Bump serde_json from 1.0.109 to 1.0.143 (#1223)
What the developer wrote
Authored by dependabot[bot]
Bump serde_json from 1.0.109 to 1.0.143 (#1223)
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.109 to 1.0.143.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.109...v1.0.143)
---
updated-dependencies:
- dependency-name: serde_json
dependency-version: 1.0.143
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
What changed, and why it matters
This is a routine automated dependency update by Dependabot, bumping the serde_json library from version 1.0.109 to 1.0.143. The change only updates the recorded version and checksum in the project's lock file and adds a new required sub-dependency (memchr). There is no indication in the commit that this fixes a security problem.
No security action required. Treat as normal dependency hygiene; review serde_json release notes if desired, but the commit itself does not address a known vulnerability.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies Cargo.lock only, updating serde_json 1.0.109 -> 1.0.143 and its checksum, and records the new transitive dependency memchr. It is a semver-patch Dependabot update with no code changes, no security advisory references, and no mention of CVEs or vulnerability fixes.
Changed components
Cargo.lockserde_json dependencyInspect captured patch +3 / −2
diff --git a/Cargo.lock b/Cargo.lock
index c7f26ea..eb2400a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1023,11 +1023,12 @@ dependencies = [
[[package]]
name = "serde_json"
-version = "1.0.109"
+version = "1.0.143"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cb0652c533506ad7a2e353cce269330d6afd8bdfb6d75e0ace5b35aacbd7b9e9"
+checksum = "d401abef1d108fbd9cbaebc3e46611f4b1021f714a0597a71f41ee463f5f4a5a"
dependencies = [
"itoa",
+ "memchr",
"ryu",
"serde",
]
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.