dependabot[bot] opened a new pull request, #2186:
URL: https://github.com/apache/orc/pull/2186

   Bumps [com.google.code.gson:gson](https://github.com/google/gson) from 2.9.0 
to 2.13.0.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/google/gson/releases";>com.google.code.gson:gson's 
releases</a>.</em></p>
   <blockquote>
   <h2>Gson 2.13.0</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>
   <p>A bug in deserializing collections has been fixed. Previously, if you did 
something like this:</p>
   <pre><code>gson.fromJson(jsonString, new 
TypeToken&lt;ImmutableList&lt;String&gt;&gt;() {})
   </code></pre>
   <p>then the inferred type would be <code>ImmutableList&lt;String&gt;</code>, 
but Gson actually gave you an <code>ArrayList&lt;String&gt;</code>. Usually 
that would lead to an immediate <code>ClassCastException</code>, but in some 
circumstances the code might sometimes succeed despite the wrong type. Now you 
will see an exception like this:</p>
   <pre><code>com.google.gson.JsonIOException: Abstract classes can't be 
instantiated!
   Adjust the R8 configuration or register an InstanceCreator or a TypeAdapter 
for this type.
   Class name: com.google.common.collect.ImmutableList
   </code></pre>
   <p>because Gson now really is trying to create an <code>ImmutableList</code> 
through its constructor, but that isn't possible.
   Either change the requested type (in the <code>TypeToken</code>) to 
<code>List&lt;String&gt;</code>, or register a <code>TypeAdapter</code> or 
<code>JsonDeserializer</code> for <code>ImmutableList</code>.</p>
   </li>
   <li>
   <p>The internal classes <code>$Gson$Types</code> and 
<code>$Gson$Preconditions</code> have been renamed to remove the <code>$</code> 
characters. Since these are internal classes (as signaled not only by the 
package name but by the <code>$</code> characters), client code should not be 
affected. If your code <em>was</em> depending on these classes then we suggest 
making a copy of the class (subject to the <a 
href="https://www.apache.org/licenses/LICENSE-2.0";>license</a>) rather than 
depending on the new names.</p>
   </li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/google/gson/compare/gson-parent-2.12.1...gson-parent-2.13.0";>https://github.com/google/gson/compare/gson-parent-2.12.1...gson-parent-2.13.0</a></p>
   <h2>Gson 2.12.1</h2>
   <p>The only difference between this release and 2.12.0 is that OSGi 
declarations in the Gson jar now specify that 
<code>com.google.errorprone.annotations</code>  is an optional dependency, not 
a required one. If you do not use OSGi then there is no effective change.</p>
   <h2>Gson 2.12.0</h2>
   <h2>What's Changed</h2>
   <p>The biggest change is that we no longer support Java 7. People who still 
need to run on Java 7 will need to use an earlier version of Gson.</p>
   <p>Other changes:</p>
   <ul>
   <li>Allow registering adapters for <code>JsonElement</code> again by <a 
href="https://github.com/Marcono1234";><code>@​Marcono1234</code></a> in <a 
href="https://redirect.github.com/google/gson/pull/2789";>google/gson#2789</a></li>
   <li>Add nesting limit for <code>JsonReader</code> by <a 
href="https://github.com/Marcono1234";><code>@​Marcono1234</code></a> in <a 
href="https://redirect.github.com/google/gson/pull/2588";>google/gson#2588</a></li>
   <li>Add <code>@CheckReturnValue</code> to our packages. by <a 
href="https://github.com/cpovirk";><code>@​cpovirk</code></a> in <a 
href="https://redirect.github.com/google/gson/pull/2693";>google/gson#2693</a></li>
   <li>Add NullSafeTypeAdapter to prevent TypeAdapter.nullSafe() from returning 
nested null-safe type adapters (<a 
href="https://redirect.github.com/google/gson/issues/2729";>#2729</a>) by <a 
href="https://github.com/lyubomyr-shaydariv";><code>@​lyubomyr-shaydariv</code></a>
 in <a 
href="https://redirect.github.com/google/gson/pull/2731";>google/gson#2731</a></li>
   <li>Support Properties subclasses in GsonTypes.getMapKeyAndValueTypes by <a 
href="https://github.com/panic08";><code>@​panic08</code></a> in <a 
href="https://redirect.github.com/google/gson/pull/2758";>google/gson#2758</a></li>
   <li>Enforce rawType to be a Class in ParameterizedTypeImpl by <a 
href="https://github.com/panic08";><code>@​panic08</code></a> in <a 
href="https://redirect.github.com/google/gson/pull/2759";>google/gson#2759</a></li>
   <li>Remove <code>AccessController</code> usage for enum adapter by <a 
href="https://github.com/Marcono1234";><code>@​Marcono1234</code></a> in <a 
href="https://redirect.github.com/google/gson/pull/2704";>google/gson#2704</a></li>
   <li>Fix typeArguments array not being cloned when resolving 
ParameterizedType with changed owner by <a 
href="https://github.com/TBlueF";><code>@​TBlueF</code></a> in <a 
href="https://redirect.github.com/google/gson/pull/2706";>google/gson#2706</a></li>
   <li>Remove duplicated declaration of required OSGi execution environment by 
<a href="https://github.com/HannesWell";><code>@​HannesWell</code></a> in <a 
href="https://redirect.github.com/google/gson/pull/2711";>google/gson#2711</a></li>
   <li>Move bnd.bnd file configuration into 'bnd' element of bnd-maven-plugin 
by <a href="https://github.com/HannesWell";><code>@​HannesWell</code></a> in <a 
href="https://redirect.github.com/google/gson/pull/2712";>google/gson#2712</a></li>
   <li>Move enum and <code>JsonElement</code> adapter classes to separate class 
files by <a 
href="https://github.com/Marcono1234";><code>@​Marcono1234</code></a> in <a 
href="https://redirect.github.com/google/gson/pull/2727";>google/gson#2727</a></li>
   <li>EnumTypeAdapter constructor optimization by <a 
href="https://github.com/esaulpaugh";><code>@​esaulpaugh</code></a> in <a 
href="https://redirect.github.com/google/gson/pull/2734";>google/gson#2734</a></li>
   <li>OSGi / bnd: Remove the self-Import of gson.annotations by <a 
href="https://github.com/chrisrueger";><code>@​chrisrueger</code></a> in <a 
href="https://redirect.github.com/google/gson/pull/2735";>google/gson#2735</a></li>
   </ul>
   <h2>New Contributors</h2>
   <ul>
   <li><a href="https://github.com/cpovirk";><code>@​cpovirk</code></a> made 
their first contribution in <a 
href="https://redirect.github.com/google/gson/pull/2693";>google/gson#2693</a></li>
   <li><a href="https://github.com/jabagawee";><code>@​jabagawee</code></a> made 
their first contribution in <a 
href="https://redirect.github.com/google/gson/pull/2701";>google/gson#2701</a></li>
   <li><a href="https://github.com/TBlueF";><code>@​TBlueF</code></a> made their 
first contribution in <a 
href="https://redirect.github.com/google/gson/pull/2706";>google/gson#2706</a></li>
   <li><a href="https://github.com/HannesWell";><code>@​HannesWell</code></a> 
made their first contribution in <a 
href="https://redirect.github.com/google/gson/pull/2711";>google/gson#2711</a></li>
   <li><a href="https://github.com/esaulpaugh";><code>@​esaulpaugh</code></a> 
made their first contribution in <a 
href="https://redirect.github.com/google/gson/pull/2734";>google/gson#2734</a></li>
   <li><a href="https://github.com/chrisrueger";><code>@​chrisrueger</code></a> 
made their first contribution in <a 
href="https://redirect.github.com/google/gson/pull/2735";>google/gson#2735</a></li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/google/gson/blob/main/CHANGELOG.md";>com.google.code.gson:gson's
 changelog</a>.</em></p>
   <blockquote>
   <h1>Change Log</h1>
   <p>The change log for versions newer than 2.10 is available only on the <a 
href="https://github.com/google/gson/releases";>GitHub Releases page</a>.</p>
   <h2>Version 2.10</h2>
   <ul>
   <li>Support for serializing and deserializing Java records, on Java ≥ 16. 
(<a 
href="https://redirect.github.com/google/gson/pull/2201";>google/gson#2201</a>)</li>
   <li>Add <code>JsonArray.asList</code> and <code>JsonObject.asMap</code> view 
methods (<a 
href="https://redirect.github.com/google/gson/pull/2225";>google/gson#2225</a>)</li>
   <li>Fix <code>TypeAdapterRuntimeTypeWrapper</code> not detecting reflective 
<code>TreeTypeAdapter</code> and <code>FutureTypeAdapter</code> (<a 
href="https://redirect.github.com/google/gson/pull/1787";>google/gson#1787</a>)</li>
   <li>Improve <code>JsonReader.skipValue()</code> (<a 
href="https://redirect.github.com/google/gson/pull/2062";>google/gson#2062</a>)</li>
   <li>Perform numeric conversion for primitive numeric type adapters (<a 
href="https://redirect.github.com/google/gson/pull/2158";>google/gson#2158</a>)</li>
   <li>Add <code>Gson.fromJson(..., TypeToken)</code> overloads (<a 
href="https://redirect.github.com/google/gson/pull/1700";>google/gson#1700</a>)</li>
   <li>Fix changes to <code>GsonBuilder</code> affecting existing 
<code>Gson</code> instances (<a 
href="https://redirect.github.com/google/gson/pull/1815";>google/gson#1815</a>)</li>
   <li>Make <code>JsonElement</code> conversion methods more consistent and fix 
javadoc (<a 
href="https://redirect.github.com/google/gson/pull/2178";>google/gson#2178</a>)</li>
   <li>Throw <code>UnsupportedOperationException</code> when 
<code>JsonWriter.jsonValue</code> is not supported (<a 
href="https://redirect.github.com/google/gson/pull/1651";>google/gson#1651</a>)</li>
   <li>Disallow <code>JsonObject</code> <code>Entry.setValue(null)</code> (<a 
href="https://redirect.github.com/google/gson/pull/2167";>google/gson#2167</a>)</li>
   <li>Fix <code>TypeAdapter.toJson</code> throwing AssertionError for custom 
IOException (<a 
href="https://redirect.github.com/google/gson/pull/2172";>google/gson#2172</a>)</li>
   <li>Convert null to JsonNull for <code>JsonArray.set</code> (<a 
href="https://redirect.github.com/google/gson/pull/2170";>google/gson#2170</a>)</li>
   <li>Fixed nullSafe usage. (<a 
href="https://redirect.github.com/google/gson/pull/1555";>google/gson#1555</a>)</li>
   <li>Validate <code>TypeToken.getParameterized</code> arguments (<a 
href="https://redirect.github.com/google/gson/pull/2166";>google/gson#2166</a>)</li>
   <li>Fix <a 
href="https://redirect.github.com/google/gson/issues/1702";>#1702</a>: 
Gson.toJson creates CharSequence which does not implement toString (<a 
href="https://redirect.github.com/google/gson/pull/1703";>google/gson#1703</a>)</li>
   <li>Prefer existing adapter for concurrent <code>Gson.getAdapter</code> 
calls (<a 
href="https://redirect.github.com/google/gson/pull/2153";>google/gson#2153</a>)</li>
   <li>Improve <code>ArrayTypeAdapter</code> for <code>Object[]</code> (<a 
href="https://redirect.github.com/google/gson/pull/1716";>google/gson#1716</a>)</li>
   <li>Improve <code>AppendableWriter</code> performance (<a 
href="https://redirect.github.com/google/gson/pull/1706";>google/gson#1706</a>)</li>
   </ul>
   <h2>Version 2.9.1</h2>
   <ul>
   <li>Make <code>Object</code> and <code>JsonElement</code> deserialization 
iterative rather than
   recursive (<a 
href="https://redirect.github.com/google/gson/pull/1912";>google/gson#1912</a>)</li>
   <li>Added parsing support for enum that has overridden toString() method (<a 
href="https://redirect.github.com/google/gson/pull/1950";>google/gson#1950</a>)</li>
   <li>Removed support for building Gson with Gradle (<a 
href="https://redirect.github.com/google/gson/pull/2081";>google/gson#2081</a>)</li>
   <li>Removed obsolete <code>codegen</code> hierarchy (<a 
href="https://redirect.github.com/google/gson/pull/2099";>google/gson#2099</a>)</li>
   <li>Add support for reflection access filter (<a 
href="https://redirect.github.com/google/gson/pull/1905";>google/gson#1905</a>)</li>
   <li>Improve <code>TypeToken</code> creation validation (<a 
href="https://redirect.github.com/google/gson/pull/2072";>google/gson#2072</a>)</li>
   <li>Add explicit support for <code>float</code> in <code>JsonWriter</code> 
(<a 
href="https://redirect.github.com/google/gson/pull/2130";>google/gson#2130</a>, 
<a 
href="https://redirect.github.com/google/gson/pull/2132";>google/gson#2132</a>)</li>
   <li>Fail when parsing invalid local date (<a 
href="https://redirect.github.com/google/gson/pull/2134";>google/gson#2134</a>)</li>
   </ul>
   <p>Also many small improvements to javadoc.</p>
   </blockquote>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/google/gson/commit/bfe0fd58e3efc9f54938a87b955bbfc42dfd45e1";><code>bfe0fd5</code></a>
 [maven-release-plugin] prepare release gson-parent-2.13.0</li>
   <li><a 
href="https://github.com/google/gson/commit/6ed64ca3a8990c60b758d838e16713b2a1e0f461";><code>6ed64ca</code></a>
 add multi-catch support to the code base (<a 
href="https://redirect.github.com/google/gson/issues/2841";>#2841</a>)</li>
   <li><a 
href="https://github.com/google/gson/commit/0074376f7e605700f218ff7362dd45a690926074";><code>0074376</code></a>
 Bump the maven group with 3 updates (<a 
href="https://redirect.github.com/google/gson/issues/2840";>#2840</a>)</li>
   <li><a 
href="https://github.com/google/gson/commit/45e5e141b1a39926e6b43c6eacd3dc0280321f71";><code>45e5e14</code></a>
 Rename <code>$Gson$Preconditions</code> and <code>$Gson$Types</code>. (<a 
href="https://redirect.github.com/google/gson/issues/2838";>#2838</a>)</li>
   <li><a 
href="https://github.com/google/gson/commit/c6d44259b53a9b2756b5767b843d15e8acacaa31";><code>c6d4425</code></a>
 Remove obsolete comment in pom.xml (<a 
href="https://redirect.github.com/google/gson/issues/2835";>#2835</a>)</li>
   <li><a 
href="https://github.com/google/gson/commit/9afd6f8e6c2d71ba0b3b7e77d56198793b9f3bcc";><code>9afd6f8</code></a>
 Bump the maven group with 10 updates (<a 
href="https://redirect.github.com/google/gson/issues/2831";>#2831</a>)</li>
   <li><a 
href="https://github.com/google/gson/commit/ad5371eaa4af3555a6277c85a8ba27c09804b712";><code>ad5371e</code></a>
 Fix findings that are new with the latest Error Prone. (<a 
href="https://redirect.github.com/google/gson/issues/2834";>#2834</a>)</li>
   <li><a 
href="https://github.com/google/gson/commit/de190d7ef5feb4950d5daca819a625b39f3fd2f5";><code>de190d7</code></a>
 Restructure code to avoid assignment expression warning. (<a 
href="https://redirect.github.com/google/gson/issues/2833";>#2833</a>)</li>
   <li><a 
href="https://github.com/google/gson/commit/3d6684741e1086e589783e78a356293c6ea9f8d6";><code>3d66847</code></a>
 Bump the github-actions group with 3 updates (<a 
href="https://redirect.github.com/google/gson/issues/2832";>#2832</a>)</li>
   <li><a 
href="https://github.com/google/gson/commit/2549ba93fc48f4c29f1a5c82553ce666712f183a";><code>2549ba9</code></a>
 Fix ConstructorConstructor creating mismatching Collection and Map instances 
...</li>
   <li>Additional commits viewable in <a 
href="https://github.com/google/gson/compare/gson-parent-2.9.0...gson-parent-2.13.0";>compare
 view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.code.gson:gson&package-manager=maven&previous-version=2.9.0&new-version=2.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to