Bump json from 2.7.6 to 2.8.1 (#4032)

dependabot[bot] · web-flow · commit 43092bafa2d9 · 2024-11-08T08:13:41.000-08:00
Bumps [json](https://github.com/ruby/json) from 2.7.6 to 2.8.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ruby/json/releases">json's releases</a>.</em></p> <blockquote> <h2>v2.8.1</h2> <ul> <li>Fix the <code>java</code> version of the package to include the extension implementation. Only concerns JRuby.</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ruby/json/compare/v2.8.0...v2.8.1">https://github.com/ruby/json/compare/v2.8.0...v2.8.1</a></p> <h2>v2.8.0</h2> <h2>What's Changed</h2> <ul> <li>Emit a deprecation warning when <code>JSON.load</code> create custom types without the <code>create_additions</code> option being explictly enabled. <ul> <li>Prefer to use <code>JSON.unsafe_load(string)</code> or <code>JSON.load(string, create_additions: true)</code>.</li> </ul> </li> <li>Emit a deprecation warning when serializing valid UTF-8 strings encoded in <code>ASCII_8BIT</code> aka <code>BINARY</code>.</li> <li>Bump required Ruby version to 2.7.</li> <li>Add support for optionally parsing trailing commas, via <code>allow_trailing_comma: true</code>, which in cunjunction with the pre-existing support for comments, make it suitable to parse <code>jsonc</code> documents.</li> <li>Many performance improvements to <code>JSON.parse</code> and <code>JSON.load</code>, up to <code>1.7x</code> faster on real world documents.</li> <li>Some minor performance improvements to <code>JSON.dump</code> and <code>JSON.generate</code>.</li> </ul> <h2>Parsing performance</h2> <p>Parsing performance is improved by 50-70% on realistic benchmarks, and even more on micro-benchmarks: <a href="https://gist.github.com/casperisfine/cf4b3a0594fae24b7d0eb93daaf3841a">https://gist.github.com/casperisfine/cf4b3a0594fae24b7d0eb93daaf3841a</a></p> <pre><code>== Parsing activitypub.json (58160 bytes) ruby 3.4.0dev (2024-11-06T07:59:09Z precompute-hash-wh.. 7943f98a8a) +YJIT +PRISM [arm64-darwin24] Warming up -------------------------------------- json 2.7.2 638.000 i/100ms oj 798.000 i/100ms Oj::Parser 948.000 i/100ms rapidjson 631.000 i/100ms Calculating ------------------------------------- json 2.7.2 6.423k (± 1.3%) i/s (155.70 μs/i) - 32.538k in 5.067149s oj 7.989k (± 1.0%) i/s (125.17 μs/i) - 40.698k in 5.094544s Oj::Parser 9.472k (± 1.3%) i/s (105.58 μs/i) - 47.400k in 5.005119s rapidjson 6.354k (± 1.1%) i/s (157.37 μs/i) - 32.181k in 5.064962s <p>Comparison: json 2.8.0: 9510.0 i/s Oj::Parser: 9471.9 i/s - same-ish: difference falls within error oj: 7989.4 i/s - 1.19x slower json 2.7.2: 6422.5 i/s - 1.48x slower rapidjson: 6354.5 i/s - 1.50x slower</p> <p>== Parsing twitter.json (567916 bytes) ruby 3.4.0dev (2024-11-06T07:59:09Z precompute-hash-wh.. 7943f98a8a) +YJIT +PRISM [arm64-darwin24] Warming up -------------------------------------- json 2.7.2 52.000 i/100ms oj 64.000 i/100ms Oj::Parser 76.000 i/100ms rapidjson 57.000 i/100ms &lt;/tr&gt;&lt;/table&gt; </code></pre></p> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ruby/json/blob/master/CHANGES.md">json's changelog</a>.</em></p> <blockquote> <h3>2024-11-06 (2.8.1)</h3> <ul> <li>Fix the java packages to include the extension.</li> </ul> <h3>2024-11-06 (2.8.0)</h3> <ul> <li>Emit a deprecation warning when <code>JSON.load</code> create custom types without the <code>create_additions</code> option being explictly enabled. <ul> <li>Prefer to use <code>JSON.unsafe_load(string)</code> or <code>JSON.load(string, create_additions: true)</code>.</li> </ul> </li> <li>Emit a deprecation warning when serializing valid UTF-8 strings encoded in <code>ASCII_8BIT</code> aka <code>BINARY</code>.</li> <li>Bump required Ruby version to 2.7.</li> <li>Add support for optionally parsing trailing commas, via <code>allow_trailing_comma: true</code>, which in cunjunction with the pre-existing support for comments, make it suitable to parse <code>jsonc</code> documents.</li> <li>Many performance improvements to <code>JSON.parse</code> and <code>JSON.load</code>, up to <code>1.7x</code> faster on real world documents.</li> <li>Some minor performance improvements to <code>JSON.dump</code> and <code>JSON.generate</code>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ruby/json/commit/49650f7312e86e7a108d3238fae412625c6a7cc0"><code>49650f7</code></a> Release 2.8.1</li> <li><a href="https://github.com/ruby/json/commit/07cf261251feba67cb4bd9e299e9a8909d0d0256"><code>07cf261</code></a> Fix gemspec to include .jar files</li> <li><a href="https://github.com/ruby/json/commit/b9c8024b46590ca71e82dc36163f9bff888b4f86"><code>b9c8024</code></a> Merge pull request <a href="https://redirect.github.com/ruby/json/issues/693">#693</a> from casperisfine/update-changelog</li> <li><a href="https://github.com/ruby/json/commit/8071cc6f09cfeb6001cc7d3dc0ceade4c70f97d8"><code>8071cc6</code></a> Release 2.8.0</li> <li><a href="https://github.com/ruby/json/commit/f5812d896e8e9b3ad4662cd522af697f8495ea54"><code>f5812d8</code></a> Update benchmark annotations</li> <li><a href="https://github.com/ruby/json/commit/3f950f2291fa20d45e8b1614642e1ce09da24ce6"><code>3f950f2</code></a> Merge pull request <a href="https://redirect.github.com/ruby/json/issues/692">#692</a> from casperisfine/custom-parse-int</li> <li><a href="https://github.com/ruby/json/commit/3a4dc9e1b48b34bf07d79bc2653b8f7dc084a363"><code>3a4dc9e</code></a> Implement a fast path for integer parsing</li> <li><a href="https://github.com/ruby/json/commit/d315ac8c82795076370c83e0d795014441af50b2"><code>d315ac8</code></a> Merge pull request <a href="https://redirect.github.com/ruby/json/issues/689">#689</a> from casperisfine/parser-escape</li> <li><a href="https://github.com/ruby/json/commit/94d679f0a9ff8b17db9fe4c00827b3dbd003fb8d"><code>94d679f</code></a> Merge pull request <a href="https://redirect.github.com/ruby/json/issues/690">#690</a> from nobu/right-shift-uchar</li> <li><a href="https://github.com/ruby/json/commit/fb82373612d59454a52330e8cfb533fc250546a4"><code>fb82373</code></a> Fix right shift warnings</li> <li>Additional commits viewable in <a href="https://github.com/ruby/json/compare/v2.7.6...v2.8.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=json&package-manager=bundler&previous-version=2.7.6&new-version=2.8.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/Gemfile.lock b/Gemfile.lock
@@ -210,7 +210,7 @@ GEM
       actionview (>= 5.0.0)
       activesupport (>= 5.0.0)
     jmespath (1.6.2)
-    json (2.7.6)
+    json (2.8.1)
     kaminari (1.2.2)
       activesupport (>= 4.1.0)
       kaminari-actionview (= 1.2.2)
