Skip to content

fix(deps): update dependency com.alibaba:fastjson to v2.0.66 - #102

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/fastjson.version
Open

renovate[bot] wants to merge 1 commit into
masterfrom
renovate/fastjson.version

Conversation

@renovate

@renovate renovate Bot commented Mar 20, 2023 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
com.alibaba:fastjson 2.0.25 → 2.0.66 age confidence

Release Notes

alibaba/fastjson2 (com.alibaba:fastjson)

v2.0.66

Compare Source

What's Changed

New Contributors

Full Changelog: alibaba/fastjson2@2.0.65...2.0.66

v2.0.65: fastjson 2.0.65版本发布

Compare Source

FASTJSON 2.0.65 Release Notes

Release Date: 2 Sep 2026
Tag: 2.0.65 (879183e)

Overview

This is a security fix release. It closes an AutoType authorization bypass reachable when JSONReader.Feature.SupportAutoType is enabled, and includes parser/writer robustness fixes. All users are strongly recommended to upgrade, especially applications that parse untrusted JSON or JSONB with AutoType enabled.

This release also restores fastjson2-extension-spring6 on Maven Central. It was missing for 2.0.62–2.0.64 because those releases were deployed with a JDK that did not activate the enable-for-17+ build profile, so the module never entered the build reactor #​7840.

The Android variants 2.0.65.android5 and 2.0.65.android8 carry the same AutoType security fix #​7843 #​7844.

Security Fixes

  1. Unified AutoType authorization on the real type name: a reader-cache hit on the FNV-1a-64 hash of @type is no longer treated as authorization. All untrusted-input paths (JSON and JSONB readers, and the object readers for beans, interfaces, exceptions, adapters, typed maps, arrays, collections and no-default-constructor types) now resolve @type through the full provider security checks — SafeMode, deny lists, type-name validation, and any user-supplied AutoTypeBeforeHandler. Compatibility is preserved for explicit local mappings declared with @JSONType(seeAlso = ...) and for readers annotated with @JSONType(... SupportAutoType) #​7753

Bug Fixes

  1. Fixed ArrayIndexOutOfBoundsException in JSONReaderASCII field-name decoding, triggered by a field name that combines an escape sequence with latin1 bytes >= 0x80 #​7808 #​7836
  2. Fixed getter methods being silently discarded when serializing char/Character fields, which caused NPEs or lost field values #​7719
  3. (kotlin) Fixed NullPointerException when serializing a Kotlin class without kotlin-reflect on the classpath #​7835

Documentation

  1. Switched the star-history charts to star-history.dera.page #​7780

Maven Dependency Configuration

Standard Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.65</version>
</dependency>
Spring 6 Extension
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.65</version>
</dependency>
Android 5 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.65.android5</version>
</dependency>
Android 8 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.65.android8</version>
</dependency>
中文版本

概述

本版本为安全修复版本,修复了在开启 JSONReader.Feature.SupportAutoType 时可触达的 AutoType 授权绕过问题,并包含解析/序列化的健壮性修复。强烈建议所有用户升级,尤其是解析不可信 JSON / JSONB 且开启了 AutoType 的应用。

本版本同时恢复了 Maven Central 上的 fastjson2-extension-spring6。2.0.62~2.0.64 缺失该模块,原因是这几个版本发布时使用的 JDK 未激活 enable-for-17+ 构建 profile,模块没有进入构建 reactor #​7840。

Android 变体 2.0.65.android5 与 2.0.65.android8 已同步 port 该 AutoType 安全修复 #​7843 #​7844。

安全修复

  1. 将 AutoType 授权统一到真实类型名:@type 的 FNV-1a-64 哈希命中 reader 缓存不再被视为授权。所有不可信输入路径(JSON 与 JSONB reader,以及 bean、接口、异常、adapter、typed map、数组、集合、无默认构造类型的 object reader)现在都会让 @type 经过 provider 的完整安全检查——SafeMode、deny 列表、类型名校验,以及用户提供的 AutoTypeBeforeHandler。同时保留兼容行为:@JSONType(seeAlso = ...) 声明的显式局部映射,以及标注了 @JSONType(... SupportAutoType) 的 reader #​7753

问题修复

  1. 修复 JSONReaderASCII 字段名解码的 ArrayIndexOutOfBoundsException——当字段名同时包含转义序列和 >= 0x80 的 latin1 字节时触发 #​7808 #​7836
  2. 修复序列化 char/Character 字段时 getter 方法被静默丢弃,导致空指针异常或字段值丢失的问题 #​7719
  3. (kotlin)修复 classpath 上没有 kotlin-reflect 时序列化 Kotlin 类抛出 NullPointerException 的问题 #​7835

文档

  1. star-history 图表切换到 star-history.dera.page #​7780

Maven 依赖配置

标准版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.65</version>
</dependency>
Spring 6 扩展
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.65</version>
</dependency>
Android 5 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.65.android5</version>
</dependency>
Android 8 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.65.android8</version>
</dependency>

v2.0.64: fastjson 2.0.64版本发布

Compare Source

FASTJSON 2.0.64 Release Notes

Release Date: 2 Aug 2026
Tag: 2.0.64

Overview

This is a bug fix release. It fixes several issues in core serialization/deserialization, Java records support, and the fastjson 1.x compatibility layer. All users are recommended to upgrade.

Bug Fixes

  1. Fixed ClassFormatError when serializing classes with array-typed fields #​4009 #​4014
  2. Fixed strBuf not kept in sync after mid-loop growth, which could produce corrupted output #​7671 #​7676
  3. Fixed generic invalidation in record class #​3156 #​4027
  4. Fixed global naming strategy not applied to Java records #​7656 #​7657
  5. Fixed MethodHandles.Lookup initialization order — initialize before reading IMPL_LOOKUP #​7691 #​7718
  6. Fixed additionalItems schema validation for Java arrays #​7709
  7. (compat) Added serialVersionUID to JSONArray for Java serialization compatibility #​7687 #​7698
  8. (compat) Fixed JSONPath consecutive writes failing in fastjson 1.x compatibility layer #​7697
  9. (compat) Added ParserConfig.propertyNamingStrategy for fastjson 1.x compatibility #​7740

Maven Dependency Configuration

Standard Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64</version>
</dependency>
Android 5 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64.android5</version>
</dependency>
Android 8 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64.android8</version>
</dependency>
中文版本

概述

本版本为问题修复版本,修复了核心序列化/反序列化、Java records 支持以及 fastjson 1.x 兼容层中的多个问题。建议所有用户升级。

问题修复

  1. 修复序列化包含数组类型字段的类时抛出 ClassFormatError 的问题 #​4009 #​4014
  2. 修复循环中途扩容后 strBuf 未同步,可能导致输出损坏的问题 #​7671 #​7676
  3. 修复 record 类中泛型失效的问题 #​3156 #​4027
  4. 修复全局命名策略未应用于 Java records 的问题 #​7656 #​7657
  5. 修复 MethodHandles.Lookup 初始化顺序——在读取 IMPL_LOOKUP 之前完成初始化 #​7691 #​7718
  6. 修复 Java 数组的 additionalItems schema 校验 #​7709
  7. (兼容层)为 JSONArray 添加 serialVersionUID,兼容 Java 序列化 #​7687 #​7698
  8. (兼容层)修复 fastjson 1.x 兼容层 JSONPath 连续写入失效的问题 #​7697
  9. (兼容层)添加 ParserConfig.propertyNamingStrategy,兼容 fastjson 1.x #​7740

Maven 依赖配置

标准版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64</version>
</dependency>
Android 5 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64.android5</version>
</dependency>
Android 8 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64.android8</version>
</dependency>

v2.0.63: fastjson 2.0.63版本发布

Compare Source

FASTJSON 2.0.63 Release Notes

Release Date: 29 Jul 2026
Tag: 2.0.63 (82eda3e)

Overview

This is a security fix release. It hardens AutoType deserialization and fixes several parser robustness issues (OOM / DoS) that can be triggered by crafted input. All users are strongly recommended to upgrade, especially applications parsing untrusted JSON or JSONB data.

Users who cannot upgrade immediately can mitigate the AutoType issue with -Dfastjson2.parser.safeMode=true (applications not using a custom AutoTypeBeforeHandler).

fastjson 1.x users: the same AutoType hardening is available in fastjson 1.2.84.

Security Fixes

  1. Strengthened AutoType type name validation and whitelist verification: type names containing URL-special characters are rejected before reaching the class loader; the accept name text is verified after a whitelist hash match so a hash collision alone cannot whitelist a type; an accept prefix no longer covers ClassLoader/DataSource/RowSet gadget base types — only an accept entry naming the type in full is treated as an explicit opt-in #​7703
  2. Limited number literal digits to prevent BigInteger O(n²) DoS with crafted long number literals #​7668 #​7694
  3. Fixed JSONB BC_BIGINT declared-length OOM from crafted payloads declaring a huge length #​7669 #​7696
  4. Fixed JSONB BC_BINARY declared-length OOM #​7669 #​7705

Changes & Bug Fixes

  1. Fixed missing reference detection for Collection elements (e.g. HashSet), duplicate elements now serialize as $ref when ReferenceDetection is on #​7678 #​7701
  2. Fixed Metaspace leak caused by ObjectWriter created in the switch block of getObjectWriterInternal #​7626 #​7627
  3. Fixed performance: hoisted getInt/setInt out of lambda to avoid per-call spin #​7677 #​7693
  4. Added support for JSONCompiled records #​7665
  5. Added warning when a Kotlin class loses field values due to missing kotlin-reflect #​7675

Maven Dependency Configuration

Standard Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.63</version>
</dependency>
Android 5 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.63.android5</version>
</dependency>
Android 8 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.63.android8</version>
</dependency>
中文版本

概述

本版本为安全修复版本,加固了 AutoType 反序列化校验,并修复了多个可由构造输入触发的解析健壮性问题(OOM / DoS)。强烈建议所有用户升级,尤其是解析不可信 JSON 或 JSONB 数据的应用。

暂时无法升级的用户,可通过 -Dfastjson2.parser.safeMode=true 缓解 AutoType 问题(适用于未使用自定义 AutoTypeBeforeHandler 的应用)。

fastjson 1.x 用户:同款 AutoType 加固已在 fastjson 1.2.84 中提供。

安全修复

  1. 加强 AutoType 类型名校验与白名单验证:包含 URL 特殊字符的类型名在到达类加载器之前即被拒绝;白名单 hash 命中后增加文本回验,仅 hash 碰撞无法再绕过白名单;accept 前缀不再覆盖 ClassLoader/DataSource/RowSet 等危险基类——只有完整类名的 accept 条目才视为显式放行 #​7703
  2. 限制数字字面量位数,防止构造的超长数字触发 BigInteger O(n²) DoS #​7668 #​7694
  3. 修复 JSONB BC_BIGINT 声明长度 OOM(构造超大长度声明的 payload)#​7669 #​7696
  4. 修复 JSONB BC_BINARY 声明长度 OOM #​7669 #​7705

变更与问题修复

  1. 修复 Collection 元素(如 HashSet)缺少引用检测的问题,开启 ReferenceDetection 时重复元素现在正确序列化为 $ref #​7678 #​7701
  2. 修复 getObjectWriterInternal switch 分支中创建的 ObjectWriter 未缓存导致的 Metaspace 泄漏 #​7626 #​7627
  3. 性能修复:将 getInt/setInt 移出 lambda,避免每次调用自旋 #​7677 #​7693
  4. 支持 JSONCompiled records #​7665
  5. 缺少 kotlin-reflect 导致 Kotlin 类字段值丢失时增加警告日志 #​7675

Maven 依赖配置

标准版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.63</version>
</dependency>
Android 5 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.63.android5</version>
</dependency>
Android 8 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.63.android8</version>
</dependency>

v2.0.62

Compare Source

v2.0.61: fastjson 2.0.61版本发布

Compare Source

FASTJSON 2.0.61 Release Notes

Release Date: 07 Feb 2026
Tag: 2.0.61 (170f71f)

Overview

This is a regularly scheduled maintenance release with feature enhancements, performance improvements, and bug fixes. Users should upgrade as needed.

Changes & Bug Fixes

  1. Fixed issue where Jackson's @JsonProperty on methods was being ignored in record types #​3893
  2. Fixed multiple ArrayIndexOutOfBoundsException issues in JSONReaderUTF8, JSONReaderASCII, and JSONReader #​3883
  3. Improved performance when parsing JSON with numerous escape characters #​3889
  4. Fixed conflict where global Date writer overrides @JSONField format #​3864
  5. Fixed TypeUtils.castToTimestamp compatibility issues when upgrading from 1.2.83 #​3906 #​3907
  6. Added support for serializing non-finite numbers (NaN, Infinity) as strings #​3911
  7. Added default value support for getString and other getXXX methods #​3880
  8. Fixed double quotes issue in TypeUtils.cast with Long global converter #​3932
  9. Added Java 8 TimeModule support including improved YearMonth support #​3934 #​3935
  10. Fixed scientific notation floating point deserialization errors #​3917 #​3939 #​3955
  11. Added serialization support for org.w3c.dom.Node #​3960
  12. Fixed exception when parsing object keys with emoji and escape characters #​3928
  13. Fixed generic type inference for List subclasses during deserialization #​3926
  14. Added support for custom error messages in JSON Schema validation #​1559
  15. Added parse(InputStream) overload with default context #​3946
  16. Fixed DirectByteBuffer UnsupportedOperationException for java.nio.ByteBuffer#array #​3894
  17. Added support for composing multiple filters (PropertyFilter, PropertyPreFilter, etc.) #​3877
  18. Fixed incorrect overflow check when parsing BigInteger as Double
  19. Enhanced security checks in hex digit processing
  20. Improved readString performance in JSONReaderUTF8/JSONReaderUTF16
  21. Fixed various issues with WriteNulls, ErrorOnNullForPrimitives, NotWriteDefaultValue, and other features
  22. Added ProGuard rules for fields affected by reflection operations
  23. Fixed cast error when using -Dfastjson2.creator=reflect #​1563

Maven Dependency Configuration

Standard Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.61</version>
</dependency>
Android 5 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.61.android5</version>
</dependency>
Android 8 Optimized Version (supports java.time and Optional)
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.61.android8</version>
</dependency>
1.x Compatible Version
<dependency>
    <groupId>com.alibaba</groupId>
    <artifactId>fastjson</artifactId>
    <version>2.0.61</version>
</dependency>
Spring 5 Extension
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring5</artifactId>
    <version>2.0.61</version>
</dependency>
Spring 6 Extension
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.61</version>
</dependency>
JAX-RS Extension
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-jaxrs</artifactId>
    <version>2.0.61</version>
</dependency>
JAX-RS Jakarta Extension
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-jaxrs-jakarta</artifactId>
    <version>2.0.61</version>
</dependency>

Related Links


FASTJSON 2.0.61 发布说明

发布日期: 2026年2月7日
标签: 2.0.61 (170f71f)

概述

这是定期维护版本,包含功能增强、性能改进和问题修复。建议用户根据需要升级。

变更与问题修复

  1. 修复 Jackson 的 @JsonProperty 注解在 record 类型的方法上被忽略的问题 #​3893
  2. 修复 JSONReaderUTF8、JSONReaderASCII 和 JSONReader 中的多个 ArrayIndexOutOfBoundsException 问题 #​3883
  3. 优化包含大量转义字符的 JSON 解析性能 #​3889
  4. 修复全局 Date writer 覆盖 @JSONField format 格式的冲突问题 #​3864
  5. 修复从 1.2.83 版本升级时 TypeUtils.castToTimestamp 的兼容性问题 #​3906 #​3907
  6. 新增支持将非有限数字(NaN、Infinity)序列化为字符串 #​3911
  7. 为 getString 等 getXXX 方法新增默认值参数支持 #​3880
  8. 修复使用 Long 全局转换器时 TypeUtils.cast 出现双引号的问题 #​3932
  9. 新增 Java 8 TimeModule 支持,包括改进的 YearMonth 支持 #​3934 #​3935
  10. 修复科学计数法浮点数反序列化错误 #​3917 #​3939 #​3955
  11. 新增对 org.w3c.dom.Node 的序列化支持 #​3960
  12. 修复解析包含 emoji 和转义字符的对象键时的异常 #​3928
  13. 修复 List 子类在反序列化时无法自动推断泛型类型的问题 #​3926
  14. 新增 JSON Schema 校验时支持自定义错误消息 #​1559
  15. 新增带默认上下文的 parse(InputStream) 重载方法 #​3946
  16. 修复 DirectByteBuffer 调用 java.nio.ByteBuffer#array 时的 UnsupportedOperationException #​3894
  17. 新增支持组合多个过滤器(PropertyFilter、PropertyPreFilter 等)#​3877
  18. 修复将 BigInteger 解析为 Double 时溢出检查不正确的问题
  19. 增强十六进制数字处理的安全检查
  20. 改进 JSONReaderUTF8/JSONReaderUTF16 的 readString 性能
  21. 修复 WriteNulls、ErrorOnNullForPrimitives、NotWriteDefaultValue 等特性的多个问题
  22. 为受反射操作影响的字段添加 ProGuard 规则
  23. 修复使用 -Dfastjson2.creator=reflect 时的类型转换错误 #​1563

Maven 依赖配置

标准版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.61</version>
</dependency>
Android 5 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.61.android5</version>
</dependency>
Android 8 优化版本(支持 java.time 和 Optional)
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.61.android8</version>
</dependency>
1.x 兼容版本
<dependency>
    <groupId>com.alibaba</groupId>
    <artifactId>fastjson</artifactId>
    <version>2.0.61</version>
</dependency>
Spring 5 扩展
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring5</artifactId>
    <version>2.0.61</version>
</dependency>
Spring 6 扩展
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.61</version>
</dependency>
JAX-RS 扩展
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-jaxrs</artifactId>
    <version>2.0.61</version>
</dependency>
JAX-RS Jakarta 扩展
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-jaxrs-jakarta</artifactId>
    <version>2.0.61</version>
</dependency>

相关链接

v2.0.60: fastjson 2.0.60发布

Compare Source

这又是一个定期维护的功能增强BUG FIX版本,大家按需升级。

Issues

  1. 修复dubbo使用时报错not support none-Serializable的问题 #​3499
  2. 修复dubbo使用时字段带缺省值是序列化丢失字段的问题 #​3765 #​3842
  3. 增加JSONObject.getIntValue方法处理默认值 #​3772
  4. JSONArray.getJSONObject行为保持和JSONObject一样 #​2989
  5. 修复JSONField(deserialize = false)在public字段不生效的问题
  6. 增强日期格式反序列化支持 #​3102
  7. 补充fastjson2-extension-jaxrs-jakarta的发版 #​3767
  8. 修复枚举使用@ JsonProperties之后结果错误的问题 #​3799
  9. 修复某些场景反序列化java.util.Collections#EMPTY_LIST报错的问题 #​3828
  10. 修复JSONPath.eval(jsonString, path)和fastjson 1.x某些场景不兼容的问题 #​3825
  11. 反序列化时增加Feature.DisableStringArrayUnwrapping #​3757
  12. 修复codegen的问题 #​3836 #​3833

MAVEN依赖配置

<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.60</version>
</dependency>
  • android5针对优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.60.android5</version>
</dependency>
  • android8针对优化版本
    这个版本支持java.time和Optional
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.60.android8</version>
</dependency>
  • 1.x 兼容版本
<dependency>
    <groupId>com.alibaba</groupId>
    <artifactId>fastjson</artifactId>
    <version>2.0.60</version>
</dependency>
  • Spring 5 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring5</artifactId>
    <version>2.0.60</version>
</dependency>
  • Spring 6 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.60</version>
</dependency>

3. 相关链接

v2.0.59: fastjson 2.0.59发布

Compare Source

这又是一个定期维护的功能增强BUG FIX版本,大家按需升级。

Issues

  1. 修复在部分Android机型上崩溃的问题 #​3769
  2. 修复Android分支processObjectInputSingleItemArray()函数内部产生空指针的问题 #​3770
  3. JSONArray/JSONObject增加getLocalDate/getLocalDateTime方法
  4. 修复某些场景解析非法JSON数据导致JVM Crash的问题 #​3761
  5. 修复JSONB谢衣反序列化AtomicLong报错的问题 #​3771
  6. 修复序列化Spring RefreshScope Bean导致内存不停上涨的问题
  7. 修复Android分支和master部分BUG fix不同步的问题 #​3710
  8. 支持Long类型序列化日期格式 #​3407
  9. 修复WriteNullNumberAsZero行为和fastjson 1行为不一致的问题 #​3702
  10. 修复解析Set[...]某些场景报错的问题 #​3692
  11. 增加对webflux的支持 #​1501 #​3691
  12. 修复JSONWriter.Feature.FieldBased 和 LocalDate冲突的问题 #​3602
  13. 增强对base64格式解析的问题 #​3681

MAVEN依赖配置

<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.59</version>
</dependency>
  • android5针对优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.59.android5</version>
</dependency>
  • android8针对优化版本
    这个版本支持java.time和Optional
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.59.android8</version>
</dependency>
  • 1.x 兼容版本
<dependency>
    <groupId>com.alibaba</groupId>
    <artifactId>fastjson</artifactId>
    <version>2.0.59</version>
</dependency>
  • Spring 5 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring5</artifactId>
    <version>2.0.59</version>
</dependency>
  • Spring 6 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.59</version>
</dependency>

3. 相关链接

v2.0.58: Fastjson 2.0.58版本发布

Compare Source

这又是一个定期维护的功能增强BUG FIX版本,大家按需升级。

  1. 修复序列化Enum子类结果不对的问题 #​3464
  2. 修复cglib代理对象序列化结果不对的问题 #​3445
  3. 修复graalvm native-image运行报错的问题 #​3274 #​3108 #​3587
  4. 支持LabelFilter,兼容fastjson 1.x #​2974
  5. 增强fastjson 1.x的兼容 #​2850
  6. 支持jax-rs #​2490
  7. 修复android在 Unsafe报错的问题 #​2263 #​3576 #​3636
  8. 支持SkipTransientField,兼容fastjson 1.x #​3368 #​3659
  9. 修复无法反序列化包含$ref的数组字符串的问题 #​3436
  10. 支持更多场景base64字符串反序列化 #​3497
  11. 修复Dubbo 使用 Fastjson2.0.57 版本时提示 not support none-Serializable #​3499
  12. 修复基本类型在Feature.NotWriteDefaultValue下表现不一致 #​3183 #​3518
  13. 修复JSONObject.toJavaObject在final List字段时会导致重复元素的问题 #​2944
  14. 修复JSONPath.set在某些数组场景无法替换的问题 #​3375
  15. 修复JSONPath有些场景无法解析数组数据的问题 #​3331
  16. 修复某些场景空字符串无法被当成空值处理的问题 #​3537
  17. 修复某些场景Boolean类型反序列化结果不对的问题 #​3539
  18. 修复某些场景JSONObject::from结果丢失泛型信息的问题 #​3569
  19. 修复JSON解析数值时未区分0.0和-0.0的问题 #​3613
  20. 修复某些场景不抛出JSONException的问题 #​3610
  21. 新增加JSONWriter.Feature.WriterUtilDateAsMillis 方便fastjson 1.x用户迁移
  22. 修复某些场景子类反序列化字段丢失的问题 #​3621
  23. 修复自定义List类型不支持自定义序列化的问题 #​3601
  24. 修复BigDecimal scale为负时序列化长度计算不对报越界的问题 #​3595
  25. 修复数组元素后面带有注释时反序列化失败 #​3547
  26. 修复@JSONField(defaultValue="") 和fastjson 1.x不兼容的问题
  27. 修复BigDecimal在前字段带多余空格时某些场景报错的问题 #​3665

MAVEN依赖配置

<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.58</version>
</dependency>
  • android5针对优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.58.android5</version>
</dependency>
  • android8针对优化版本
    这个版本支持java.time和Optional
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.58.android8</version>
</dependency>
  • 1.x 兼容版本
<dependency>
    <groupId>com.alibaba</groupId>
    <artifactId>fastjson</artifactId>
    <version>2.0.58</version>
</dependency>
  • Spring 5 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring5</artifactId>
    <version>2.0.58</version>
</dependency>
  • Spring 6 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.58</version>
</dependency>

3. 相关链接

v2.0.57: Fastjson 2.0.57版本发布

Compare Source

这又是一个定期维护的功能增强BUG FIX版本,大家按需升级。

Issues

  1. 提升了序列化Double和忽略字段的性能
  2. 修复单引号反序列化时不支持忽略大小写匹配的问题 #​3381
  3. 修复UseBigDecimalForDoubles解析浮点数结果不对的问题 #​3382
  4. JSONArray/JSONObject增加getLocalDate/getLocalDateTime系列方法 #​3337
  5. 修复序列化Kotlin类忽略private field的问题 #​3287
  6. 修复某些场景toJSON/toJavaObject缺失字段的问题 #​2227
  7. 修复反序列化java.util.SubList报错的问题 #​3364
  8. 修复SeeAlso父类是接口反序列化报错的问题 #​3357 #​3440
  9. 修复反序列化record不支持alternateNames的问题 #​3351
  10. 修复2.0.56引入的字段多导致jit报错的问题 #​3367
  11. 修复无上海时区环境报错的问题 #​3450
  12. 修复2.0.56引入的非规范Double.NaN序列化报错的问题 #​3449
  13. 修复某些场景不支持注释的问题 #​3446
  14. 修复多层List字段序列化报错的问题 #​3444 #​3433
  15. 修复2.0.54引入的不匹配类型反序列化String结果不对的问题 #​3438
  16. 兼容fastjson 1.x,序列化忽略ClassLoader类型字段
  17. 修复非当前ClassLoader类型toJavaObject导致ClassNotFound的问题 #​3420
  18. 修复输入类型为Object.class时,reference解析不生效的问题 #​3452

MAVEN依赖配置

<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.57</version>
</dependency>
  • android5针对优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.57.android5</version>
</dependency>
  • android8针对优化版本
    这个版本支持java.time和Optional
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.57.android8</version>
</dependency>
  • 1.x 兼容版本
<dependency>
    <groupId>com.alibaba</groupId>
    <artifactId>fastjson</artifactId>
    <version>2.0.57</version>
</dependency>
  • Spring 5 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring5</artifactId>
    <version>2.0.57</version>
</dependency>
  • Spring 6 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.57</version>
</dependency>

3. 相关链接

v2.0.56: fastjson 2.0.56版本发布,性能进一步提升

Compare Source

这个版本进一步提升了性能,并且修复了2.0.54发布以来用户反馈的BUG。

Issues

  1. 修复JSONReaderJSONB未实现readArray方法的问题 #​3332
  2. 修复字符串中有@type且位置不在json串开始位置时和fastjson 1.x行为不一致的问题 #​3284
  3. 新增加API支持JSON::configEnumAsJavaBean #​3286
  4. 增强对反序列化对单元素数组的支持,和fastjson 1.x行为一致 #​3276
  5. 增强对kotlin的支持 #​3288
  6. 增加对单引号boolean的支持 #​3283
  7. 增加对enum上的Jackson JsonProperty配置的支持 #​2804
  8. 增强对parseLong报错的信息 #​2749
  9. 增加JSONReader.Feature.DisableReferenceDetect,并且自动识别不合法的reference path #​3347
  10. 新增加JSONField.contentAs配置,并且兼容Jackson JsonSerialize.contentAs #​3335

MAVEN依赖配置

<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.56</version>
</dependency>
  • android5针对优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.56.android5</version>
</dependency>
  • android8针对优化版本
    这个版本支持java.time和Optional
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifac

> [!IMPORTANT]
> ✂ PR body was truncated to here.


</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/GGGGGHT/java8).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xNC4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTg0LjEiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIifQ==-->

@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.26 fix(deps): update dependency com.alibaba:fastjson to v2.0.27 Apr 8, 2023
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from f6e5e74 to 016bfde Compare April 8, 2023 03:32
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 016bfde to 1db58e4 Compare April 16, 2023 03:19
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.27 fix(deps): update dependency com.alibaba:fastjson to v2.0.28 Apr 16, 2023
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.28 fix(deps): update dependency com.alibaba:fastjson to v2.0.29 Apr 22, 2023
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 1db58e4 to 495770d Compare April 22, 2023 16:25
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.29 fix(deps): update dependency com.alibaba:fastjson to v2.0.30 May 6, 2023
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch 2 times, most recently from 7a09576 to 03ed548 Compare May 7, 2023 11:45
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.30 fix(deps): update dependency com.alibaba:fastjson to v2.0.31 May 7, 2023
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 03ed548 to 49ad423 Compare May 16, 2023 04:52
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.31 fix(deps): update dependency com.alibaba:fastjson to v2.0.32 May 16, 2023
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.32 fix(deps): update dependency com.alibaba:fastjson to v2.0.33 May 28, 2023
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 49ad423 to 1b62ee8 Compare May 28, 2023 17:19
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 1b62ee8 to 2f0a32b Compare June 18, 2023 09:54
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.33 fix(deps): update dependency com.alibaba:fastjson to v2.0.34 Jun 18, 2023
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.34 fix(deps): update dependency com.alibaba:fastjson to v2.0.35 Jul 9, 2023
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 2f0a32b to b48de37 Compare July 9, 2023 01:43
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.35 fix(deps): update dependency com.alibaba:fastjson to v2.0.36 Jul 18, 2023
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch 2 times, most recently from 2e4d824 to 366ed88 Compare July 22, 2023 12:48
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.36 fix(deps): update dependency com.alibaba:fastjson to v2.0.37 Jul 22, 2023
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 366ed88 to 7d8d493 Compare July 29, 2023 15:08
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.37 fix(deps): update dependency com.alibaba:fastjson to v2.0.38 Jul 29, 2023
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.38 fix(deps): update dependency com.alibaba:fastjson to v2.0.39 Aug 14, 2023
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 7d8d493 to 4cbeebb Compare August 14, 2023 17:32
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.39 fix(deps): update dependency com.alibaba:fastjson to v2.0.40 Sep 3, 2023
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 4cbeebb to bc9ae36 Compare September 3, 2023 14:10
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.40 fix(deps): update dependency com.alibaba:fastjson to v2.0.41 Oct 6, 2023
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from bc9ae36 to 27b3c66 Compare October 6, 2023 03:56
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.46 fix(deps): update dependency com.alibaba:fastjson to v2.0.47 Feb 23, 2024
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from c33a926 to eadb209 Compare March 25, 2024 03:57
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.47 fix(deps): update dependency com.alibaba:fastjson to v2.0.48 Mar 25, 2024
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from eadb209 to a6ea5a9 Compare April 14, 2024 04:26
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.48 fix(deps): update dependency com.alibaba:fastjson to v2.0.49 Apr 14, 2024
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from a6ea5a9 to beea3b7 Compare May 12, 2024 03:27
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.49 fix(deps): update dependency com.alibaba:fastjson to v2.0.50 May 12, 2024
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from beea3b7 to afae83b Compare June 1, 2024 09:38
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.50 fix(deps): update dependency com.alibaba:fastjson to v2.0.51 Jun 1, 2024
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from afae83b to 392924e Compare July 14, 2024 02:13
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.51 fix(deps): update dependency com.alibaba:fastjson to v2.0.52 Jul 14, 2024
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 392924e to 78466e6 Compare September 16, 2024 17:30
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.52 fix(deps): update dependency com.alibaba:fastjson to v2.0.53 Sep 16, 2024
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 78466e6 to 79c5189 Compare January 11, 2025 17:30
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.53 fix(deps): update dependency com.alibaba:fastjson to v2.0.54 Jan 11, 2025
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 79c5189 to 2467ddf Compare February 14, 2025 03:32
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.54 fix(deps): update dependency com.alibaba:fastjson to v2.0.55 Feb 14, 2025
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 2467ddf to 5a7243d Compare February 22, 2025 02:11
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.55 fix(deps): update dependency com.alibaba:fastjson to v2.0.56 Feb 22, 2025
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 5a7243d to be60e5e Compare March 31, 2025 06:14
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.56 fix(deps): update dependency com.alibaba:fastjson to v2.0.57 Mar 31, 2025
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from be60e5e to 3fa22fc Compare July 30, 2025 06:31
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.57 fix(deps): update dependency com.alibaba:fastjson to v2.0.58 Jul 30, 2025
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 3fa22fc to 866ced1 Compare September 22, 2025 01:14
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.58 fix(deps): update dependency com.alibaba:fastjson to v2.0.59 Sep 22, 2025
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 866ced1 to 9fdeac0 Compare October 25, 2025 13:48
@renovate renovate Bot changed the title fix(deps): update dependency com.alibaba:fastjson to v2.0.59 fix(deps): update dependency com.alibaba:fastjson to v2.0.60 Oct 25, 2025
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 9fdeac0 to 31922fe Compare January 10, 2026 14:02
@renovate
renovate Bot force-pushed the renovate/fastjson.version branch from 31922fe to 9575857 Compare February 2, 2026 17:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants