Skip to content

chore(deps): bump org.json:json from 20260719 to 20260814 - #4699

Merged
ggivo merged 2 commits into
masterfrom
dependabot/maven/org.json-json-20260814
Aug 28, 2026
Merged

ggivo merged 2 commits into
masterfrom
dependabot/maven/org.json-json-20260814

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026 •

Copy link
Copy Markdown
Contributor

Bumps org.json:json from 20260719 to 20260814.

Release notes

Sourced from org.json:json's releases.

20260814

Pull Request Description
#1070 Fix XML.unescape for valid whitespace chars
Changelog

Sourced from org.json:json's changelog.

20260814 Fixes XML.unescape whitespace handling

Commits
  • 6c14048 Merge pull request #1073 from stleary/pre-release-20260814
  • 34efda6 pre-release-20260814 initial commit
  • 22ab2fb Update jar file link in README
  • 392a352 Fix formatting of the latest release jar file link
  • b594a32 Merge pull request #1070 from dong0713/fix/xml-unescape-whitespace-control-chars
  • 94854a1 Fix XML.unescape rejecting valid whitespace numeric character references
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Low Risk
Single-version dependency bump with no application code changes; upstream fix targets XML utilities that Jedis does not reference.

Overview
Bumps the Maven dependency org.json:json in pom.xml from 20260719 to 20260814.

The new release mainly fixes XML.unescape so valid whitespace numeric character references are accepted; Jedis uses this library for JSONObject / JSONArray in JSON command paths, not the XML APIs, so runtime behavior for typical Jedis usage should be unchanged aside from picking up the patched transitive library.

Reviewed by Cursor Bugbot for commit 0f7d6d6. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps [org.json:json](https://github.com/douglascrockford/JSON-java) from 20260719 to 20260814.
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](stleary/JSON-java@2026071...2026081)

---
updated-dependencies:
- dependency-name: org.json:json
  dependency-version: '20260814'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull request that updates a dependency java Pull requests that update java code labels Aug 24, 2026
@github-actions

github-actions Bot commented Aug 27, 2026 •

Copy link
Copy Markdown

Test Results

β€‡β€ˆ206 files  Β±0β€‚β€ƒβ€‡β€ˆ206 suites  Β±0   8m 22s ⏱️ +38s
8β€ˆ101 tests Β±0  8β€ˆ033 βœ… Β±0  68 πŸ’€ Β±0  0 ❌ Β±0 
8β€ˆ121 runsβ€Š Β±0  8β€ˆ053 βœ… Β±0  68 πŸ’€ Β±0  0 ❌ Β±0 

Results for commit 0f7d6d6. ± Comparison against base commit 4c3d45c.

♻️ This comment has been updated with latest results.

@ggivo
ggivo merged commit 09cfe46 into master Aug 28, 2026
13 of 14 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/org.json-json-20260814 branch August 28, 2026 07:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull request that updates a dependency java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant