fix(deps): Update module github.com/buger/jsonparser to v1.2.0 (main)

[renovate-sh-app]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/buger/jsonparser	v1.1.2 → v1.2.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

buger/jsonparser (github.com/buger/jsonparser)

v1.2.0

Compare Source

What's Changed

• Fix 2 bugs, remove 7 dead code blocks, add formal verification using ReqProof by @​buger in #​281
• Add support for tinygo by @​buger in #​269

Full Changelog: buger/jsonparser@v1.1.2...v1.2.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

---

Note

Medium Risk
Updates a low-level JSON parsing/mutation dependency and its vendored code, including behavior changes in Delete and ArrayEach; regressions could affect any callers relying on edge-case parsing or error handling.

Overview
Updates github.com/buger/jsonparser from v1.1.2 to v1.2.0 (including go.sum and vendor/modules.txt) and refreshes the vendored library.

The vendored update includes bug fixes and behavioral adjustments: Delete now guards against truncated input to avoid out-of-bounds access, and ArrayEach now reliably forwards parse errors to the callback/return path instead of silently continuing.

Also adds TinyGo build-tag support, removes/avoids previously dead/tautological branches in parsing/unescaping code paths, and introduces ReqProof formal verification metadata/docs (e.g., proof.yaml plus requirement annotations in source/comments).

^{Reviewed by Cursor Bugbot for commit b1440c7. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Build tag space creates incorrect constraint logic
  • Removed the stray space in the unsafe build tag so appengine, appenginevm, and tinygo exclusions remain in the same AND group.

Or push these changes by commenting:

@cursor push 97c93e4599

Preview (97c93e4599)

diff --git a/vendor/github.com/buger/jsonparser/bytes_unsafe.go b/vendor/github.com/buger/jsonparser/bytes_unsafe.go
--- a/vendor/github.com/buger/jsonparser/bytes_unsafe.go
+++ b/vendor/github.com/buger/jsonparser/bytes_unsafe.go
@@ -1,4 +1,4 @@
-// +build !appengine,!appenginevm, !tinygo
+// +build !appengine,!appenginevm,!tinygo
 
 // SYS-REQ-001, SYS-REQ-013, SYS-REQ-014: unsafe build-tag byte utilities
 package jsonparser

_{You can send follow-ups to the cloud agent here.}

^{Reviewed by Cursor Bugbot for commit da649e9. Configure here.}