我的编程学习之路,包括了design pattern,data structure,java8,java io,java concurrent,guava,spring,spring boot,spring cloud,js,vue
Bumps [fastjson](https://github.com/alibaba/fastjson) from 1.2.68 to 1.2.83. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/alibaba/fastjson/releases">fastjson's releases</a>.</em></p> <blockquote> <h2>FASTJSON 1.2.83版本发布(安全修复)</h2> <p>这是一个安全修复版本,修复最近收到在特定场景下可以绕过autoType关闭限制的漏洞,建议fastjson用户尽快采取安全措施保障系统安全。</p> <p><a href="https://github.com/alibaba/fastjson/wiki/security_update_20220523">安全修复方案</a> :<a href="https://github.com/alibaba/fastjson/wiki/security_update_20220523">https://github.com/alibaba/fastjson/wiki/security_update_20220523</a></p> <h1>Issues</h1> <ol> <li>安全加固</li> <li>修复JDK17下setAccessible报错的问题 <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/4077">#4077</a></li> </ol> <ul> <li>下载 <a href="https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.83/">https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.83/</a></li> <li>文档 <a href="https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98">https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98</a></li> <li>源码 <a href="https://github.com/alibaba/fastjson/tree/1.2.83">https://github.com/alibaba/fastjson/tree/1.2.83</a></li> </ul> <h2>fastjson 1.2.79版本发布,BUG修复</h2> <p>这又是一个bug fixed的版本,大家按需升级</p> <h1>Issues</h1> <ol> <li>修复引入MethodInheritanceComparator导致某些场景序列化报错的问题</li> <li>增强JDK 9兼容</li> <li>修复JSONArray/JSONObject的equals方法在内部对象map/list相同时不直接返回true的问题</li> </ol> <h1>相关链接</h1> <ul> <li>下载 <a href="https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.79/">https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.79/</a></li> <li>文档 <a href="https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98">https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98</a></li> <li>源码 <a href="https://github.com/alibaba/fastjson/tree/1.2.79">https://github.com/alibaba/fastjson/tree/1.2.79</a></li> </ul> <h2>fastjson 1.2.76版本发布,BUG修复增强兼容</h2> <p>这又是一个bug fixed的版本,大家按需升级</p> <h1>Issues</h1> <ol> <li>修复一些直接抛RuntimeException的问题 <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/3631">#3631</a></li> <li>parser自动识别gzip bytes <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/3614">#3614</a></li> <li>修复Throwable继承类属性不支持自动类型转换问题 <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/3217">#3217</a></li> <li>修复PrettyFormat情况下引用计算不对的问题 <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/3672">#3672</a></li> <li>修复AutoType不兼容LinkedHashMap的问题</li> <li>增强对Enum类型的自定类型转换</li> <li>修复deserializeUsing在泛型某些场景不能正常工作的问题 <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/3693">#3693</a></li> <li>提升JSONReader性能,减少小对象创建 <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/3627">#3627</a></li> <li>增强对JSONPath对filter的支持 <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/3629">#3629</a></li> <li>JSONPath支持忽略NullValue的选项 <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/3607">#3607</a></li> <li>增强对定制化enum的支持 <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/3601">#3601</a></li> <li>增强对java.time.Instant和org.joda.time.Instant的支持 <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/3539">#3539</a></li> <li>修复Parser某些场景不能识别引用的问题</li> </ol> <h1>相关链接</h1> <ul> <li>下载 <a href="https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.76/">https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.76/</a></li> <li>文档 <a href="https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98">https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98</a></li> <li>源码 <a href="https://github.com/alibaba/fastjson/tree/1.2.76">https://github.com/alibaba/fastjson/tree/1.2.76</a></li> </ul> <h2>fastjson 1.2.75版本发布,例行Bug修复</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/alibaba/fastjson/commit/26f13f84fdd522de10678e43f55fde918ab7b347"><code>26f13f8</code></a> 1.2.83</li> <li><a href="https://github.com/alibaba/fastjson/commit/8f3410f81cbd437f7c459f8868445d50ad301f15"><code>8f3410f</code></a> bug fix for autotype</li> <li><a href="https://github.com/alibaba/fastjson/commit/cd3c2de6968f0046be1ac4cc7475627ebefbcf64"><code>cd3c2de</code></a> improved jdk8 java.time support</li> <li><a href="https://github.com/alibaba/fastjson/commit/c63866eaca27441721a82ad8a2553b929e1e3360"><code>c63866e</code></a> remove unused import</li> <li><a href="https://github.com/alibaba/fastjson/commit/35db4adad70c32089542f23c272def1ad920a60d"><code>35db4ad</code></a> bug fix for autoType</li> <li><a href="https://github.com/alibaba/fastjson/commit/3f009e10a6905778b42dd3f8cad2de3b194a62d4"><code>3f009e1</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/4085">#4085</a> from hengyunabc/fix_setAccessible</li> <li><a href="https://github.com/alibaba/fastjson/commit/dd3de5f84bcbf0c13ad60df0c3feb9d564727447"><code>dd3de5f</code></a> fix InaccessibleObjectException in jdk17. <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/4077">#4077</a></li> <li><a href="https://github.com/alibaba/fastjson/commit/a234f9abba58add6e5ef9d44b0c24bf49a583905"><code>a234f9a</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/4084">#4084</a> from alibaba/revert-4078-master</li> <li><a href="https://github.com/alibaba/fastjson/commit/0814909139735ea4c7648e755630fd49da7be059"><code>0814909</code></a> Revert "fix InaccessibleObjectException in jdk17. <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/4077">#4077</a>"</li> <li><a href="https://github.com/alibaba/fastjson/commit/ab82d0bacadd04226f3f926463ff6a56980c7a4b"><code>ab82d0b</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/alibaba/fastjson/issues/4078">#4078</a> from hengyunabc/master</li> <li>Additional commits viewable in <a href="https://github.com/alibaba/fastjson/compare/1.2.68...1.2.83">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zj-dreamly/my-program-learning/network/alerts). </details>
This issue appears to be discussing a feature request or bug report related to the repository. Based on the content, it seems to be still under discussion. The issue was opened by dependabot[bot] and has received 0 comments.