[dependabot]

Bumps simplejson from 3.20.1 to 4.2.0.

Release notes

Sourced from simplejson's releases.

v4.2.0

What's Changed

• Start building CPython 3.15 wheels by @​edgarrmondragon in simplejson/simplejson#385
• Use the first-key error message in the C scanner by @​youdie006 in simplejson/simplejson#388
• Support large integer stringification thresholds in both encoders by @​be-student in simplejson/simplejson#387
• Check circular references introduced by custom JSON methods by @​charan-rathore in simplejson/simplejson#390
• ci: build and test riscv64 wheels by @​justeph in simplejson/simplejson#389
• Prep for v4.2.0 - Update CHANGES and build matrix by @​etrepum in simplejson/simplejson#386

New Contributors

• @​youdie006 made their first contribution in simplejson/simplejson#388
• @​be-student made their first contribution in simplejson/simplejson#387
• @​charan-rathore made their first contribution in simplejson/simplejson#390
• @​justeph made their first contribution in simplejson/simplejson#389

Full Changelog: simplejson/simplejson@v4.1.2...v4.2.0

v4.1.2

What's Changed

• Fix control character error position when content precedes the control char by @​gaoflow in simplejson/simplejson#379
• Report the offending char, not the backslash, for invalid \X escapes by @​gaoflow in simplejson/simplejson#380
• Handle non-finite Decimals like floats in the encoder by @​apoorvdarshan in simplejson/simplejson#381
• Report the comma position for illegal trailing comma errors by @​dylanpulver in simplejson/simplejson#382

New Contributors

• @​gaoflow made their first contribution in simplejson/simplejson#379
• @​apoorvdarshan made their first contribution in simplejson/simplejson#381
• @​dylanpulver made their first contribution in simplejson/simplejson#382

Full Changelog: simplejson/simplejson@v4.1.1...v4.1.2

v4.1.1

What's Changed

• Add Python 2.7 wheel builds for Windows platforms by @​etrepum in simplejson/simplejson#378

Full Changelog: simplejson/simplejson@v4.1.0...v4.1.1

v4.1.0

What's Changed

• Accelerate indented encoding in the C extension; release 4.1.0 by @​etrepum in simplejson/simplejson#376

Full Changelog: simplejson/simplejson@v4.0.1...v4.1.0

v4.0.1

What's Changed

• Exclude Pyodide wheels from PyPI uploads by @​etrepum in simplejson/simplejson#375

... (truncated)

Changelog

Sourced from simplejson's changelog.

Version 4.3.0 released 2026-11-10

• The C encoder no longer crashes when default() or for_json() shrinks or grows the list being encoded, and no longer reads a freed key when encoding a dict value removes its entry. Both encoders now raise RuntimeError("dictionary changed size during iteration") when a dict is resized while it is being encoded. make_encoder() raises TypeError for an invalid markers argument instead of crashing, and C and pure Python error messages now match simplejson/simplejson#395
• Circular references are now detected through re-iterable objects encoded with iterable_as_array=True, in both encoders simplejson/simplejson#391
• A failure while adding a PEP 678 context note no longer replaces the original serialization error simplejson/simplejson#392
• Explicitly supplied parse_float, parse_int and parse_constant callbacks are now used even when they are falsy simplejson/simplejson#394
• An explicit item_sort_key is now honored even when it is falsy simplejson/simplejson#396
• python -m simplejson.tool now reads input files as UTF-8 regardless of the locale simplejson/simplejson#397
• With allow_nan=False the C encoder's ValueError now names the out-of-range value, matching the pure Python encoder simplejson/simplejson#399
• Build and test native Windows arm64 wheels simplejson/simplejson#401
• Wheels for CPython 3.15 are now built against the final 3.15 release via cibuildwheel v4.3.5, and CI uses astral-sh/setup-uv v10.3.3 simplejson/simplejson#405

Version 4.2.0 released 2026-10-02

• Start building wheels for Python 3.15 and drop Python 3.8 support via upgrade to cibuildwheel v4.2.0 simplejson/simplejson#385
• Build and test riscv64 Linux wheels on native RISE runners simplejson/simplejson#389
• The C scanner now reports the same error message as the pure Python decoder for an invalid first key in an object simplejson/simplejson#388
• int_as_string_bitcount now supports thresholds of 64 bits and above (including 128-bit integers) in both the C and pure Python encoders; the C encoder previously rejected them simplejson/simplejson#387
• Circular references introduced through for_json() or _asdict() now raise ValueError("Circular reference detected") instead of recursing without bound

... (truncated)

Commits

• 0ace7d1 Prep for v4.2.0 - Update CHANGES and build matrix (#386)
• c3edf28 ci: build and test riscv64 wheels (#389)
• 41f8017 Check circular references introduced by custom JSON methods (#390)
• 48e7c3b Support large integer stringification thresholds in both encoders (#387)
• 50cadb6 Use the first-key error message in the C scanner (#388)
• fbc057f Start building CPython 3.15 wheels (#385)
• d1fe71a Add missing changelog entries (#384)
• aa1f2c4 Update CHANGES for v4.1.2 (#383)
• b84ad54 Report the comma position for illegal trailing comma errors (#382)
• b0fe1ef Handle non-finite Decimals like floats in the encoder (fixes #149) (#381)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)