Skip to content

[Dependency] Bump json from 2.19.3 to 2.19.4#754

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/json-2.19.4
Open

[Dependency] Bump json from 2.19.3 to 2.19.4#754
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/json-2.19.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps json from 2.19.3 to 2.19.4.

Release notes

Sourced from json's releases.

v2.19.4

What's Changed

  • Fix parsing of out of range floats (very large exponents that lead to either 0.0 or Inf).

Full Changelog: ruby/json@v2.19.2...v2.19.4

Changelog

Sourced from json's changelog.

2026-04-19 (2.19.4)

  • Fix parsing of out of range floats (very large exponents that lead to either 0.0 or Inf).
Commits
  • 6688a81 Release 2.19.4
  • f1e6163 Fix references to NAN and INFINITY in documentation comments
  • 18d5475 Reduce warnings
  • 1072482 Fix parsing of negative out of bound floats.
  • 20454ba Fix handling out of of range exponent in numbers
  • 0e99fcb Fix json generation for symbols on TruffleRuby
  • ac0670b Keep Integer#to_json optimized and adapt the test
  • 35db859 Avoid extra String#+@ calls, interpolated strings are already mutable
  • d0b47b0 Avoid method redefinition warnings in test_broken_bignum
  • e871d07 test_broken_bignum: avoid fork and subprocess for robustness
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Apr 20, 2026
@github-project-automation github-project-automation Bot moved this to Seeking Reviewer in Submitty Development May 1, 2026
Bumps [json](https://github.com/ruby/json) from 2.19.3 to 2.19.4.
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.19.3...v2.19.4)

---
updated-dependencies:
- dependency-name: json
  dependency-version: 2.19.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/bundler/json-2.19.4 branch from 8b77fcd to f4396de Compare May 1, 2026 00:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

Status: Seeking Reviewer

Development

Successfully merging this pull request may close these issues.

0 participants