Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 26, 2025

Bumps json from 2.12.0 to 2.12.2.

Release notes

Sourced from json's releases.

v2.12.2

  • Fix compiler optimization level.

Full Changelog: ruby/json@v2.12.1...v2.12.2

v2.12.1

What's Changed

  • Fix a potential crash in large negative floating point number generation.
  • Fix for JSON.pretty_generate to use passed state object's generate instead of state class as the required parameters aren't available.

Full Changelog: ruby/json@v2.12.0...v2.12.1

Changelog

Sourced from json's changelog.

2025-05-23 (2.12.2)

  • Fix compiler optimization level.

2025-05-23 (2.12.1)

  • Fix a potential crash in large negative floating point number generation.
  • Fix for JSON.pretty_generate to use passed state object's generate instead of state class as the required parameters aren't available.
Commits
  • a29cb77 Release 2.12.2
  • 8603a57 Release 2.12.1
  • 30eacc2 Merge pull request #810 from byroot/fbuffer-bound-checks
  • 8109421 fbuffer.c: add debug mode with bound checks.
  • d695177 Merge pull request #808 from byroot/reported-segv
  • d73ae93 Fix: generate_json_float to reserve enough memory for large negative floats.
  • 60e80e1 Merge pull request #806 from GrantBirki/minor-fixes
  • 7c03ffc Remove some unnecessary top level constant lookups
  • c060943 remove redundant self.
  • f5c1b8c use . over :: for consistency
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [json](https://github.com/ruby/json) from 2.12.0 to 2.12.2.
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.12.0...v2.12.2)

---
updated-dependencies:
- dependency-name: json
  dependency-version: 2.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels May 26, 2025
@github-project-automation github-project-automation bot moved this to Seeking Reviewer in Submitty Development May 26, 2025
Copy link
Contributor

@jeffrey-cordero jeffrey-cordero left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A small dependency bump for JSON seems reasonable. The local site works fine on my machine, and only small bug fixes and compiler optimizations are introduced in the updates.

@github-project-automation github-project-automation bot moved this from Seeking Reviewer to Awaiting Maintainer Review in Submitty Development Jun 4, 2025
@bmcutler bmcutler merged commit aa0de19 into main Jun 6, 2025
2 checks passed
@github-project-automation github-project-automation bot moved this from Awaiting Maintainer Review to Done in Submitty Development Jun 6, 2025
@bmcutler bmcutler deleted the dependabot/bundler/json-2.12.2 branch June 6, 2025 02:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

2 participants