Bump org.skyscreamer:jsonassert from 1.5.0 to 1.5.3

[dependabot]

Bumps org.skyscreamer:jsonassert from 1.5.0 to 1.5.3.

Release notes

Sourced from org.skyscreamer:jsonassert's releases.

jsonassert-1.5.3

Breaking change since 1.5.1 (Java 6), dropped Java 6 and Java 7 support, oldest supported version is Java 8. For Java 6/7, stick to 1.5.1.

Reverting to compile using Java 8 (1.8) for compatibility with older software.

jsonassert-1.5.2

Breaking change since 1.5.1 (Java 6), accidentally dropped Java <21 support. For a Java 8 compatible version use 1.5.3 for a Java 6/7 compatible version stick to 1.5.1,

• Update to Java 21 -- THIS CAUSES PROBLEMS FOR OLDER COMPILERS. REVERTING TO JAVA 8 in 1.5.3.
• Fix CVE-2020-15250 JUnit vulnerability (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250). Bump dependencies.*
• Add gitIgnore file
• README syntax error fix

New Contributors

• @​imanushin made their first contribution in skyscreamer/JSONassert#159
• @​RushikeshNaiknaware made their first contribution in skyscreamer/JSONassert#147
• @​cpage-pivotal made their first contribution in skyscreamer/JSONassert#188

Full Changelog: skyscreamer/JSONassert@jsonassert-1.5.1...jsonassert-1.5.2

JSONassert 1.5.1

This is the last version compatible with Java 6 and Java 7.

Version 1.5.1 - 7/4/2022

Going to try to catch up on some ancient PRs, mainly around security and cleanup. Starting with accepted PRs that didn't get released yet. To be followed hopefully shortly with another release.

• Added convenience methods for JSONObject comparison using a custom JSONComparator (thanks jakob-o@!)
• Fix issue #105: Issue when comparing JSONArray if any value is null (thanks suraj1291993@!)
• Fixes security vulnerability associated with older version of junit

Changelog

Sourced from org.skyscreamer:jsonassert's changelog.

Version 1.5.3 - 6/28/2024

• Revert Java release version from 21 to 8 due to breaking older compilers.

Version 1.5.2 - 6/14/2024

• Fix CVE-2020-15250 JUnit vulnerability (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250). Bump dependencies.
• Add gitIgnore file
• README syntax error fix
• Accidentally upgraded release to Java version 21

Version 1.5.1 - 7/4/2022

Going to try to catch up on some ancient PRs, mainly around security and cleanup. Starting with accepted PRs that didn't get released yet. To be followed hopefully shortly with another release.

• Added convenience methods for JSONObject comparison using a custom JSONComparator (thanks jakob-o@!)
• Fix issue #105: Issue when comparing JSONArray if any value is null (thanks suraj1291993@!)
• Fixes security vulnerability associated with older version of junit

Commits

• b1750da Removed snapshot for release 1.5.3
• 721abb0 Updated pom.xml file for new release process.
• f7ebd4b Prepare for release of 1.5.3
• 3112d8e Revert from Java 21 to 8 (#192)
• eebcfe8 Update to Java 21 (#188)
• 8e2ba62 Bump pom.xml target/source from 6 to 8. (#187)
• 313c61b Update documentation and CHANGELOG to 1.5.2. (#186)
• 7414e90 Updated ReadMe for syntax errors of strike of code (#147)
• 5e73cb0 Merge pull request #157 from imanushin/addGitIgnore
• f36dc93 Merge pull request #159 from imanushin/BumpDependencyVersions
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.