build(deps): bump oj from 3.17.7 to 3.17.8 by dependabot[bot] · Pull Request #5643 · cloudfoundry/cloud_controller_ng

dependabot · 2026-11-09T11:05:59Z

Bumps oj from 3.17.7 to 3.17.8.

Release notes

v3.17.8

What's Changed

Always include cpuid.h, cache typedef fix by @sjanusz-r7 in ohler55/oj#1112

Keep the sign of -0.0 in compat and rails mode by @youdie006 in ohler55/oj#1115

Fix big negative integers and big decimals in Oj::Parser.usual by @Shaisolaris in ohler55/oj#1116

Reject a value after a number and whitespace in Oj::Parser by @youdie006 in ohler55/oj#1117

Combine an escaped surrogate pair in Oj::Parser by @youdie006 in ohler55/oj#1118

Reject an object close after a colon in Oj::Parser by @youdie006 in ohler55/oj#1119

Accept an exponent right after a zero integer part in Oj::Parser by @ybai08 in ohler55/oj#1121

Raise for an incomplete top level number in Oj::Parser by @ybai08 in ohler55/oj#1122

Load ostruct only when JSON::GenericObject is used (#988) by @corsonknowles in ohler55/oj#1113

Fix memory and handle leaks in Oj.load on Windows with recent winpthreads by @Watson1978 in ohler55/oj#1125

Fix writer state after a rejected excess pop by @tatikoma in ohler55/oj#1126

Fix memory corruption from ^u naming a class that is not a Struct by @Watson1978 in ohler55/oj#1127

Fix cached keys and strings with NUL returning a different value by @Watson1978 in ohler55/oj#1129

Fix segmentation fault on a create_id class path through a non-module constant by @Watson1978 in ohler55/oj#1130

Fix use-after-free of converted non-UTF-8 input in Oj.load by @Watson1978 in ohler55/oj#1132

CI: Fix ActiveSupport tests failing on Ubuntu 26.04 runners by @Watson1978 in ohler55/oj#1128

Fix segmentation fault with Oj::Parser class_cache after GC compaction by @Watson1978 in ohler55/oj#1131

Fix use-after-free of converted non-UTF-8 strings in Oj.dump by @Watson1978 in ohler55/oj#1133

Fix segmentation fault when Oj::Parser#parse is given a non-String by @Watson1978 in ohler55/oj#1134

Fix segmentation fault when Oj.safe_load is given a null StringIO by @Watson1978 in ohler55/oj#1135

Fix segmentation fault and memory leak in Oj.saj_parse with IO input by @Watson1978 in ohler55/oj#1136

Fix segmentation fault when to_json returns a non-String in custom mode by @Watson1978 in ohler55/oj#1137

Fix segmentation fault when an exception message is not a String in compat mode by @Watson1978 in ohler55/oj#1138

Fix segmentation fault when raw_json returns a non-String by @Watson1978 in ohler55/oj#1139

Fix use-after-free of keys in the Oj::Parser saj delegate by @Watson1978 in ohler55/oj#1140

Fix wrong keys and IndexError for Oj::Parser saj handlers with only some callbacks by @Watson1978 in ohler55/oj#1141

Fix buffer overflow when dumping nested arrays with a String indent by @Watson1978 in ohler55/oj#1142

Fix segmentation fault when array_class is not an Array in compat and custom mode by @Watson1978 in ohler55/oj#1143

Fix double free when closing an Oj::Doc inside the open block by @Watson1978 in ohler55/oj#1144

Fix reading freed memory when Oj.load parses an object through to_s by @Watson1978 in ohler55/oj#1146

Fix reading a freed buffer when a StringWriter is pushed into itself by @Watson1978 in ohler55/oj#1147

Fix segmentation fault and use-after-free when using a closed Oj::Doc by @Watson1978 in ohler55/oj#1148

Fix buffer leaks and unchecked file sizes when reading special files by @Watson1978 in ohler55/oj#1145

Fix reading and writing a different file when a path contains a NUL byte by @Watson1978 in ohler55/oj#1149

Fix slow parsing of object keys built to collide in the key cache by @Watson1978 in ohler55/oj#1150

Fix buffer leaks when a dump to a String, file, or stream raises by @Watson1978 in ohler55/oj#1152

Fix segmentation fault when pushing to a writer with circular: true by @Watson1978 in ohler55/oj#1158

Fix unknown class names filling the class cache and loading as a Hash by @Watson1978 in ohler55/oj#1153

Fix exclusive ranges and raised exceptions in object mode on Ruby 4.1 by @Watson1978 in ohler55/oj#1154

Fix segmentation fault after Oj::Doc#move fails on a path with .. by @Watson1978 in ohler55/oj#1155

Fix segmentation fault in wab mode after GC compaction by @Watson1978 in ohler55/oj#1156

Fix OpenStruct dumps and loads changing after GC compaction by @Watson1978 in ohler55/oj#1157

Fix exception loading and Range subclass dumps in custom mode on Ruby 4.1 by @Watson1978 in ohler55/oj#1159

Speed up dumping ASCII-only strings that are not UTF-8 by @Watson1978 in ohler55/oj#1160

Speed up dumping objects in object and custom modes by @Watson1978 in ohler55/oj#1161

Speed up dumping plain objects in custom mode by @Watson1978 in ohler55/oj#1162

Reject unescaped control characters in strict and compat mode strings by @ybai08 in ohler55/oj#1123

... (truncated)

Changelog

Sourced from oj's changelog.

3.17.8 - 2026-11-03

Fixed

Fixed issue #988 by no longer requiring ostruct when Oj is loaded, autoloading JSON::GenericObject instead. (#1113)

Always include cpuid.h and fix the cache typedef for older compilers. (#1112)

Keep the sign of -0.0 when dumping in compat and rails modes. (#1115)

Fixed big negative integers and big decimals in Oj::Parser.usual. (#1116)

Reject a value after a number and whitespace in Oj::Parser. (#1117)

Combine an escaped surrogate pair in Oj::Parser. (#1118)

Reject an object close after a colon in Oj::Parser. (#1119)

Accept an exponent right after a zero integer part in Oj::Parser. (#1121)

Raise for an incomplete top-level number in Oj::Parser. (#1122)

Reject unescaped control characters in strict and compat mode strings. (#1123)

Fixed memory and handle leaks in Oj.load with recent winpthreads on Windows. (#1125)

Fixed writer state after an excess pop. (#1126)

Fixed memory corruption when ^u names a class that is not a Struct. (#1127)

Fixed cached keys and strings containing NUL returning a different value. (#1129)

Fixed a segmentation fault on a create_id class path through a non-module constant. (#1130)

Fixed a segmentation fault with the Oj::Parser class cache after GC compaction. (#1131)

Fixed a use-after-free of converted non-UTF-8 input in Oj.load. (#1132)

Fixed a use-after-free of converted non-UTF-8 strings in Oj.dump. (#1133)

Fixed a segmentation fault when Oj::Parser#parse is given a non-String. (#1134)

Fixed a segmentation fault when Oj.safe_load is given a null StringIO. (#1135)

Fixed a segmentation fault and memory leak in Oj.saj_parse with IO input. (#1136)

Fixed a segmentation fault when to_json returns a non-String in custom mode. (#1137)

Fixed a segmentation fault when an exception message is not a String in compat mode. (#1138)

Fixed a segmentation fault when raw_json returns a non-String. (#1139)

Fixed a use-after-free of keys in the Oj::Parser saj delegate. (#1140)

Fixed wrong keys and IndexError for Oj::Parser saj handlers with only some callbacks. (#1141)

Fixed a buffer overflow when dumping nested arrays with a String indent. (#1142)

Fixed a segmentation fault when array_class is not an Array in compat and custom mode. (#1143)

Fixed a double free when closing an Oj::Doc inside the open block. (#1144)

Fixed buffer leaks and unchecked file sizes when reading special files. (#1145)

Fixed reading freed memory when Oj.load parses an object through to_s. (#1146)

Fixed reading a freed buffer when a StringWriter is pushed into itself. (#1147)

Fixed a segmentation fault and use-after-free when using a closed Oj::Doc. (#1148)

Fixed reading and writing a different file when a path contains a NUL byte. (#1149)

Fixed buffer leaks when a dump to a String, file, or stream raises. (#1152)

Fixed unknown class names filling the class cache and loading as a Hash. (#1153)

Fixed object mode ranges and exceptions on Ruby 4.1. (#1154)

Fixed a segmentation fault after Oj::Doc#move fails on a path with ... (#1155)

Fixed a segmentation fault in wab mode after GC compaction. (#1156)

Fixed OpenStruct dumps and loads changing after GC compaction. (#1157)

Fixed a segmentation fault when pushing to a writer with circular: true. (#1158)

Fixed exception loading and Range subclass dumps in custom mode on Ruby 4.1. (#1159)

Performance

Speed up parsing of object keys that collide in the key cache by using SipHash. (#1150)

... (truncated)

Commits

050ca17 Changelog update
e0072c4 Reject unescaped control characters in strict and compat mode strings (#1123)
9a3bc88 Set version to 3.17.8
e8ac532 Update changelog
89ac99b Speed up dumping plain objects in custom mode (#1162)
5bb6d7f Speed up dumping objects in object and custom modes (#1161)
6031f93 Speed up dumping ASCII-only strings that are not UTF-8 (#1160)
bfefebb Fix exception loading and Range subclass dumps in custom mode on Ruby 4.1 (#1...
52732f9 Fix OpenStruct dumps and loads changing after GC compaction (#1157)
9fc470e Fix segmentation fault in wab mode after GC compaction (#1156)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [oj](https://github.com/ohler55/oj) from 3.17.7 to 3.17.8. - [Release notes](https://github.com/ohler55/oj/releases) - [Changelog](https://github.com/ohler55/oj/blob/develop/CHANGELOG.md) - [Commits](ohler55/oj@v3.17.7...v3.17.8) --- updated-dependencies: - dependency-name: oj dependency-version: 3.17.8 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Nov 9, 2026

Navigation Menu

Repository navigation

build(deps): bump oj from 3.17.7 to 3.17.8 - #5643

build(deps): bump oj from 3.17.7 to 3.17.8#5643
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/oj-3.17.8

dependabot Bot commented on behalf of github Nov 9, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 9, 2026

v3.17.8

What's Changed

3.17.8 - 2026-11-03

Fixed

Performance

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants