chore(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2

[dependabot]

Bumps github.com/buger/jsonparser from 1.1.1 to 1.1.2.

Release notes

Sourced from github.com/buger/jsonparser's releases.

v1.1.2

What's Changed

• Updated travis to build for 1.13 to 1.15 by @​janreggie in buger/jsonparser#225
• • eliminate 2 allocations in EachKey() by @​Villenny in buger/jsonparser#223
• fix issue #150 (in deleting case) by @​daria-kay in buger/jsonparser#226
• fixing the oss-fuzz issue by @​daria-kay in buger/jsonparser#227
• Fix parseInt overflow check false negative by @​carsonip in buger/jsonparser#231
• Added bespoke error for null cases by @​jonomacd in buger/jsonparser#228
• Fuzzing: Add CIFuzz by @​AdamKorcz in buger/jsonparser#239
• Added latest versions of go to tests by @​moredure in buger/jsonparser#244
• fix EachKey pIdxFlags allocation by @​unxcepted in buger/jsonparser#241
• fix: prevent panic on negative slice index in Delete with malformed JSON (GO-2026-4514) by @​dbarrosop in buger/jsonparser#276

New Contributors

• @​janreggie made their first contribution in buger/jsonparser#225
• @​Villenny made their first contribution in buger/jsonparser#223
• @​daria-kay made their first contribution in buger/jsonparser#226
• @​carsonip made their first contribution in buger/jsonparser#231
• @​jonomacd made their first contribution in buger/jsonparser#228
• @​moredure made their first contribution in buger/jsonparser#244
• @​unxcepted made their first contribution in buger/jsonparser#241
• @​dbarrosop made their first contribution in buger/jsonparser#276

Full Changelog: buger/jsonparser@v1.1.1...v1.1.2

Commits

• a69e7e0 Merge pull request #276 from dbarrosop/master
• d3eacc0 fix: prevent panic on negative slice index in Delete with malformed JSON (GO-...
• 61b32cf Merge pull request #241 from unxcepted/master
• 2181e83 Merge pull request #244 from ScaleChamp/patch-2
• 1510b51 Added latest versions of go to tests
• 6fc2e48 fix: eachkey allocation
• a6f867e Merge pull request #239 from AdamKorcz/cifuzz1
• cbc01fd Fuzzing: Add CIFuzz
• dc92d69 Merge pull request #228 from jonomacd/null-handling
• 2d9d634 Merge pull request #231 from carsonip/fix-parseint-overflow-check
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[nikpivkin]

@knqyf263 github.com/buger/jsonparser is a transitive dependency of the github.com/invopop/jsonschema package, which is used for programmatically generating JSON schemas and hasn’t been updated in two years. The trivy also uses github.com/xeipuuv/gojsonschema for validating data based on JSON schemas, which hasn’t been updated in six years.
What do you think if we replace these two packages with a single, actively maintained one? A quick search found two packages that meet our requirements:

• https://github.com/santhosh-tekuri/jsonschema - has 2 dependencies and passes a suite of tests - https://github.com/json-schema-org/JSON-Schema-Test-Suite
• https://github.com/google/jsonschema-go - more minimalistic, has 1 test dependency, and also passes the test suite https://github.com/json-schema-org/JSON-Schema-Test-Suite

Both packages have APIs for validation and programmatically building schemas.

[knqyf263]

It sounds reasonable.

[nikpivkin]

I've opened a PR #10528

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.