Skip to content

Bump nlohmann_json from 3.11.3 to 3.12.0.bcr.1#6

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bazel/nlohmann_json-3.12.0.bcr.1
Open

Bump nlohmann_json from 3.11.3 to 3.12.0.bcr.1#6
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bazel/nlohmann_json-3.12.0.bcr.1

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 4, 2026

Bumps nlohmann_json from 3.11.3 to 3.12.0.bcr.1.

Release notes

Sourced from nlohmann_json's releases.

JSON for Modern C++ version 3.12.0

Release date: 2025-04-11 SHA-256: aaf127c04cb31c406e5b04a63f1ae89369fccde6d8fa7cdda1ed4f32dfc5de63 (json.hpp), b8cb0ef2dd7f57f18933997c9934bb1fa962594f701cd5a8d3c2c80541559372 (include.zip), 42f6e95cad6ec532fd372391373363b62a14af6d771056dbfc86160e6dfff7aa (json.tar.xz)

Summary

This release fixes some bugs found in the 3.11.3 release and adds some new features.

All changes are backward-compatible.

💰 Note you can support this project via GitHub sponsors or PayPal.

Key updates and enhancements

  • Diagnostic byte positions: A new macro, JSON_DIAGNOSTIC_POSITIONS, introduces member functions to query the byte positions of values in the input they were parsed from. When enabled, this information is also included in exceptions to help pinpoint errors. #4517 #4455 #4570 #4569 #4572 #4571 #4579 #4585 #4561
  • Enhanced conversion macros: The conversion macros for arbitrary types now include several upgrades:
  • Support for std::optional: The library now supports conversions from/to std::optional types when compiled with C++17. #1749 #4036
  • Flexible string compatibility: Functions patch, diff, and flatten now work with arbitrary string types. #4536 #4134 #4613 #4019
  • Binary format enhancements:
    • The BJData mapping now supports draft 3, including optimized binary array types. #4513 #4588
    • The BSON mapping has added support for unsigned 64-bit integers. #4590 #4535 #3894
    • The get_number function used in the binary format implementations has been optimized to read multiple bytes at once. #4391
  • Multidimensional array conversion: Multidimensional C-style arrays can now be directly converted to JSON. #4262 #4248
  • Filesystem paths in UTF-8: The conversions from/to std::filesystem::path are now encoded to UTF-8 strings by default on all operating systems. #4271 #4631
  • CMake 4.0 support. By adjusting the CMake minimal version to 3.5, CMake 4.0 can be used without warning or error. #4709

Changes and fixes

Warnings

The quality assurance page gives an overview of the warning flags used during the tests.

Compiler warnings

... (truncated)

Changelog

Sourced from nlohmann_json's changelog.

Changelog

All notable changes to this project will be documented in this file. This project adheres to Semantic Versioning.

unreleased (2024-12-22)

Full Changelog

  • Impossible de read json file create with nlohmann::ordered_json::dump #4556
  • Error C2039 : 'json_sax_dom_callback_parser': is not a member of 'nlohmann::json_abi_v3_11_3::detail' #4529
  • json_fwd.hpp don't define default template arguments for ordered_map #4518
  • new repo version seems stop create any the ingress-nginx controller with opentelemetry-cpp.git #4515
  • Error converting to/from scoped enumerations #4499
  • Default initialized iterators are not comparable #4493
  • Bug json.exception.type_error.302 #4492
  • tests fail to build with clang-19 and libc++ due to unsupported std::char_traits #4490
  • Brace-Initialization Fails with json::parse and Key Access on Linux #4488
  • Crash when parsing nullptr #4485
  • Namespace macros are not respected in many instances #4484
  • ohos model to json string garbage characters #4481
  • Missing newlines in deserialized string #4479
  • Latest tag not available on NuGet #4478
  • Invalid union access for get_ref/get_ptr with unsigned integer #4475
  • /accesswallet #4469
  • struct reflect json with error C2440 #4467
  • Compiler error when using macro NLOHMANN_DEFINE_TYPE_NON_INTRUSIVE #4463
  • Issue when dumping a vector of derived classes #4462
  • whit std::wstring compile error #4460
  • Inconsisten operator[] #4458
  • json parse enclosing json object with [] #4457
  • [bug] nlohmann::json constructor behaves improperly #4450
  • parse OOM #4449
  • Library Cannot Parse JSON File It Wrote #4448
  • Unexpected Integer Conversion of JSON Values on ARM64 #4447
  • Structure declared in natvis file template doesn't seem to match current structure of basic_json<> #4438
  • A lot of EOT in json file #4436
  • CVE-2024-34062 #4429
  • CVE-2024-39689 #4428
  • CVE-2024-5569 #4427
  • CVE-2024-37891 #4426
  • Tornado vulnerabilities #4425
  • CVE-2024-35195 #4424
  • CVE-2024-22195, CVE-2024-34064 #4423
  • CVE-2024-3651 #4422
  • CVE-2024-22190 #4421
  • CVE-2024-39705 #4420
  • Failing to read complex Unicode string embedded in JSON #4417
  • Unable to parse JSON string from snake case to camel case #4399
  • Crashes when I try to use ‘json::at()’ on a properly structured, non null, and correctly constructed ‘.json’ file #4387
  • JSON_BuildTests fail when JSON_DisableEnumSerialization is set to ON #4384
  • JSON can't parse a simple data #4383

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [nlohmann_json](https://github.com/nlohmann/json) from 3.11.3 to 3.12.0.bcr.1.
- [Release notes](https://github.com/nlohmann/json/releases)
- [Changelog](https://github.com/nlohmann/json/blob/develop/ChangeLog.md)
- [Commits](https://github.com/nlohmann/json/commits)

---
updated-dependencies:
- dependency-name: nlohmann_json
  dependency-version: 3.12.0.bcr.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file labels Mar 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants