dependabot[bot] opened a new pull request, #43874: URL: https://github.com/apache/superset/pull/43874
Bumps [simplejson](https://github.com/simplejson/simplejson) from 4.1.1 to 4.1.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/simplejson/simplejson/releases";>simplejson's releases</a>.</em></p> <blockquote> <h2>v4.1.2</h2> <h2>What's Changed</h2> <ul> <li>Fix control character error position when content precedes the control char by <a href="https://github.com/gaoflow";><code>@gaoflow</code></a> in <a href="https://redirect.github.com/simplejson/simplejson/pull/379";>simplejson/simplejson#379</a></li> <li>Report the offending char, not the backslash, for invalid \X escapes by <a href="https://github.com/gaoflow";><code>@gaoflow</code></a> in <a href="https://redirect.github.com/simplejson/simplejson/pull/380";>simplejson/simplejson#380</a></li> <li>Handle non-finite Decimals like floats in the encoder by <a href="https://github.com/apoorvdarshan";><code>@apoorvdarshan</code></a> in <a href="https://redirect.github.com/simplejson/simplejson/pull/381";>simplejson/simplejson#381</a></li> <li>Report the comma position for illegal trailing comma errors by <a href="https://github.com/dylanpulver";><code>@dylanpulver</code></a> in <a href="https://redirect.github.com/simplejson/simplejson/pull/382";>simplejson/simplejson#382</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/gaoflow";><code>@gaoflow</code></a> made their first contribution in <a href="https://redirect.github.com/simplejson/simplejson/pull/379";>simplejson/simplejson#379</a></li> <li><a href="https://github.com/apoorvdarshan";><code>@apoorvdarshan</code></a> made their first contribution in <a href="https://redirect.github.com/simplejson/simplejson/pull/381";>simplejson/simplejson#381</a></li> <li><a href="https://github.com/dylanpulver";><code>@dylanpulver</code></a> made their first contribution in <a href="https://redirect.github.com/simplejson/simplejson/pull/382";>simplejson/simplejson#382</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/simplejson/simplejson/compare/v4.1.1...v4.1.2";>https://github.com/simplejson/simplejson/compare/v4.1.1...v4.1.2</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/simplejson/simplejson/blob/main/CHANGES.txt";>simplejson's changelog</a>.</em></p> <blockquote> <p>Version 4.1.2 released 2026-08-26</p> <ul> <li>Fix control character error position when content precedes the control char <a href="https://redirect.github.com/simplejson/simplejson/pull/379";>simplejson/simplejson#379</a></li> <li>Report the offending char, not the backslash, for invalid \X escapes <a href="https://redirect.github.com/simplejson/simplejson/pull/380";>simplejson/simplejson#380</a></li> <li>Handle non-finite Decimals like floats in the encoder <a href="https://redirect.github.com/simplejson/simplejson/pull/381";>simplejson/simplejson#381</a></li> <li>Parse failures due to trailing commas are now reported consistently across implementations <a href="https://redirect.github.com/simplejson/simplejson/pull/382";>simplejson/simplejson#382</a></li> </ul> <p>Version 4.1.1 released 2026-04-24</p> <ul> <li>The <code>build_wheels_py27</code> CI job now also builds Python 2.7 wheels for Windows AMD64 and Windows x86, joining the existing Py2.7 manylinux1 / manylinux2010 x86_64 wheels. This unblocks offline / <code>--no-index</code> installs on Py2.7-on-Windows (the original reporter's case), which previously had no matching binary wheel on PyPI, fell through to the sdist, and failed on the PEP 517 isolated-build step complaining that <code>setuptools>=42</code> was not in the wheelhouse. <a href="https://redirect.github.com/simplejson/simplejson/issues/377";>simplejson/simplejson#377</a></li> </ul> <p>Version 4.1.0 released 2026-04-22</p> <ul> <li> <p>The C extension now accelerates encoding when <code>indent=</code> is set. Previously the encoder fell back to the pure-Python implementation whenever a non-None <code>indent</code> was passed; now the C encoder emits the newline-plus-indent prefix, the level-aware item separator, and the closing indent directly. A representative nested-dict workload benchmarks about 4-5x faster end-to-end, and the <code>indent=0</code> and empty-container edge cases continue to match the Python output byte-for-byte.</p> </li> <li> <p>The C extension now emits PEP 678 <code>exc.add_note()</code> annotations on serialization failures, matching the pure-Python encoder. A chained error on <code>{'a': [1, object(), 3]}</code> produces the same three notes (<code>when serializing object object</code>, <code>when serializing list item 1</code>, <code>when serializing dict item 'a'</code>) whether the speedups are loaded or not, so the add_note assertions in <code>test_errors.py</code> no longer need <code>indent=2</code> to force the Python path.</p> </li> </ul> <p>Version 4.0.1 released 2026-04-18</p> <ul> <li>Skip uploading Pyodide/wasm wheels to PyPI, which rejects them with "unsupported platform tag 'pyodide_2024_0_wasm32'". The wheels are still built in CI and preserved as workflow artifacts. <a href="https://redirect.github.com/simplejson/simplejson/pull/375";>simplejson/simplejson#375</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/simplejson/simplejson/commit/d1fe71a2b8a4dd307d7010076cd8cc74087df030";><code>d1fe71a</code></a> Add missing changelog entries (<a href="https://redirect.github.com/simplejson/simplejson/issues/384";>#384</a>)</li> <li><a href="https://github.com/simplejson/simplejson/commit/aa1f2c49f3cd9145352bc0f3d29de8eeb35ea177";><code>aa1f2c4</code></a> Update CHANGES for v4.1.2 (<a href="https://redirect.github.com/simplejson/simplejson/issues/383";>#383</a>)</li> <li><a href="https://github.com/simplejson/simplejson/commit/b84ad54f39289ce81b16bcb2d0b50de581ab5b2a";><code>b84ad54</code></a> Report the comma position for illegal trailing comma errors (<a href="https://redirect.github.com/simplejson/simplejson/issues/382";>#382</a>)</li> <li><a href="https://github.com/simplejson/simplejson/commit/b0fe1ef4cb7db57f14dfb8416a468bfb77bbd3ec";><code>b0fe1ef</code></a> Handle non-finite Decimals like floats in the encoder (fixes <a href="https://redirect.github.com/simplejson/simplejson/issues/149";>#149</a>) (<a href="https://redirect.github.com/simplejson/simplejson/issues/381";>#381</a>)</li> <li><a href="https://github.com/simplejson/simplejson/commit/fa8feea8837e9859b207ae1883051b97510ca3e6";><code>fa8feea</code></a> Report the offending char, not the backslash, for invalid \X escapes (<a href="https://redirect.github.com/simplejson/simplejson/issues/380";>#380</a>)</li> <li><a href="https://github.com/simplejson/simplejson/commit/bded822467d955fe86a93aa3acdfe03d834f1eb3";><code>bded822</code></a> Fix control character error position when content precedes the control char (...</li> <li>See full diff in <a href="https://github.com/simplejson/simplejson/compare/v4.1.1...v4.1.2";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
