion
• Better defend against `to_s` or `encode` not returning a T_STRING
• Reject incompatible RFC 8785 generation options
• Canonicalize integers as doubles in RFC 8785 mode
• Fix RFC 8785 number formatter spelling
• Sort RFC 8785 object properties by their keys
• Preserve float precision in RFC 8785 number formatting
• Report the attempted depth in generator nesting errors
• Reject non-ASCII BINARY strings during JSON generation
• Exclude custom instance variables from State#to_h
• Honor as_json and reject disabled strict mode in JSON::Coder
• Open gzip in binary mode
• Implement rfc8785
• Fix parser error positions for newlines and multibyte characters
• Preserve complete UTF-8 characters in parse error snippets
• Fix tempfile leak
• Remove the leading space from Fragment conversion errors
• Correct State as_json and depth setter documentation
• Prevent use-after-free when strings change during IO generation
• Prevent ResumableParser from stalling on invalid object keys
• Prevent crashes with non-Proc on_load callbacks
• Fix Interoperability with Zlib::GzipReader
• Prevent crashes with non-Proc as_json callbacks
• JRuby: keep the whole character after an invalid escape
• Ensure `default_sort_keys_proc` isn't reassigned.
• Push the validateUTF8String into the StringScanner to reduce the work being done if UTF-8 validation is disabled.
• Add a non-validating StringEncoder#decodeNoValidate fastpath used when decoding ASCII-only strings with escape or control characters.
• Disable coverage on jruby
• Add error position and json_path to the JRuby extension
• Make GeneratorState#_configure only write the options it is given
• Make State#configure and #merge only write the options they are given

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu cancel merge

Cancels automatic merging of this PR

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)