build(deps): upgrade fastjson2 from 2.0.62 to 2.0.64

[uuuyuqi]

What is the purpose of the change?

Upgrade com.alibaba.fastjson2:fastjson2 from 2.0.62 to 2.0.64 through the version property in dubbo-dependencies-bom/pom.xml.

This includes the AutoType validation and JSON/JSONB parser hardening published in 2.0.63, followed by the serialization/deserialization fixes in 2.0.64.

No Java code or serialization configuration changes are included. The separate fastjson 1.x dependency remains at 1.2.83_noneautotype.

GitHub_issue

N/A — routine dependency upgrade; no existing Dubbo issue is being closed.

Validation

• JDK 17: FastJson2SerializationTest, TypeMatchTest, FastJsonImplTest, FastJson2ImplTest, and JsonUtilsTest: 813 tests passed, with no failures, errors, or skipped tests.
• JDK 21: BOM Spotless check passed; the BOM and dubbo-all build with dependencies passed across 78 reactor modules (tests skipped for this build).
• Local RPC smoke test on JDK 17: separate provider and consumer JVMs, Nacos service discovery, and fastjson2 serialization. Both JVMs verified fastjson2 2.0.64 at runtime. 341 RPC calls and 425 assertions passed, covering Date, primitive/boxed bytes, byte arrays, nulls, and DTOs containing dates, lists, and maps. The smoke harness is external to this one-line dependency change.

Commands for the repository checks:

mvn -B -ntp -pl dubbo-serialization/dubbo-serialization-fastjson2 -am \
  -Dtest=FastJson2SerializationTest,TypeMatchTest,FastJsonImplTest,FastJson2ImplTest,JsonUtilsTest \
  -Dsurefire.failIfNoSpecifiedTests=false test
mvn -B -ntp -pl dubbo-dependencies-bom spotless:check
mvn -B -ntp -pl dubbo-dependencies-bom,dubbo-distribution/dubbo-all -am \
  -Drevision=3.3.7-fastjson2-2064-pr-SNAPSHOT -Dmaven.test.skip=true install

Checklist

• Include a GitHub_issue field for the change.
• Explain what changes and why.
• Verify the affected behavior with existing tests. No new Java logic or sample is introduced.
• GitHub Actions passed — pending PR creation and CI execution.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 60.88%. Comparing base (dab47b7) to head (e546d61).

Additional details and impacted files

@@             Coverage Diff              @@
##                3.3   #16459      +/-   ##
============================================
- Coverage     60.91%   60.88%   -0.04%     
- Complexity       15    11758   +11743     
============================================
  Files          1953     1953              
  Lines         89271    89271              
  Branches      13473    13473              
============================================
- Hits          54383    54356      -27     
- Misses        29309    29325      +16     
- Partials       5579     5590      +11     

Flag	Coverage Δ
integration-tests-java21	32.08% <ø> (-0.06%)	⬇️
integration-tests-java8	32.21% <ø> (+<0.01%)	⬆️
samples-tests-java21	32.16% <ø> (+<0.01%)	⬆️
samples-tests-java8	29.81% <ø> (-0.03%)	⬇️
unit-tests-java11	59.17% <ø> (+<0.01%)	⬆️
unit-tests-java17	58.64% <ø> (-0.01%)	⬇️
unit-tests-java21	58.65% <ø> (+<0.01%)	⬆️
unit-tests-java25	58.57% <ø> (-0.04%)	⬇️
unit-tests-java8	59.17% <ø> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.