Skip to content

Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.65.android8 - #2

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/com.alibaba.fastjson2-fastjson2-2.x
Open

Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.65.android8#2
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/com.alibaba.fastjson2-fastjson2-2.x

Conversation

@renovate

@renovate renovate Bot commented Jul 16, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
com.alibaba.fastjson2:fastjson2 2.0.57 → 2.0.65.android8 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

alibaba/fastjson2 (com.alibaba.fastjson2:fastjson2)

v2.0.65.android8

Compare Source

v2.0.65.android5

Compare Source

v2.0.65: fastjson 2.0.65版本发布

Compare Source

FASTJSON 2.0.65 Release Notes

Release Date: 2 Sep 2026
Tag: 2.0.65 (879183e)

Overview

This is a security fix release. It closes an AutoType authorization bypass reachable when JSONReader.Feature.SupportAutoType is enabled, and includes parser/writer robustness fixes. All users are strongly recommended to upgrade, especially applications that parse untrusted JSON or JSONB with AutoType enabled.

This release also restores fastjson2-extension-spring6 on Maven Central. It was missing for 2.0.62–2.0.64 because those releases were deployed with a JDK that did not activate the enable-for-17+ build profile, so the module never entered the build reactor #​7840.

The Android variants 2.0.65.android5 and 2.0.65.android8 carry the same AutoType security fix #​7843 #​7844.

Security Fixes

  1. Unified AutoType authorization on the real type name: a reader-cache hit on the FNV-1a-64 hash of @type is no longer treated as authorization. All untrusted-input paths (JSON and JSONB readers, and the object readers for beans, interfaces, exceptions, adapters, typed maps, arrays, collections and no-default-constructor types) now resolve @type through the full provider security checks — SafeMode, deny lists, type-name validation, and any user-supplied AutoTypeBeforeHandler. Compatibility is preserved for explicit local mappings declared with @JSONType(seeAlso = ...) and for readers annotated with @JSONType(... SupportAutoType) #​7753

Bug Fixes

  1. Fixed ArrayIndexOutOfBoundsException in JSONReaderASCII field-name decoding, triggered by a field name that combines an escape sequence with latin1 bytes >= 0x80 #​7808 #​7836
  2. Fixed getter methods being silently discarded when serializing char/Character fields, which caused NPEs or lost field values #​7719
  3. (kotlin) Fixed NullPointerException when serializing a Kotlin class without kotlin-reflect on the classpath #​7835

Documentation

  1. Switched the star-history charts to star-history.dera.page #​7780

Maven Dependency Configuration

Standard Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.65</version>
</dependency>
Spring 6 Extension
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.65</version>
</dependency>
Android 5 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.65.android5</version>
</dependency>
Android 8 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.65.android8</version>
</dependency>
中文版本

概述

本版本为安全修复版本，修复了在开启 JSONReader.Feature.SupportAutoType 时可触达的 AutoType 授权绕过问题，并包含解析/序列化的健壮性修复。强烈建议所有用户升级，尤其是解析不可信 JSON / JSONB 且开启了 AutoType 的应用。

本版本同时恢复了 Maven Central 上的 fastjson2-extension-spring6。2.0.62～2.0.64 缺失该模块，原因是这几个版本发布时使用的 JDK 未激活 enable-for-17+ 构建 profile，模块没有进入构建 reactor #​7840。

Android 变体 2.0.65.android5 与 2.0.65.android8 已同步 port 该 AutoType 安全修复 #​7843 #​7844。

安全修复

  1. 将 AutoType 授权统一到真实类型名：@type 的 FNV-1a-64 哈希命中 reader 缓存不再被视为授权。所有不可信输入路径（JSON 与 JSONB reader，以及 bean、接口、异常、adapter、typed map、数组、集合、无默认构造类型的 object reader）现在都会让 @type 经过 provider 的完整安全检查——SafeMode、deny 列表、类型名校验，以及用户提供的 AutoTypeBeforeHandler。同时保留兼容行为：@JSONType(seeAlso = ...) 声明的显式局部映射，以及标注了 @JSONType(... SupportAutoType) 的 reader #​7753

问题修复

  1. 修复 JSONReaderASCII 字段名解码的 ArrayIndexOutOfBoundsException——当字段名同时包含转义序列和 >= 0x80 的 latin1 字节时触发 #​7808 #​7836
  2. 修复序列化 char/Character 字段时 getter 方法被静默丢弃，导致空指针异常或字段值丢失的问题 #​7719
  3. （kotlin）修复 classpath 上没有 kotlin-reflect 时序列化 Kotlin 类抛出 NullPointerException 的问题 #​7835

文档

  1. star-history 图表切换到 star-history.dera.page #​7780

Maven 依赖配置

标准版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.65</version>
</dependency>
Spring 6 扩展
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.65</version>
</dependency>
Android 5 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.65.android5</version>
</dependency>
Android 8 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.65.android8</version>
</dependency>

v2.0.64.android8

Compare Source

v2.0.64.android5

Compare Source

v2.0.64: fastjson 2.0.64版本发布

Compare Source

FASTJSON 2.0.64 Release Notes

Release Date: 2 Aug 2026
Tag: 2.0.64

Overview

This is a bug fix release. It fixes several issues in core serialization/deserialization, Java records support, and the fastjson 1.x compatibility layer. All users are recommended to upgrade.

Bug Fixes

  1. Fixed ClassFormatError when serializing classes with array-typed fields #​4009 #​4014
  2. Fixed strBuf not kept in sync after mid-loop growth, which could produce corrupted output #​7671 #​7676
  3. Fixed generic invalidation in record class #​3156 #​4027
  4. Fixed global naming strategy not applied to Java records #​7656 #​7657
  5. Fixed MethodHandles.Lookup initialization order — initialize before reading IMPL_LOOKUP #​7691 #​7718
  6. Fixed additionalItems schema validation for Java arrays #​7709
  7. (compat) Added serialVersionUID to JSONArray for Java serialization compatibility #​7687 #​7698
  8. (compat) Fixed JSONPath consecutive writes failing in fastjson 1.x compatibility layer #​7697
  9. (compat) Added ParserConfig.propertyNamingStrategy for fastjson 1.x compatibility #​7740

Maven Dependency Configuration

Standard Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64</version>
</dependency>
Android 5 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64.android5</version>
</dependency>
Android 8 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64.android8</version>
</dependency>
中文版本

概述

本版本为问题修复版本，修复了核心序列化/反序列化、Java records 支持以及 fastjson 1.x 兼容层中的多个问题。建议所有用户升级。

问题修复

  1. 修复序列化包含数组类型字段的类时抛出 ClassFormatError 的问题 #​4009 #​4014
  2. 修复循环中途扩容后 strBuf 未同步，可能导致输出损坏的问题 #​7671 #​7676
  3. 修复 record 类中泛型失效的问题 #​3156 #​4027
  4. 修复全局命名策略未应用于 Java records 的问题 #​7656 #​7657
  5. 修复 MethodHandles.Lookup 初始化顺序——在读取 IMPL_LOOKUP 之前完成初始化 #​7691 #​7718
  6. 修复 Java 数组的 additionalItems schema 校验 #​7709
  7. （兼容层）为 JSONArray 添加 serialVersionUID，兼容 Java 序列化 #​7687 #​7698
  8. （兼容层）修复 fastjson 1.x 兼容层 JSONPath 连续写入失效的问题 #​7697
  9. （兼容层）添加 ParserConfig.propertyNamingStrategy，兼容 fastjson 1.x #​7740

Maven 依赖配置

标准版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64</version>
</dependency>
Android 5 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64.android5</version>
</dependency>
Android 8 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.64.android8</version>
</dependency>

v2.0.63.android8

Compare Source

v2.0.63.android5

Compare Source

v2.0.63: fastjson 2.0.63版本发布

Compare Source

FASTJSON 2.0.63 Release Notes

Release Date: 29 Jul 2026
Tag: 2.0.63 (82eda3e)

Overview

This is a security fix release. It hardens AutoType deserialization and fixes several parser robustness issues (OOM / DoS) that can be triggered by crafted input. All users are strongly recommended to upgrade, especially applications parsing untrusted JSON or JSONB data.

Users who cannot upgrade immediately can mitigate the AutoType issue with -Dfastjson2.parser.safeMode=true (applications not using a custom AutoTypeBeforeHandler).

fastjson 1.x users: the same AutoType hardening is available in fastjson 1.2.84.

Security Fixes

  1. Strengthened AutoType type name validation and whitelist verification: type names containing URL-special characters are rejected before reaching the class loader; the accept name text is verified after a whitelist hash match so a hash collision alone cannot whitelist a type; an accept prefix no longer covers ClassLoader/DataSource/RowSet gadget base types — only an accept entry naming the type in full is treated as an explicit opt-in #​7703
  2. Limited number literal digits to prevent BigInteger O(n²) DoS with crafted long number literals #​7668 #​7694
  3. Fixed JSONB BC_BIGINT declared-length OOM from crafted payloads declaring a huge length #​7669 #​7696
  4. Fixed JSONB BC_BINARY declared-length OOM #​7669 #​7705

Changes & Bug Fixes

  1. Fixed missing reference detection for Collection elements (e.g. HashSet), duplicate elements now serialize as $ref when ReferenceDetection is on #​7678 #​7701
  2. Fixed Metaspace leak caused by ObjectWriter created in the switch block of getObjectWriterInternal #​7626 #​7627
  3. Fixed performance: hoisted getInt/setInt out of lambda to avoid per-call spin #​7677 #​7693
  4. Added support for JSONCompiled records #​7665
  5. Added warning when a Kotlin class loses field values due to missing kotlin-reflect #​7675

Maven Dependency Configuration

Standard Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.63</version>
</dependency>
Android 5 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.63.android5</version>
</dependency>
Android 8 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.63.android8</version>
</dependency>
中文版本

概述

本版本为安全修复版本，加固了 AutoType 反序列化校验，并修复了多个可由构造输入触发的解析健壮性问题（OOM / DoS）。强烈建议所有用户升级，尤其是解析不可信 JSON 或 JSONB 数据的应用。

暂时无法升级的用户，可通过 -Dfastjson2.parser.safeMode=true 缓解 AutoType 问题（适用于未使用自定义 AutoTypeBeforeHandler 的应用）。

fastjson 1.x 用户：同款 AutoType 加固已在 fastjson 1.2.84 中提供。

安全修复

  1. 加强 AutoType 类型名校验与白名单验证：包含 URL 特殊字符的类型名在到达类加载器之前即被拒绝；白名单 hash 命中后增加文本回验，仅 hash 碰撞无法再绕过白名单；accept 前缀不再覆盖 ClassLoader/DataSource/RowSet 等危险基类——只有完整类名的 accept 条目才视为显式放行 #​7703
  2. 限制数字字面量位数，防止构造的超长数字触发 BigInteger O(n²) DoS #​7668 #​7694
  3. 修复 JSONB BC_BIGINT 声明长度 OOM（构造超大长度声明的 payload）#​7669 #​7696
  4. 修复 JSONB BC_BINARY 声明长度 OOM #​7669 #​7705

变更与问题修复

  1. 修复 Collection 元素（如 HashSet）缺少引用检测的问题，开启 ReferenceDetection 时重复元素现在正确序列化为 $ref #​7678 #​7701
  2. 修复 getObjectWriterInternal switch 分支中创建的 ObjectWriter 未缓存导致的 Metaspace 泄漏 #​7626 #​7627
  3. 性能修复：将 getInt/setInt 移出 lambda，避免每次调用自旋 #​7677 #​7693
  4. 支持 JSONCompiled records #​7665
  5. 缺少 kotlin-reflect 导致 Kotlin 类字段值丢失时增加警告日志 #​7675

Maven 依赖配置

标准版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.63</version>
</dependency>
Android 5 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.63.android5</version>
</dependency>
Android 8 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.63.android8</version>
</dependency>

v2.0.62

Compare Source

v2.0.61.android8

Compare Source

v2.0.61.android5

Compare Source

v2.0.61: fastjson 2.0.61版本发布

Compare Source

FASTJSON 2.0.61 Release Notes

Release Date: 07 Feb 2026
Tag: 2.0.61 (170f71f)

Overview

This is a regularly scheduled maintenance release with feature enhancements, performance improvements, and bug fixes. Users should upgrade as needed.

Changes & Bug Fixes

  1. Fixed issue where Jackson's @JsonProperty on methods was being ignored in record types #​3893
  2. Fixed multiple ArrayIndexOutOfBoundsException issues in JSONReaderUTF8, JSONReaderASCII, and JSONReader #​3883
  3. Improved performance when parsing JSON with numerous escape characters #​3889
  4. Fixed conflict where global Date writer overrides @JSONField format #​3864
  5. Fixed TypeUtils.castToTimestamp compatibility issues when upgrading from 1.2.83 #​3906 #​3907
  6. Added support for serializing non-finite numbers (NaN, Infinity) as strings #​3911
  7. Added default value support for getString and other getXXX methods #​3880
  8. Fixed double quotes issue in TypeUtils.cast with Long global converter #​3932
  9. Added Java 8 TimeModule support including improved YearMonth support #​3934 #​3935
  10. Fixed scientific notation floating point deserialization errors #​3917 #​3939 #​3955
  11. Added serialization support for org.w3c.dom.Node #​3960
  12. Fixed exception when parsing object keys with emoji and escape characters #​3928
  13. Fixed generic type inference for List subclasses during deserialization #​3926
  14. Added support for custom error messages in JSON Schema validation #​1559
  15. Added parse(InputStream) overload with default context #​3946
  16. Fixed DirectByteBuffer UnsupportedOperationException for java.nio.ByteBuffer#array #​3894
  17. Added support for composing multiple filters (PropertyFilter, PropertyPreFilter, etc.) #​3877
  18. Fixed incorrect overflow check when parsing BigInteger as Double
  19. Enhanced security checks in hex digit processing
  20. Improved readString performance in JSONReaderUTF8/JSONReaderUTF16
  21. Fixed various issues with WriteNulls, ErrorOnNullForPrimitives, NotWriteDefaultValue, and other features
  22. Added ProGuard rules for fields affected by reflection operations
  23. Fixed cast error when using -Dfastjson2.creator=reflect #​1563

Maven Dependency Configuration

Standard Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.61</version>
</dependency>
Android 5 Optimized Version
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.61.android5</version>
</dependency>
Android 8 Optimized Version (supports java.time and Optional)
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.61.android8</version>
</dependency>
1.x Compatible Version
<dependency>
    <groupId>com.alibaba</groupId>
    <artifactId>fastjson</artifactId>
    <version>2.0.61</version>
</dependency>
Spring 5 Extension
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring5</artifactId>
    <version>2.0.61</version>
</dependency>
Spring 6 Extension
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.61</version>
</dependency>
JAX-RS Extension
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-jaxrs</artifactId>
    <version>2.0.61</version>
</dependency>
JAX-RS Jakarta Extension
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-jaxrs-jakarta</artifactId>
    <version>2.0.61</version>
</dependency>

Related Links

FASTJSON 2.0.61 发布说明

发布日期： 2026年2月7日
标签： 2.0.61 (170f71f)

概述

这是定期维护版本，包含功能增强、性能改进和问题修复。建议用户根据需要升级。

变更与问题修复

  1. 修复 Jackson 的 @JsonProperty 注解在 record 类型的方法上被忽略的问题 #​3893
  2. 修复 JSONReaderUTF8、JSONReaderASCII 和 JSONReader 中的多个 ArrayIndexOutOfBoundsException 问题 #​3883
  3. 优化包含大量转义字符的 JSON 解析性能 #​3889
  4. 修复全局 Date writer 覆盖 @JSONField format 格式的冲突问题 #​3864
  5. 修复从 1.2.83 版本升级时 TypeUtils.castToTimestamp 的兼容性问题 #​3906 #​3907
  6. 新增支持将非有限数字（NaN、Infinity）序列化为字符串 #​3911
  7. 为 getString 等 getXXX 方法新增默认值参数支持 #​3880
  8. 修复使用 Long 全局转换器时 TypeUtils.cast 出现双引号的问题 #​3932
  9. 新增 Java 8 TimeModule 支持，包括改进的 YearMonth 支持 #​3934 #​3935
  10. 修复科学计数法浮点数反序列化错误 #​3917 #​3939 #​3955
  11. 新增对 org.w3c.dom.Node 的序列化支持 #​3960
  12. 修复解析包含 emoji 和转义字符的对象键时的异常 #​3928
  13. 修复 List 子类在反序列化时无法自动推断泛型类型的问题 #​3926
  14. 新增 JSON Schema 校验时支持自定义错误消息 #​1559
  15. 新增带默认上下文的 parse(InputStream) 重载方法 #​3946
  16. 修复 DirectByteBuffer 调用 java.nio.ByteBuffer#array 时的 UnsupportedOperationException #​3894
  17. 新增支持组合多个过滤器（PropertyFilter、PropertyPreFilter 等）#​3877
  18. 修复将 BigInteger 解析为 Double 时溢出检查不正确的问题
  19. 增强十六进制数字处理的安全检查
  20. 改进 JSONReaderUTF8/JSONReaderUTF16 的 readString 性能
  21. 修复 WriteNulls、ErrorOnNullForPrimitives、NotWriteDefaultValue 等特性的多个问题
  22. 为受反射操作影响的字段添加 ProGuard 规则
  23. 修复使用 -Dfastjson2.creator=reflect 时的类型转换错误 #​1563

Maven 依赖配置

标准版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.61</version>
</dependency>
Android 5 优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.61.android5</version>
</dependency>
Android 8 优化版本（支持 java.time 和 Optional）
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.61.android8</version>
</dependency>
1.x 兼容版本
<dependency>
    <groupId>com.alibaba</groupId>
    <artifactId>fastjson</artifactId>
    <version>2.0.61</version>
</dependency>
Spring 5 扩展
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring5</artifactId>
    <version>2.0.61</version>
</dependency>
Spring 6 扩展
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.61</version>
</dependency>
JAX-RS 扩展
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-jaxrs</artifactId>
    <version>2.0.61</version>
</dependency>
JAX-RS Jakarta 扩展
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-jaxrs-jakarta</artifactId>
    <version>2.0.61</version>
</dependency>

相关链接

v2.0.60.android8

Compare Source

v2.0.60.android5

Compare Source

v2.0.60: fastjson 2.0.60发布

Compare Source

这又是一个定期维护的功能增强BUG FIX版本，大家按需升级。

Issues

  1. 修复dubbo使用时报错not support none-Serializable的问题 #​3499
  2. 修复dubbo使用时字段带缺省值是序列化丢失字段的问题 #​3765 #​3842
  3. 增加JSONObject.getIntValue方法处理默认值 #​3772
  4. JSONArray.getJSONObject行为保持和JSONObject一样 #​2989
  5. 修复JSONField(deserialize = false)在public字段不生效的问题
  6. 增强日期格式反序列化支持 #​3102
  7. 补充fastjson2-extension-jaxrs-jakarta的发版 #​3767
  8. 修复枚举使用@ JsonProperties之后结果错误的问题 #​3799
  9. 修复某些场景反序列化java.util.Collections#EMPTY_LIST报错的问题 #​3828
  10. 修复JSONPath.eval(jsonString, path)和fastjson 1.x某些场景不兼容的问题 #​3825
  11. 反序列化时增加Feature.DisableStringArrayUnwrapping #​3757
  12. 修复codegen的问题 #​3836 #​3833

MAVEN依赖配置

<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.60</version>
</dependency>
  • android5针对优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.60.android5</version>
</dependency>
  • android8针对优化版本
    这个版本支持java.time和Optional
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.60.android8</version>
</dependency>
  • 1.x 兼容版本
<dependency>
    <groupId>com.alibaba</groupId>
    <artifactId>fastjson</artifactId>
    <version>2.0.60</version>
</dependency>
  • Spring 5 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring5</artifactId>
    <version>2.0.60</version>
</dependency>
  • Spring 6 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.60</version>
</dependency>

3. 相关链接

v2.0.59.android8

Compare Source

v2.0.59.android5

Compare Source

v2.0.59: fastjson 2.0.59发布

Compare Source

这又是一个定期维护的功能增强BUG FIX版本，大家按需升级。

Issues

  1. 修复在部分Android机型上崩溃的问题 #​3769
  2. 修复Android分支processObjectInputSingleItemArray()函数内部产生空指针的问题 #​3770
  3. JSONArray/JSONObject增加getLocalDate/getLocalDateTime方法
  4. 修复某些场景解析非法JSON数据导致JVM Crash的问题 #​3761
  5. 修复JSONB谢衣反序列化AtomicLong报错的问题 #​3771
  6. 修复序列化Spring RefreshScope Bean导致内存不停上涨的问题
  7. 修复Android分支和master部分BUG fix不同步的问题 #​3710
  8. 支持Long类型序列化日期格式 #​3407
  9. 修复WriteNullNumberAsZero行为和fastjson 1行为不一致的问题 #​3702
  10. 修复解析Set[...]某些场景报错的问题 #​3692
  11. 增加对webflux的支持 #​1501 #​3691
  12. 修复JSONWriter.Feature.FieldBased 和 LocalDate冲突的问题 #​3602
  13. 增强对base64格式解析的问题 #​3681

MAVEN依赖配置

<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.59</version>
</dependency>
  • android5针对优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.59.android5</version>
</dependency>
  • android8针对优化版本
    这个版本支持java.time和Optional
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.59.android8</version>
</dependency>
  • 1.x 兼容版本
<dependency>
    <groupId>com.alibaba</groupId>
    <artifactId>fastjson</artifactId>
    <version>2.0.59</version>
</dependency>
  • Spring 5 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring5</artifactId>
    <version>2.0.59</version>
</dependency>
  • Spring 6 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.59</version>
</dependency>

3. 相关链接

v2.0.58.android8

Compare Source

v2.0.58.android5

Compare Source

v2.0.58: Fastjson 2.0.58版本发布

Compare Source

这又是一个定期维护的功能增强BUG FIX版本，大家按需升级。

  1. 修复序列化Enum子类结果不对的问题 #​3464
  2. 修复cglib代理对象序列化结果不对的问题 #​3445
  3. 修复graalvm native-image运行报错的问题 #​3274 #​3108 #​3587
  4. 支持LabelFilter，兼容fastjson 1.x #​2974
  5. 增强fastjson 1.x的兼容 #​2850
  6. 支持jax-rs #​2490
  7. 修复android在 Unsafe报错的问题 #​2263 #​3576 #​3636
  8. 支持SkipTransientField，兼容fastjson 1.x #​3368 #​3659
  9. 修复无法反序列化包含$ref的数组字符串的问题 #​3436
  10. 支持更多场景base64字符串反序列化 #​3497
  11. 修复Dubbo 使用 Fastjson2.0.57 版本时提示 not support none-Serializable #​3499
  12. 修复基本类型在Feature.NotWriteDefaultValue下表现不一致 #​3183 #​3518
  13. 修复JSONObject.toJavaObject在final List字段时会导致重复元素的问题 #​2944
  14. 修复JSONPath.set在某些数组场景无法替换的问题 #​3375
  15. 修复JSONPath有些场景无法解析数组数据的问题 #​3331
  16. 修复某些场景空字符串无法被当成空值处理的问题 #​3537
  17. 修复某些场景Boolean类型反序列化结果不对的问题 #​3539
  18. 修复某些场景JSONObject::from结果丢失泛型信息的问题 #​3569
  19. 修复JSON解析数值时未区分0.0和-0.0的问题 #​3613
  20. 修复某些场景不抛出JSONException的问题 #​3610
  21. 新增加JSONWriter.Feature.WriterUtilDateAsMillis 方便fastjson 1.x用户迁移
  22. 修复某些场景子类反序列化字段丢失的问题 #​3621
  23. 修复自定义List类型不支持自定义序列化的问题 #​3601
  24. 修复BigDecimal scale为负时序列化长度计算不对报越界的问题 #​3595
  25. 修复数组元素后面带有注释时反序列化失败 #​3547
  26. 修复@JSONField(defaultValue="") 和fastjson 1.x不兼容的问题
  27. 修复BigDecimal在前字段带多余空格时某些场景报错的问题 #​3665

MAVEN依赖配置

<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.58</version>
</dependency>
  • android5针对优化版本
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.58.android5</version>
</dependency>
  • android8针对优化版本
    这个版本支持java.time和Optional
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2</artifactId>
    <version>2.0.58.android8</version>
</dependency>
  • 1.x 兼容版本
<dependency>
    <groupId>com.alibaba</groupId>
    <artifactId>fastjson</artifactId>
    <version>2.0.58</version>
</dependency>
  • Spring 5 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring5</artifactId>
    <version>2.0.58</version>
</dependency>
  • Spring 6 extension配置
<dependency>
    <groupId>com.alibaba.fastjson2</groupId>
    <artifactId>fastjson2-extension-spring6</artifactId>
    <version>2.0.58</version>
</dependency>

3. 相关链接

v2.0.57.android8

Compare Source

v2.0.57.android5

Compare Source

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/com.alibaba.fastjson2-fastjson2-2.x branch from 5879847 to 780a102 Compare August 3, 2025 23:29
@renovate renovate Bot changed the title Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.57.android8 Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.58.android8 Aug 3, 2025
@renovate
renovate Bot force-pushed the renovate/com.alibaba.fastjson2-fastjson2-2.x branch from 780a102 to 4a6014f Compare September 22, 2025 02:00
@renovate renovate Bot changed the title Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.58.android8 Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.59.android8 Sep 22, 2025
@renovate
renovate Bot force-pushed the renovate/com.alibaba.fastjson2-fastjson2-2.x branch 2 times, most recently from ab37dce to 8becea2 Compare October 25, 2025 13:55
@renovate renovate Bot changed the title Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.59.android8 Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.60.android8 Oct 25, 2025
@renovate
renovate Bot force-pushed the renovate/com.alibaba.fastjson2-fastjson2-2.x branch from 8becea2 to 139ab05 Compare November 10, 2025 20:06
@renovate
renovate Bot force-pushed the renovate/com.alibaba.fastjson2-fastjson2-2.x branch 2 times, most recently from 4214ca4 to c97b71e Compare February 7, 2026 12:31
@renovate renovate Bot changed the title Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.60.android8 Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.61.android8 Feb 7, 2026
@renovate
renovate Bot force-pushed the renovate/com.alibaba.fastjson2-fastjson2-2.x branch from c97b71e to 68222ca Compare May 5, 2026 15:45
@renovate renovate Bot changed the title Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.61.android8 Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.62 May 5, 2026
@renovate
renovate Bot force-pushed the renovate/com.alibaba.fastjson2-fastjson2-2.x branch from 68222ca to 5d801e6 Compare August 1, 2026 05:25
@renovate renovate Bot changed the title Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.62 Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.63.android8 Aug 1, 2026
@renovate
renovate Bot force-pushed the renovate/com.alibaba.fastjson2-fastjson2-2.x branch from 5d801e6 to 3d7a7d2 Compare August 2, 2026 23:51
@renovate renovate Bot changed the title Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.63.android8 Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.64.android8 Aug 2, 2026
@renovate
renovate Bot force-pushed the renovate/com.alibaba.fastjson2-fastjson2-2.x branch from 3d7a7d2 to cf1a6bc Compare September 5, 2026 23:34
@renovate renovate Bot changed the title Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.64.android8 Update dependency com.alibaba.fastjson2:fastjson2 to v2.0.65.android8 Sep 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants