Skip to content

build(deps): bump com.alibaba:fastjson from 2.0.63 to 2.0.64 in /cloud/anbao - #186

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/cloud/anbao/com.alibaba-fastjson-2.0.64
Open

build(deps): bump com.alibaba:fastjson from 2.0.63 to 2.0.64 in /cloud/anbao#186
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/cloud/anbao/com.alibaba-fastjson-2.0.64

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps com.alibaba:fastjson from 2.0.63 to 2.0.64.

Release notes

Sourced from com.alibaba:fastjson's releases.

fastjson 2.0.64版本发布

FASTJSON 2.0.64 Release Notes

Release Date: 2 Aug 2026 Tag: 2.0.64

Overview

This is a bug fix release. It fixes several issues in core serialization/deserialization, Java records support, and the fastjson 1.x compatibility layer. All users are recommended to upgrade.

Bug Fixes

  1. Fixed ClassFormatError when serializing classes with array-typed fields #4009 #4014
  2. Fixed strBuf not kept in sync after mid-loop growth, which could produce corrupted output #7671 #7676
  3. Fixed generic invalidation in record class #3156 #4027
  4. Fixed global naming strategy not applied to Java records #7656 #7657
  5. Fixed MethodHandles.Lookup initialization order — initialize before reading IMPL_LOOKUP #7691 #7718
  6. Fixed additionalItems schema validation for Java arrays #7709
  7. (compat) Added serialVersionUID to JSONArray for Java serialization compatibility #7687 #7698
  8. (compat) Fixed JSONPath consecutive writes failing in fastjson 1.x compatibility layer #7697
  9. (compat) Added ParserConfig.propertyNamingStrategy for fastjson 1.x compatibility #7740

Maven Dependency Configuration

Standard Version

<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64</version>
</dependency>

Android 5 Optimized Version

<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64.android5</version>
</dependency>

Android 8 Optimized Version

<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64.android8</version>
</dependency>

... (truncated)

Commits
  • 3953115 Merge pull request #7744 from alibaba/release/2.0.64
  • 194bd97 2.0.64 release
  • 6b40188 fix: ClassFormatError when serializing classes with array-typed fields, for i...
  • 1836c7b fix: keep strBuf in sync after mid-loop growth, for issue #7671 (#7676)
  • f719ac1 docs: include all feature introductions in the document (#4035)
  • 3ff6acd fix generic invalidation in record class, for issue #3156 (#4027)
  • 190fc07 docs: add performance and bilingual PR conventions to AGENTS.md, add CLAUDE.m...
  • d1029c7 fix: global naming strategy not applied to Java records (#7656) (#7657)
  • 120789b fix: add serialVersionUID to JSONArray in fastjson1-compatible for Java seria...
  • be54363 fix: initialize MethodHandles.Lookup before reading IMPL_LOOKUP (#7691) (#7718)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.alibaba:fastjson](https://github.com/alibaba/fastjson2) from 2.0.63 to 2.0.64.
- [Release notes](https://github.com/alibaba/fastjson2/releases)
- [Commits](alibaba/fastjson2@2.0.63...2.0.64)

---
updated-dependencies:
- dependency-name: com.alibaba:fastjson
  dependency-version: 2.0.64
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants