Bump oj from 3.17.6 to 3.17.7

[dependabot]

Bumps oj from 3.17.6 to 3.17.7.

Release notes

Sourced from oj's releases.

v3.17.7

What's Changed

• Speed up hash-heavy documents: skip the 11KB per-parse memset and bulk-insert hashes by @​ST-eugenekrivdyuk in ohler55/oj#1096
• Avoid mutating JSON.pretty_generate options by @​OskarEichler in ohler55/oj#1098
• Preserve decimal placement for large parser numbers by @​OskarEichler in ohler55/oj#1099
• Keep zero digits in oversized parser exponents by @​OskarEichler in ohler55/oj#1100
• Parse very small usual-mode numbers correctly by @​OskarEichler in ohler55/oj#1101
• Speed up symbol keys by interning without a temporary String by @​Watson1978 in ohler55/oj#1102
• Keep Oj's own options out of the hash passed to to_json by @​sferik in ohler55/oj#1106
• Ensure class-cache mutex is released on exceptions by @​caplanmaor in ohler55/oj#1108
• Guard __has_include with an #ifdef to support older GCC versions (4.4.7 etc.) by @​sjanusz-r7 in ohler55/oj#1111

New Contributors

• @​ST-eugenekrivdyuk made their first contribution in ohler55/oj#1096
• @​OskarEichler made their first contribution in ohler55/oj#1098
• @​caplanmaor made their first contribution in ohler55/oj#1108
• @​sjanusz-r7 made their first contribution in ohler55/oj#1111

Full Changelog: ohler55/oj@v3.17.6...v3.17.7

Changelog

Sourced from oj's changelog.

3.17.7 - 2026-09-29

Fixed

• issue #1104, where Oj.dump in compat and custom mode forwarded its whole options hash to the to_json methods it calls, so with json 3.0, whose generator raises ArgumentError on options it does not know, dumping a Time or any other object whose to_json comes from the json gem failed with unknown keywords: mode, use_to_json. Nested values reach to_json even without use_to_json, so Oj.dump(data, mode: :compat) failed the same way for data holding a BigDecimal or Time. The options Oj acts on are now dropped from the hash to_json receives, except :only and :except, which ActiveSupport's as_json reads. Keys Oj does not know are passed through untouched.
• Speed up hash-heavy documents: skip the 11KB per-parse memset and bulk-insert hashes (#1096)
• Preserve decimal placement for large parser numbers (#1099)
• Keep zero digits in oversized parser exponents (#1100)
• Parse very small usual-mode numbers correctly (#1101)
• Speed up symbol keys by interning without a temporary String (#1102)
• Keep Oj's own options out of the hash passed to to_json (#1106)
• Ensure class-cache mutex is released on exceptions (#1108)
• Guard __has_include with an #ifdef to support older GCC versions (4.4.7 etc.) (#1111)

Commits

• 77a15a7 Update changelog
• 305f653 Guard __has_include with an #ifdef to support older GCC versions (4.4.7 etc.)...
• da60b2a Ensure class-cache mutex is released on exceptions (#1108)
• 46f27bb Keep Oj's own options out of the hash passed to to_json (#1106)
• 999ee8e Speed up symbol keys by interning without a temporary String (#1102)
• a1ef274 Parse very small usual-mode numbers correctly (#1101)
• 479405d Keep zero digits in oversized parser exponents (#1100)
• 7c2b880 Preserve decimal placement for large parser numbers (#1099)
• e0e056e Avoid mutating pretty_generate options (#1098)
• cf84edb Speed up hash-heavy documents: skip the 11KB per-parse memset and bulk-insert...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)