Auto merge of #362 - rust-lang:dependabot/cargo/serde_json-1.0.89, r=JohnTitor

Bump serde_json from 1.0.87 to 1.0.89

Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.87 to 1.0.89.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/serde-rs/json/releases">serde_json's releases</a>.</em></p>
<blockquote>
<h2>v1.0.89</h2>
<ul>
<li>Fix invalid JSON incorrectly accepted when a large number has no digits after decimal point (<a href="https://github-redirect.dependabot.com/serde-rs/json/issues/953">#953</a>)</li>
</ul>
<h2>v1.0.88</h2>
<ul>
<li>Optimize serde_json::Map's implementation of <code>append</code> and <code>clone_from</code> (<a href="https://github-redirect.dependabot.com/serde-rs/json/issues/952">#952</a>, thanks <a href="https://github.com/Lucretiel"><code>`@​Lucretiel</code></a>)</li>`
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/serde-rs/json/commit/d2f936855d4c5f402ab516ce1598e2c79b1c65fe"><code>d2f9368</code></a> Release 1.0.89</li>
<li><a href="https://github.com/serde-rs/json/commit/0b898369f9c543a82e49d49a3daf936015d057a1"><code>0b89836</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/serde-rs/json/issues/956">#956</a> from dtolnay/decimal</li>
<li><a href="https://github.com/serde-rs/json/commit/9d94e920ef735a84d02df1852f48b06140037146"><code>9d94e92</code></a> Require at least one digit after decimal point</li>
<li><a href="https://github.com/serde-rs/json/commit/c27b02334b57a96b479b74156b9a149274d677be"><code>c27b023</code></a> Add regression test for issue 953</li>
<li><a href="https://github.com/serde-rs/json/commit/586fefb5a1e619b0f1a82d94b52ce25754b73ea0"><code>586fefb</code></a> Resolve semicolon_if_nothing_returned pedantic clippy lint</li>
<li><a href="https://github.com/serde-rs/json/commit/9eb66da7e0a63ebe0d1bba9d6eab92869cf89fb7"><code>9eb66da</code></a> Release 1.0.88</li>
<li><a href="https://github.com/serde-rs/json/commit/057957ccf4397c89f338d90d553acbe94e45545e"><code>057957c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/serde-rs/json/issues/952">#952</a> from Lucretiel/map-traits</li>
<li><a href="https://github.com/serde-rs/json/commit/3347248d82007c9f6b9f21e6eb657a37b5dea488"><code>3347248</code></a> Add <code>clone_from</code> to <code>Map</code>; <code>Map::append</code> now uses <code>IndexMap::extend</code></li>
<li><a href="https://github.com/serde-rs/json/commit/ca41bdd563689da29c58ac53a952628476bec59e"><code>ca41bdd</code></a> Update ui test suite to nightly-2022-11-16</li>
<li><a href="https://github.com/serde-rs/json/commit/4f194c91416e522a0d14fe208ae5e3e6b88090c2"><code>4f194c9</code></a> Resolve needless_borrow pedantic clippy lint in test</li>
<li>See full diff in <a href="https://github.com/serde-rs/json/compare/v1.0.87...v1.0.89">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=serde_json&package-manager=cargo&previous-version=1.0.87&new-version=1.0.89)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>

Author: bors

Cargo.lock

@@ -20,7 +20,7 @@ anyhow = "1.0.66"
 log = "0.4"
 semver = "1.0" # Keep in sync with version pulled by Cargo
 serde = { version = "1.0.148", features = ["derive"] }
-serde_json = "1.0.87"
+serde_json = "1.0.89"
 quote = "1.0.10"
 proc-macro2 = "1.0.32"