build(deps): bump com.github.wnameless.json:json-flattener from 0.18.3 to 0.18.4

[dependabot]

Bumps com.github.wnameless.json:json-flattener from 0.18.3 to 0.18.4.

Changelog

Sourced from com.github.wnameless.json:json-flattener's changelog.

Version 0.1.0

• First release

Version 0.1.1

• Fix minimal-json parsing double value(ex:6.0) error

Version 0.1.2

• Fix the bug of empty array or empty object disappearing after flattening

Version 0.1.3

• Fix the bug of objects unflattening in reversed indexed array(ex: {"List[1].type":"B","List[0].type":"A"})

Version 0.1.4

• Fix the bug of reversed indexed arrays unflattening(ex: {"[1][1]":"B","[0][0]":"A"})
• Fix the bug of init complex key unflattening(ex: {"["b.b"].aaa":123})

Version 0.1.5

• Escape JSON special characters in flattened JSON keys, values and Java Map keys but not in Java Map values

Version 0.1.6

• For ease of use, Unicode characters aren't escaped anymore

Version 0.2.0

• Add FlattenMode
• Add StringEscapePolicy
• Add separator config
• Add PrintMode

Version 0.2.1

• Remove internal cache

• Add missing hashCode, equals and toString to JsonUnflattener

• Fix the stack overflow bug in KEEP_ARRAYS mode when null value occurs

Version 0.2.2

• Fix the stack overflow bug in KEEP_ARRAYS mode when empty object occurs

Version 0.2.3

• Fix internal JsonFlattener state inheritance bug during instantiation

Version 0.2.4

• Fix the bug of wrong output if ROOT value shows in source object

Version 0.3.0

• Support Reader as inputs
• Add #withLeftAndRightBrackets

Version 0.4.0

• Add FlattenMode.MONGODB
• Add #withKeyTransformer

... (truncated)

Commits

• 233c227 [maven-release-plugin] prepare release json-flattener-0.18.4
• 916bcf7 Add 0.18.4 release notes
• face4db Upgrade dependency and plugin versions in pom.xml
• 4951754 Merge pull request #104 from wnameless/dependabot/maven/tools.jackson.core-ja...
• 8cf6617 [maven-release-plugin] prepare for next development iteration
• 86333bd Bump tools.jackson.core:jackson-databind from 3.2.0 to 3.2.1
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[FrankChen021]

This is an automated review by Codex GPT-5.6 Luna(Max).

Compatibility analysis

SAFE. This PR updates com.github.wnameless.json:json-flattener from 0.18.3 to 0.18.4. Maven Central's complete 0.18.x inventory is 0.18.0, 0.18.1, 0.18.2, 0.18.3, and 0.18.4; there is no published release strictly between source 0.18.3 and target 0.18.4. The upstream published tag comparison json-flattener-0.18.3...json-flattener-0.18.4 contains six commits and changes only pom.xml and release-notes. The target release note is only "Upgrade jackson-databind lib". The target's cumulative effect is runtime tools.jackson.core:jackson-databind 3.2.0 -> 3.2.2, test-only gson 2.13.2 -> 2.14.0, guava 33.6.0-jre -> 33.7.1-jre, junit-jupiter-api 6.1.1 -> 6.1.3, and upstream compiler/surefire/failsafe plugin version updates; no production Java source changed upstream.

API/ABI: both published jars contain the same 21 class entries, and the public javap signature comparison showed no differences; the Druid call JsonFlattener.flatten(String) remains present. Runtime/transitive dependencies: json-base 3.0.0 and commons-text 1.15.0 are unchanged; the only upstream runtime dependency change is Jackson Databind. Druid benchmarks already dependency-manage tools.jackson.core:jackson-databind at 3.2.2, so the effective resolved version is unchanged. Configuration, serialization/wire, persistence, and clients: no Druid configuration, schema, protocol, storage, migration, or client files changed; flattening remains a synthetic benchmark JSON transformation and does not alter Druid wire or persisted formats. Licensing: both published POMs retain The Apache Software License, Version 2.0, with no Druid NOTICE/license change. Extension/plugin SPI: no Druid extension, service-loader, plugin descriptor, or SPI source changed, and the upstream class/module inventory is unchanged.

Druid impact

The PR changes only benchmarks/pom.xml:145. The only tracked Druid consumer is the pre-existing test utility benchmarks/src/test/java/org/apache/druid/benchmark/FlattenJSONBenchmarkUtil.java:28 and :216-220, which imports and calls JsonFlattener.flatten. No tracked Druid source or test code changed in this PR. benchmarks is a root Maven module; its assembly includes the test dependency set and test-classes, so the dependency affects benchmark compilation/test execution and the benchmark fat artifact only, not Druid server runtime or extension production code. No other Druid call sites, configuration, serialization, persistence, client, or extension/plugin SPI consumers were found.

Validation

I inspected the complete PR diff and ran git diff --check against base 9f5363c and head 5da3638. I searched all tracked Druid references, inspected the benchmark POM dependency-management and assembly scope, queried the upstream tag comparison and release notes, enumerated Maven Central metadata, and inspected the published 0.18.3 and 0.18.4 POMs. I downloaded both published jars and compared their class inventories and public javap signatures; no differences were found. No local Maven build/test was run; the complete exact-head CI gate is reported below.

CI gate

The final pre-action refresh confirmed title "build(deps): bump com.github.wnameless.json:json-flattener from 0.18.3 to 0.18.4", author dependabot, base master at 9f5363c, exact current head 5da3638, OPEN, non-draft, MERGEABLE, and CLEAN, with no existing APPROVED review for the exact current head. The complete statusCheckRollup was SUCCESS: 27 CheckRuns were COMPLETED/SUCCESS, 0 StatusContexts were present (0 StatusContext successes), and there were no additional rollup pages. Every reported item succeeded. No CI or mergeability change was observed, so no repair or job rerun was needed.

Automation actions

I persisted this exact intended body in local action notes before the GitHub mutation. The PR changed one tracked file, benchmarks/pom.xml; this review added only local action-note/body files, made no source change, created or pushed no commit, and reran no jobs. I submitted the native GitHub APPROVE review with gh pr review --approve --body-file. No merge was performed.