Bump orjson from 3.11.5 to 3.11.6

[dependabot]

Bumps orjson from 3.11.5 to 3.11.6.

Release notes

Sourced from orjson's releases.

3.11.6

Changed

• orjson now includes code licensed under the Mozilla Public License 2.0 (MPL-2.0).
• Drop support for Python 3.9.
• ABI compatibility with CPython 3.15 alpha 5.
• Build now depends on Rust 1.89 or later instead of 1.85.

Fixed

• Fix sporadic crash serializing deeply nested list of dict.

Changelog

Sourced from orjson's changelog.

3.11.6 - 2026-01-29

Changed

• orjson now includes code licensed under the Mozilla Public License 2.0 (MPL-2.0).
• Drop support for Python 3.9.
• ABI compatibility with CPython 3.15 alpha 5.
• Build now depends on Rust 1.89 or later instead of 1.85.

Fixed

• Fix sporadic crash serializing deeply nested list of dict.

Commits

• ec02024 3.11.6
• d581687 build, clippy misc
• 4105b29 writer::num
• 62bb185 Fix sporadic crash on serializing object close
• d860078 PyRef idiom refactors
• 343ae2f Deserializer, Utf8Buffer
• 7835f58 PyBytesRef and other input refactor
• 71e0516 PyStrRef
• 1096df4 MSRV 1.89
• b718e75 Drop support for python3.9
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

Change: Dependency version bump — orjson 3.11.5 → 3.11.6 in pyproject.toml

---

Code Quality

• ✅ Style guide — Single-line change in a config file; no style concerns.
• ✅ No commented-out code — N/A
• ✅ Meaningful variable names — N/A
• ✅ DRY principle — N/A
• ✅ Defects — No logic, no bugs. Patch-level version bump only.
• ✅ CLAUDE.md — No issues.

Testing

• ✅ Unit/integration tests — No new logic; existing test suite is sufficient to validate the upgraded dependency.
• ✅ Edge cases / coverage — N/A

Documentation

• ✅ README / API docs — No changes required.
• ✅ Inline comments — N/A
• ❌ CHANGELOG.md — No CHANGELOG entry visible in the diff. Dependency updates should be recorded. If this is an automated Dependabot PR, verify whether the project convention requires a CHANGELOG entry for dependency bumps.
• ✅ Markdown formatting — N/A

Security

• ✅ No hardcoded credentials — N/A
• ✅ Input validation / error handling — N/A
• ✅ No sensitive data in logs — N/A
• ✅ No license files (.lic) — N/A

---

Summary

This is a low-risk, routine patch-level dependency bump. The only item to address is whether a CHANGELOG entry is expected per project convention. Everything else is clean.

Recommendation: Approve pending CHANGELOG confirmation.

Automated code review analyzing defects and coding standards

[github-actions]

Coverage report

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
src/senzing_core
_helpers.py
Project Total

This report was generated by python-coverage-comment-action