Update simd-json to remove security vulnerability (#757)

crates/javy/CHANGELOG.md

@@ -8,6 +8,11 @@ Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+### Changed
+
+- Updated `simd-json` to version that removes dependency on `lexical-core` with
+  a security vulnerability.
+
 ### Fixed
 
 - Circular dependency checks for the custom, SIMD-based, `JSON.stringify`

crates/javy/Cargo.toml

@@ -23,7 +23,10 @@ rmp-serde = { version = "^1.3", optional = true }
 quickcheck = "1"
 bitflags = { workspace = true }
 fastrand = "2.1.1"
-simd-json = { version = "0.13.10", optional = true, default-features = false, features = ["big-int-as-float", "serde_impl"] }
+simd-json = { version = "0.14.0-rc.3", optional = true, default-features = false, features = [
+    "big-int-as-float",
+    "serde_impl",
+] }
 
 [dev-dependencies]
 javy-test-macros = { path = "../test-macros/" }

supply-chain/config.toml

@@ -349,30 +349,6 @@ criteria = "safe-to-deploy"
 version = "1.3.0"
 criteria = "safe-to-deploy"
 
-[[exemptions.lexical-core]]
-version = "0.8.5"
-criteria = "safe-to-deploy"
-
-[[exemptions.lexical-parse-float]]
-version = "0.8.5"
-criteria = "safe-to-deploy"
-
-[[exemptions.lexical-parse-integer]]
-version = "0.8.6"
-criteria = "safe-to-deploy"
-
-[[exemptions.lexical-util]]
-version = "0.8.5"
-criteria = "safe-to-deploy"
-
-[[exemptions.lexical-write-float]]
-version = "0.8.5"
-criteria = "safe-to-deploy"
-
-[[exemptions.lexical-write-integer]]
-version = "0.8.5"
-criteria = "safe-to-deploy"
-
 [[exemptions.libc]]
 version = "0.2.155"
 criteria = "safe-to-deploy"
@@ -586,7 +562,7 @@ version = "0.7.1"
 criteria = "safe-to-deploy"
 
 [[exemptions.simd-json]]
-version = "0.13.10"
+version = "0.14.0-rc.3"
 criteria = "safe-to-deploy"
 
 [[exemptions.simdutf8]]
@@ -730,7 +706,7 @@ version = "1.10.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.value-trait]]
-version = "0.8.1"
+version = "0.9.0-rc.2"
 criteria = "safe-to-deploy"
 
 [[exemptions.vergen]]