Bump serde_json from 1.0.143 to 1.0.145 (#1232)
What the developer wrote
Authored by dependabot[bot]
Bump serde_json from 1.0.143 to 1.0.145 (#1232)
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.143 to 1.0.145.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.143...v1.0.145)
---
updated-dependencies:
- dependency-name: serde_json
dependency-version: 1.0.145
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
What changed, and why it matters
This is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.143 to 1.0.145, along with related serde crates. The change only modifies the Cargo.lock lockfile. There is no indication in the commit itself that this fixes a security vulnerability, and no security references were provided.
No immediate security action is required based on this commit alone. If the project tracks serde_json security advisories, review the upstream serde_json 1.0.144 and 1.0.145 release notes separately to confirm the patch does not address any relevant issues. Consider routine dependency hygiene.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates Cargo.lock to use serde_json 1.0.145 and serde/serde_derive/serde_core 1.0.223. It is a routine semver-patch dependency bump generated by Dependabot. The diff shows only version and checksum changes in the lockfile; no source code or configuration changes are present. No CVE, advisory, or security-related release notes are referenced in the commit message.
Changed components
Cargo.lockserde_json dependencyserde dependencyserde_derive dependencyserde_core dependencyInspect captured patch +17 / −6
diff --git a/Cargo.lock b/Cargo.lock
index 45fbdbe..bdd5b4a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1030,18 +1030,28 @@ dependencies = [
[[package]]
name = "serde"
-version = "1.0.219"
+version = "1.0.223"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f0e2c6ed6606019b4e29e69dbaba95b11854410e5347d525002456dbbb786b6"
+checksum = "a505d71960adde88e293da5cb5eda57093379f64e61cf77bf0e6a63af07a7bac"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.223"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20f57cbd357666aa7b3ac84a90b4ea328f1d4ddb6772b430caa5d9e1309bb9e9"
dependencies = [
"serde_derive",
]
[[package]]
name = "serde_derive"
-version = "1.0.219"
+version = "1.0.223"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b0276cf7f2c73365f7157c8123c21cd9a50fbbd844757af28ca1f5925fc2a00"
+checksum = "3d428d07faf17e306e699ec1e91996e5a165ba5d6bce5b5155173e91a8a01a56"
dependencies = [
"proc-macro2",
"quote",
@@ -1050,14 +1060,15 @@ dependencies = [
[[package]]
name = "serde_json"
-version = "1.0.143"
+version = "1.0.145"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d401abef1d108fbd9cbaebc3e46611f4b1021f714a0597a71f41ee463f5f4a5a"
+checksum = "402a6f66d8c709116cf22f558eab210f5a50187f702eb4d7e5ef38d9a7f1c79c"
dependencies = [
"itoa",
"memchr",
"ryu",
"serde",
+ "serde_core",
]
[[package]]
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.