dependabot[bot] opened a new pull request, #22: URL: https://github.com/apache/casbin-jcasbin-redis-adapter/pull/22
Bumps [com.alibaba:fastjson](https://github.com/alibaba/fastjson) from 1.2.76 to 1.2.83. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/alibaba/fastjson/releases";>com.alibaba:fastjson's releases</a>.</em></p> <blockquote> <h2>FASTJSON 1.2.83版本发布（安全修复）</h2> <p>这是一个安全修复版本，修复最近收到在特定场景下可以绕过autoType关闭限制的漏洞，建议fastjson用户尽快采取安全措施保障系统安全。</p> <p><a href="https://github.com/alibaba/fastjson/wiki/security_update_20220523";>安全修复方案</a> ：<a href="https://github.com/alibaba/fastjson/wiki/security_update_20220523";>https://github.com/alibaba/fastjson/wiki/security_update_20220523</a></p> <p>FASTJSON2已经发布并且提供兼容包，性能更好也更安全，升级指南 <a href="https://github.com/alibaba/fastjson2/wiki/fastjson_1_upgrade_cn";>https://github.com/alibaba/fastjson2/wiki/fastjson_1_upgrade_cn</a></p> <h1>Issues</h1> <ol> <li>安全加固</li> <li>修复JDK17下setAccessible报错的问题 <a href="https://redirect.github.com/alibaba/fastjson/issues/4077";>#4077</a></li> </ol> <ul> <li>下载 <a href="https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.83/";>https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.83/</a></li> <li>文档 <a href="https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98";>https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98</a></li> <li>源码 <a href="https://github.com/alibaba/fastjson/tree/1.2.83";>https://github.com/alibaba/fastjson/tree/1.2.83</a></li> <li>2.0.x Releases <a href="https://github.com/alibaba/fastjson2/releases";>https://github.com/alibaba/fastjson2/releases</a></li> </ul> <h2>fastjson 1.2.79版本发布，BUG修复</h2> <p>这又是一个bug fixed的版本，大家按需升级</p> <h1>Issues</h1> <ol> <li>修复引入MethodInheritanceComparator导致某些场景序列化报错的问题</li> <li>增强JDK 9兼容</li> <li>修复JSONArray/JSONObject的equals方法在内部对象map/list相同时不直接返回true的问题</li> </ol> <h1>相关链接</h1> <ul> <li>下载 <a href="https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.79/";>https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.79/</a></li> <li>文档 <a href="https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98";>https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98</a></li> <li>源码 <a href="https://github.com/alibaba/fastjson/tree/1.2.79";>https://github.com/alibaba/fastjson/tree/1.2.79</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/alibaba/fastjson/commit/26f13f84fdd522de10678e43f55fde918ab7b347";><code>26f13f8</code></a> 1.2.83</li> <li><a href="https://github.com/alibaba/fastjson/commit/8f3410f81cbd437f7c459f8868445d50ad301f15";><code>8f3410f</code></a> bug fix for autotype</li> <li><a href="https://github.com/alibaba/fastjson/commit/cd3c2de6968f0046be1ac4cc7475627ebefbcf64";><code>cd3c2de</code></a> improved jdk8 java.time support</li> <li><a href="https://github.com/alibaba/fastjson/commit/c63866eaca27441721a82ad8a2553b929e1e3360";><code>c63866e</code></a> remove unused import</li> <li><a href="https://github.com/alibaba/fastjson/commit/35db4adad70c32089542f23c272def1ad920a60d";><code>35db4ad</code></a> bug fix for autoType</li> <li><a href="https://github.com/alibaba/fastjson/commit/3f009e10a6905778b42dd3f8cad2de3b194a62d4";><code>3f009e1</code></a> Merge pull request <a href="https://redirect.github.com/alibaba/fastjson/issues/4085";>#4085</a> from hengyunabc/fix_setAccessible</li> <li><a href="https://github.com/alibaba/fastjson/commit/dd3de5f84bcbf0c13ad60df0c3feb9d564727447";><code>dd3de5f</code></a> fix InaccessibleObjectException in jdk17. <a href="https://redirect.github.com/alibaba/fastjson/issues/4077";>#4077</a></li> <li><a href="https://github.com/alibaba/fastjson/commit/a234f9abba58add6e5ef9d44b0c24bf49a583905";><code>a234f9a</code></a> Merge pull request <a href="https://redirect.github.com/alibaba/fastjson/issues/4084";>#4084</a> from alibaba/revert-4078-master</li> <li><a href="https://github.com/alibaba/fastjson/commit/0814909139735ea4c7648e755630fd49da7be059";><code>0814909</code></a> Revert "fix InaccessibleObjectException in jdk17. <a href="https://redirect.github.com/alibaba/fastjson/issues/4077";>#4077</a>"</li> <li><a href="https://github.com/alibaba/fastjson/commit/ab82d0bacadd04226f3f926463ff6a56980c7a4b";><code>ab82d0b</code></a> Merge pull request <a href="https://redirect.github.com/alibaba/fastjson/issues/4078";>#4078</a> from hengyunabc/master</li> <li>Additional commits viewable in <a href="https://github.com/alibaba/fastjson/compare/1.2.76...1.2.83";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/casbin-jcasbin-redis-adapter/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
