[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade perl-JSON-XS to 4.04 for CVE-2025-40928 [HIGH] - branch main (#14788)

Author: CBL-Mariner-Bot

SPECS/perl-JSON-XS/perl-JSON-XS.signatures.json

@@ -1,5 +1,5 @@
 {
- "Signatures": {
-  "JSON-XS-4.03.tar.gz": "515536f45f2fa1a7e88c8824533758d0121d267ab9cb453a1b5887c8a56b9068"
- }
+  "Signatures": {
+    "JSON-XS-4.04.tar.gz": "8eff1e9f304c5625b59ab7b42258415f6d3e3681c1ddab6b725518a018a7f5e0"
+  }
 }

SPECS/perl-JSON-XS/perl-JSON-XS.spec

@@ -1,8 +1,8 @@
 # Got the intial spec from Fedora and modified it
 Summary:        JSON serializing/deserializing, done correctly and fast
 Name:           perl-JSON-XS
-Version:        4.03
-Release:        2%{?dist}
+Version:        4.04
+Release:        1%{?dist}
 License:        GPL+ or Artistic
 Group:          Development/Libraries
 URL:            http://search.cpan.org/dist/JSON-XS/
@@ -60,6 +60,9 @@ make test
 %{_mandir}/man[13]/*
 
 %changelog
+* Thu Sep 11 2025 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 4.04-1
+- Auto-upgrade to 4.04 - for CVE-2025-40928
+
 * Fri Jul 29 2022 Muhammad Falak <mwani@microsoft.com> - 4.03-2
 - Add BR on `perl(ExtUtils::MakeMaker)` & `perl(Test::*)` to enable ptest
 

cgmanifest.json

@@ -18234,8 +18234,8 @@
         "type": "other",
         "other": {
           "name": "perl-JSON-XS",
-          "version": "4.03",
-          "downloadUrl": "https://cpan.metacpan.org/authors/id/M/ML/MLEHMANN/JSON-XS-4.03.tar.gz"
+          "version": "4.04",
+          "downloadUrl": "https://cpan.metacpan.org/authors/id/M/ML/MLEHMANN/JSON-XS-4.04.tar.gz"
         }
       }
     },