Bump com.cedarsoftware:json-io from 4.70.0 to 4.89.0

[dependabot]

Bumps com.cedarsoftware:json-io from 4.70.0 to 4.89.0.

Changelog

Sourced from com.cedarsoftware:json-io's changelog.

4.89.0 - 2026-01-31

• RENAMED: showTypeInfoCompact() → showTypeInfoMinimalPlus() for clearer naming
  • WriteOptionsBuilder.showTypeInfoCompact() → WriteOptionsBuilder.showTypeInfoMinimalPlus()
  • WriteOptionsBuilder.addPermanentShowTypeInfoCompact() → WriteOptionsBuilder.addPermanentShowTypeInfoMinimalPlus()
  • WriteOptions.isCompactShowingType() → WriteOptions.isMinimalPlusShowingType()
  • ShowType.COMPACT enum value → ShowType.MINIMAL_PLUS
  • The name "MinimalPlus" better conveys that this mode extends MINIMAL with additional type inference optimizations
• SPRING: Default show-type-info changed from MINIMAL to MINIMAL_PLUS
  • Spring Boot starter now uses MINIMAL_PLUS as the default for optimal JSON size
  • Added MINIMAL_PLUS option to Spring configuration properties
• IMPROVED: Numeric primitive simplification in MINIMAL_PLUS and NEVER type info modes
  • Byte, Short, Integer, and Float values now write as plain JSON numbers when the declared type is Object
  • Applies to fields declared as Object, collection elements in raw collections, and Map<String, Object> values
  • These types round-trip as Long (for integers) or Double (for floats) when read back
  • Reduces JSON size by eliminating {"@type":"Integer","value":42} wrappers in favor of plain 42
  • Does not apply to MINIMAL or ALWAYS modes to maintain backward compatibility

4.88.0 - 2026-01-26

• IMPROVED: MapResolver - Applied consistency improvements from ObjectResolver patterns
  • Added isFinished guard to traverseMap() to prevent reprocessing
  • Updated traverseArray() and traverseCollection() to use markFinishedIfNot() helper
  • Removed redundant setFinished() calls at method ends (now handled by guard pattern)
• BUILD: Fixed json-io-spring-boot-starter Maven Central deployment
  • Added required deployment plugins (maven-source-plugin, maven-javadoc-plugin, central-publishing-maven-plugin)
  • Spring Boot starter now properly publishes to Maven Central alongside json-io core
• BUILD: Updated java-util dependency to 4.89.0

4.87.0 - 2025-01-26

• FEATURE: Spring Boot Starter module (json-io-spring-boot-starter)
  • New Maven artifact for seamless Spring Boot 3.x integration
  • Auto-configuration for Spring MVC with HttpMessageConverter support
  • Spring MVC HttpMessageConverters for content negotiation:
    • JsonIoHttpMessageConverter - application/json
    • Json5HttpMessageConverter - application/vnd.json5
    • ToonHttpMessageConverter - application/vnd.toon
  • WebFlux Encoders/Decoders for reactive applications:
    • JsonIoEncoder / JsonIoDecoder - application/json
    • Json5Encoder / Json5Decoder - application/vnd.json5
    • ToonEncoder / ToonDecoder - application/vnd.toon
  • Configuration properties under spring.json-io.*:
    • Write options: pretty-print, show-type-info, skip-null-fields, short-meta-keys, etc.
    • Read options: max-depth, fail-on-unknown-type, allow-nan-and-infinity
    • Integration: jackson-mode (COEXIST, REPLACE, JSON5_ONLY)
  • Customizer interfaces for programmatic configuration:
    • ReadOptionsCustomizer - Customize read behavior
    • WriteOptionsCustomizer - Customize write behavior
  • Jackson coexistence modes:
    • COEXIST (default) - json-io handles JSON5/TOON, Jackson handles JSON
    • REPLACE - json-io handles all formats
  • See Spring Integration Guide for details

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #532.