GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — Bump Newtonsoft.Json from 12.0.3 to 13.0.1 in /PSCompatibilityCollector/Microsoft.PowerShell.CrossCompatibility by dependabot[bot] · Pull Request #1810 · PowerShell/PSScriptAnalyzer

Conversation

dependabot Bot commented on behalf of github Jun 22, 2022

Copy link

Copy Markdown

Contributor

Bumps Newtonsoft.Json from 12.0.3 to 13.0.1.

Release notes

Sourced from Newtonsoft.Json's releases.

13.0.1

New feature - Add JsonSelectSettings with configuration for a regex timeout

Change - Remove portable assemblies from NuGet package

Change - JsonReader and JsonSerializer MaxDepth defaults to 64

Fix - Fixed throwing missing member error on ignored fields

Fix - Fixed various nullable annotations

Fix - Fixed annotations not being copied when tokens are cloned

Fix - Fixed naming strategy not being used when deserializing dictionary enum keys

Fix - Fixed serializing nullable struct dictionaries

Fix - Fixed JsonWriter.WriteToken to allow null with string token

Fix - Fixed missing error when deserializing JToken with a contract type mismatch

Fix - Fixed JTokenWriter when writing comment to an object

Commits

ae9fe44 Remove compiler package and update sourcelink (#2498)
8ef6621 Remove prerelease for 13.0.1
11331f5 Update SDK to 5.0.200 (#2495)
c7e8abc Update to 13.0.1-beta2
1745d7c Fix JTokenWriter when writing comment to an object (#2493)
583eb12 Fix missing error when deserializing JToken with a contract type mismatch (#2...
b6dc05b Change MaxDepth default to 64 (#2473)
15525f1 Fix JsonWriter.WriteToken to allow null with string token (#2472)
926d2f0 Enable embed untracked sources (#2471)
0a56633 Fixes #2372 - variable typos (#2465)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions


          Bump Newtonsoft.Json

dd6e56a

Bumps [Newtonsoft.Json](https://github.com/JamesNK/Newtonsoft.Json) from 12.0.3 to 13.0.1.
- [Release notes](https://github.com/JamesNK/Newtonsoft.Json/releases)
- [Commits](JamesNK/Newtonsoft.Json@12.0.3...13.0.1)

---
updated-dependencies:
- dependency-name: Newtonsoft.Json
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added the dependencies Pull requests that update a dependency file label

Jun 22, 2022

Christoph Bergmeister (bergmeister) commented Jun 23, 2022

Copy link

Copy Markdown

Collaborator

Not suitable due to minimum PowerShell version requirements and coupling to it

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

Christoph Bergmeister (bergmeister) closed this

Jun 23, 2022

dependabot Bot commented on behalf of github Jun 23, 2022

Copy link

Copy Markdown

Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

dependabot Bot deleted the dependabot/nuget/PSCompatibilityCollector/Microsoft.PowerShell.CrossCompatibility/Newtonsoft.Json-13.0.1 branch

June 23, 2022 11:03

Christoph Bergmeister (bergmeister) mentioned this pull request

Jul 25, 2022

Set MaxDepth in JsonSerializerSettings for more secure handling of exceptional conditions in Newtonsoft.Json #1824

Merged

5 of 6 tasks

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

dependencies

Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

1 participant

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.