Skip to content

Bump org.json:json from 20250517 to 20260814 - #4312

Merged
github-actions[bot] merged 2 commits into
2.xfrom
dependabot/maven/2.x/org.json-json-20260814
Sep 10, 2026
Merged

Bump org.json:json from 20250517 to 20260814#4312
github-actions[bot] merged 2 commits into
2.xfrom
dependabot/maven/2.x/org.json-json-20260814

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps org.json:json from 20250517 to 20260814.

Release notes

Sourced from org.json:json's releases.

20260814

Pull Request Description
#1070 Fix XML.unescape for valid whitespace chars

20260719

Pull Request Description
#1069 pre-release-20260719 prep for next release
#1068 Max number length config for BigInteger and BigDecimal
#1067 bound BigDecimal→BigInteger expansion in objectToBigInteger (completes CVE-2026-59171 fix)
#1065 Fixes CVE-2026-59171
#1062 Refactor CDL row serialization for readability
#1061 Restore lenient jsonarray allow consecutive commas and insert null
#1058 Docs and warnings cleanup

20260522

Pull Request Description
#1054 pre-release-20260522 prep for next release
#1053 update security.md with key data
#1046 Validate XML numeric character references before string construction
#1044 Ignore static fields in JSONObject.fromJson()
#1041 Enhance README with license clarification
#1039 Fix XML forceList parsing issue
#1038 Fix input validation in XMLTokener.unescapeEntity()
#1037 Fix ClassCastException in JSONML.toJSONArray and toJSONObject
#1029 add badge to external hosted javadoc
#1028 Refactoring: Fix sonarqube reliability issues
#1027 Save/restore default locale in test

20251224

Pull Request Description
#1021 Add LTS JDK 25 build to github actions
#1020 Record type support
#1017 Refactoring: Fix some SonarQube issues
#1014 Refactoring: String check logic in CDL
#1013 Refactoring: FIx Sonarqube issues in JSONArray
#1011 Refactoring: Fix SonarQube issues in JSONObject
#1009 Fix strict mode check for period after number
#1008 Fixed JSONArray strict mode check for leading comma
#1006 JSONObject.fromJson() with unit tests
#1005 Refactoring: Fix sonarQube issues in JSONObject
#1004 Refactoring: Fix sonarcube issues in JSONObject
#1001 Refactoring: sonarqube issues in JSONObject
#1000 Refactoring: Fix some sonarcube issues from recent commits
#999 fixed some strict mode issues
#995 Fix regression XML parsing null with keepStrings

... (truncated)

Changelog

Sourced from org.json:json's changelog.

20260814 Fixes XML.unescape whitespace handling

20260719 Fixes CVE-2026-59171 very large BigInteger, BigDecimal

20260522 Publish key data, recent commits for minor fixes

20251224 Records, fromJson(), and recent commits

Commits
  • 6c14048 Merge pull request #1073 from stleary/pre-release-20260814
  • 34efda6 pre-release-20260814 initial commit
  • 22ab2fb Update jar file link in README
  • 392a352 Fix formatting of the latest release jar file link
  • b594a32 Merge pull request #1070 from dong0713/fix/xml-unescape-whitespace-control-chars
  • 94854a1 Fix XML.unescape rejecting valid whitespace numeric character references
  • 1795e8c Merge pull request #1069 from stleary/pre-release-20260719
  • da757c6 pre-release-20260719 oops forgot to update new unit tests for strict mode
  • d24bc9e pre-release-20260719 initial commit
  • 80efb52 Merge pull request #1068 from stleary/max-number-length-config
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Related to third party dependency updates or migrations java Pull requests that update Java code labels Sep 9, 2026
github-actions Bot added a commit that referenced this pull request Sep 9, 2026
@github-actions
Generate changelog entries for #4312
4aeee76
@github-actions
github-actions Bot enabled auto-merge (squash) September 9, 2026 13:06
@ramanathan1504

ramanathan1504 commented Sep 10, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot
Bump org.json:json from 20250517 to 20260814
b5fcfe1 
Bumps [org.json:json](https://github.com/douglascrockford/JSON-java) from 20250517 to 20260814.
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](stleary/JSON-java@2025051...2026081)

---
updated-dependencies:
- dependency-name: org.json:json
  dependency-version: '20260814'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/maven/2.x/org.json-json-20260814 branch from 4aeee76 to b5fcfe1 Compare September 10, 2026 04:25
@github-actions
github-actions Bot merged commit e560064 into 2.x Sep 10, 2026
12 checks passed
@github-actions
github-actions Bot deleted the dependabot/maven/2.x/org.json-json-20260814 branch September 10, 2026 06:28
@github-project-automation github-project-automation Bot moved this from Approved to Merged in Log4j pull request tracker Sep 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ramanathan1504 ramanathan1504 ramanathan1504 approved these changes

Assignees

No one assigned

Labels

dependencies Related to third party dependency updates or migrations java Pull requests that update Java code

Projects

Log4j pull request tracker
Status: Merged

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ramanathan1504