Bump json-smart to 2.4.2 for 8.x

[Vladimir Kryukov]

Hi guys,

Since #233 is probably will be handled only in 10.x & the vulnerability was fixed by json-smart maintainer - I think it’s good idea to backport the bump of the library to 8.x branch as well (because spring-security, for example, uses 8.x branch).

Br.
Vladimir

[Yavor Vasilev]

Backport in version 8.36.2 (2021-04-15)