Bump com.cedarsoftware:json-io from 4.70.0 to 4.88.0

[dependabot]

Bumps com.cedarsoftware:json-io from 4.70.0 to 4.88.0.

Changelog

Sourced from com.cedarsoftware:json-io's changelog.

4.88.0 - 2026-01-26

• IMPROVED: MapResolver - Applied consistency improvements from ObjectResolver patterns
  • Added isFinished guard to traverseMap() to prevent reprocessing
  • Updated traverseArray() and traverseCollection() to use markFinishedIfNot() helper
  • Removed redundant setFinished() calls at method ends (now handled by guard pattern)
• BUILD: Fixed json-io-spring-boot-starter Maven Central deployment
  • Added required deployment plugins (maven-source-plugin, maven-javadoc-plugin, central-publishing-maven-plugin)
  • Spring Boot starter now properly publishes to Maven Central alongside json-io core
• BUILD: Updated java-util dependency to 4.88.0

4.86.0 - 2025-01-26

• FEATURE: Spring Boot Starter module (json-io-spring-boot-starter)
  • New Maven artifact for seamless Spring Boot 3.x integration
  • Auto-configuration for Spring MVC with HttpMessageConverter support
  • Spring MVC HttpMessageConverters for content negotiation:
    • JsonIoHttpMessageConverter - application/json
    • Json5HttpMessageConverter - application/vnd.json5
    • ToonHttpMessageConverter - application/vnd.toon
  • WebFlux Encoders/Decoders for reactive applications:
    • JsonIoEncoder / JsonIoDecoder - application/json
    • Json5Encoder / Json5Decoder - application/vnd.json5
    • ToonEncoder / ToonDecoder - application/vnd.toon
  • Configuration properties under spring.json-io.*:
    • Write options: pretty-print, show-type-info, skip-null-fields, short-meta-keys, etc.
    • Read options: max-depth, fail-on-unknown-type, allow-nan-and-infinity
    • Integration: jackson-mode (COEXIST, REPLACE, JSON5_ONLY)
  • Customizer interfaces for programmatic configuration:
    • ReadOptionsCustomizer - Customize read behavior
    • WriteOptionsCustomizer - Customize write behavior
  • Jackson coexistence modes:
    • COEXIST (default) - json-io handles JSON5/TOON, Jackson handles JSON
    • REPLACE - json-io handles all formats
  • See Spring Integration Guide for details
• BUILD: Converted to multi-module Maven project structure
  • json-io - Core library (unchanged artifact coordinates)
  • json-io-spring-boot-starter - Spring Boot integration module

4.85.0 - 2025-01-24

• FEATURE: TOON (Token-Oriented Object Notation) output support
  • Added JsonIo.toToon(Object, WriteOptions) - Convert Java objects to TOON format string
  • Added JsonIo.toToon(OutputStream, Object, WriteOptions) - Stream TOON output directly
  • TOON is a compact, human-readable format optimized for LLM token efficiency (~40-50% fewer tokens than JSON)
  • Key TOON characteristics:
    • Indentation-based structure (2 spaces, LF line endings) - no braces/brackets
    • Primitive arrays inline: tags[3]: foo,bar,baz
    • Mixed arrays with hyphen list format
    • Key: value object syntax
    • Minimal quoting (only when necessary per TOON spec)
    • Only 5 escape sequences: \\, \", \n, \r, \t
    • NaN/Infinity → null, -0 → 0 normalization per spec

... (truncated)

Commits

• a86927f Improved: MapResolver consistency and version 4.88.0
• 8748e66 Enable 5 previously disabled tests
• 9421a0c Fix: Extend generic type inference for arrays, primitives, and inheritance
• f558152 Fix: Preserve generic type info for nested collections and maps
• 9f339d3 Fix: Enable type inference for nested generic types from plain JSON
• b487794 Build: Update CI to use JDK 17
• bd2d7bf Security: Update Spring dependencies to 6.2.10
• abfeb44 Bump version to 4.87.0
• 0ea2477 Remove json.org mention from README
• b4c6eab Update version to 4.86.0 and remove target from tracking
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)