chore(deps-dev): bump orjson from 3.11.9 to 3.12.0

[dependabot]

Bumps orjson from 3.11.9 to 3.12.0.

Release notes

Sourced from orjson's releases.

3.12.0

Changed

• Serialization implementation substantially rewritten.
• Publish PyPI wheels for Python 3.15. For Python 3.15 and later, manylinux_2_39 (2024) is targeted instead of manylinux_2_17 (2012).
• No longer publish PyPI wheels for ppc64le and s390x.

Changelog

Sourced from orjson's changelog.

3.12.0 - 2026-08-14

Changed

• Serialization implementation substantially rewritten.
• Publish PyPI wheels for Python 3.15. For Python 3.15 and later, manylinux_2_39 (2024) is targeted instead of manylinux_2_17 (2012).
• No longer publish PyPI wheels for ppc64le and s390x.

Commits

• 6737895 3.12.0
• c2a6e8f JsonWriter, iterators
• 6a2d7a7 yyjson 1ea2fb0
• 97bf170 build update
• See full diff in compare view

[github-actions]

🤖 Claude Code Review

PR Code Review

Scope: Single-line dependency bump in pyproject.toml — orjson dev dependency 3.11.9 → 3.12.0. This is a routine Dependabot-style update (consistent with prior merged PRs like the wheel and virtualenv bumps in the recent log).

Code Quality

• ✅ Follows existing style/pinning convention (== exact pin, alphabetically ordered in the development extras list, pyproject.toml:42).
• ✅ No commented-out code.
• N/A Meaningful variable names / DRY — not applicable to a version bump.
• ✅ No defects identified — orjson is listed only under development deps, not runtime deps, so no production behavior is affected.
• ✅ .claude/CLAUDE.md reviewed — general enough for any local dev environment, not tied to this change, no action needed.

Testing

• N/A No new functions/endpoints. Existing CI (make lint, make test) will validate the bump implicitly by running against the new orjson version.

Documentation

• ✅ CHANGELOG.md not updated — consistent with project convention; prior equivalent dependency bumps (wheel 0.47.0→0.48.0, virtualenv bumps) also did not touch CHANGELOG.md, so this is not a deviation.
• N/A README/API docs — no user-facing change.

Security

• ✅ No hardcoded credentials, no input validation concerns, no logging changes.
• ✅ No .lic files or AQAAAD-prefixed license strings present in this diff.
• Note (informational, not blocking): orjson==3.12.0 is a minor version bump; worth confirming it was pulled from PyPI via Dependabot rather than a manual edit, but nothing in the diff suggests otherwise.

Verdict

✅ Approve — trivial, low-risk dependency bump, consistent with established repo conventions for similar Dependabot PRs. No changes requested.

Automated code review analyzing defects and coding standards

[github-actions]

Coverage report

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
src/senzing
szengineflags.py
szerror.py
Project Total

This report was generated by python-coverage-comment-action

[github-actions]

🤖 Claude Code Review

PR Code Review

Summary: This PR bumps orjson from 3.11.9 to 3.12.0 in the development dependency group of pyproject.toml. It's a single-line, automated dependency bump (likely Dependabot), consistent with the recent commit history (b098c420, 0e9fda17, 17132c33 are all similar bumps).

Code Quality

• ✅ Style/formatting — single pinned-version line change, consistent with surrounding entries (pyproject.toml:42).
• ✅ No commented-out code.
• ✅ N/A — no variables/naming involved.
• ✅ N/A — no logic duplicated.
• ✅ No defects — this is a metadata-only change; no code paths are affected. No security or crash risk introduced by the version bump itself.
• ✅ .claude/CLAUDE.md not touched by this PR; existing content is generic development guidance and not local-environment-specific.

Testing

• ⚠️ N/A — no new functions/endpoints introduced. However, worth confirming CI passes with orjson==3.12.0 (dev dependency used by tooling, e.g., schema/JSON test helpers) since a minor version bump could include breaking changes. No test changes are present in this diff, which is expected/acceptable for a dependency-only bump.

Documentation

• ✅ N/A — no README/API/CHANGELOG updates needed for a routine dev-dependency bump (though some repos do log dependency bumps in CHANGELOG.md; check project convention — recent similar bump PRs, e.g. b098c420, 0e9fda17, don't appear to update CHANGELOG.md either, so this is consistent).
• ✅ Markdown formatting — N/A, no .md files changed.

Security

• ✅ No hardcoded credentials.
• ✅ N/A — no input validation logic changed.
• ✅ N/A — no error handling changed.
• ✅ No sensitive data.
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff.

Overall

No issues found. This is a low-risk, routine dependency version bump consistent with prior merged PRs in this repo's history.

Automated code review analyzing defects and coding standards