diff options
Diffstat (limited to 'src/changes')
| -rw-r--r-- | src/changes/changes.xml | 380 |
1 files changed, 378 insertions, 2 deletions
diff --git a/src/changes/changes.xml b/src/changes/changes.xml index a9274306..00cb523e 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -3,10 +3,386 @@ xsi:schemaLocation="http://maven.apache.org/changes/1.0.0 http://maven.apache.org/plugins/maven-changes-plugin/xsd/changes-1.0.0.xsd"> <properties> <title>YAML 1.1 parser and emitter</title> - <author email="public.somov@gmail.com">Andrey Somov</author> </properties> <body> - <release version="1.18-SNAPSHOT" date="in Mercurial" description="Maintenance"> + <release version="1.32" date="2022-09-12" description="Maintenance"> + <action dev="asomov" type="fix" issue="543"> + Add a test for issue 543 (thanks to Henry Lin) + </action> + <action dev="asomov" type="fix" issue="547"> + Set the limit for incoming data to prevent a CVE report in NIST + By default it is 3 MB + </action> + <action dev="asomov" type="update"> + Format the source with Google style. + Info: https://stackoverflow.com/questions/49712148/maven-plugin-for-auto-formatting-code-to-match-google-checkstyle + Format: https://raw.githubusercontent.com/google/styleguide/gh-pages/eclipse-java-google-style.xml + Activation: ./mvnw clean install site -Preformat + </action> + <action dev="maslovalex" type="fix" issue="544"> + Support unescaped unicode characters for double-quoted scalars (thanks to Florian Waltenberger) + </action> + </release> + <release version="1.31" date="2022-08-27" description="Maintenance"> + <action dev="maslovalex" type="update"> + JDK 8 is required for tests + </action> + <action dev="asomov" type="update" issue="539"> + Fix false positive CVE-2020-13936 (thanks to Gaétan Collaud) + </action> + <action dev="asomov" type="fix" issue="537"> + Improved RE for integers (thanks to Petr Pucil) + </action> + <action dev="asomov" type="fix" issue="530"> + Add an opportunity to restrict data matched with Regular Expressions + to avoid possible attack when RE takes too many resources (detected by OSS-Fuzz) + </action> + <action dev="asomov" type="fix" issue="529"> + Show proper error message for invalid !!float and !!int scalar (detected by OSS-Fuzz) + </action> + <action dev="asomov" type="fix" issue="525"> + Restrict nested depth for collections to avoid DoS attacks (detected by OSS-Fuzz) + </action> + <action dev="asomov" type="add" issue="525"> + Add test for stackoverflow + </action> + <action dev="maslovalex" type="fix" issue="522"> + Deserializing key "on" fails with Exception + </action> + <action dev="asomov" type="update"> + Merged PR #7: https://bitbucket.org/snakeyaml/snakeyaml/pull-requests/7 (2022-04-04) + </action> + <action dev="asomov" type="update"> + Do not emit global TAGs by not keeping them in Parser + (breaks https://code.google.com/archive/p/snakeyaml/issues/149) + </action> + <action dev="asomov" type="add"> + Add an example with Lombok and ENV variable substitution (2021-12-29) + </action> + <action dev="asomov" type="update"> + Fix issues with comments + </action> + <action dev="asomov" type="update" issue="517"> + Recognise issue with trailing TAB + </action> + </release> + <release version="1.30" date="2021-12-14" description="Maintenance"> + <action dev="asomov" type="fix" issue="516"> + Remove snakeyaml.org + </action> + <action dev="asomov" type="update"> + Migrate to https://bitbucket.org/snakeyaml/snakeyaml (2021-10-23) + </action> + <action dev="asomov" type="update"> + Fix issues with comments + </action> + <action dev="asomov" type="fix" issue="506"> + Improve parsing a number starting with 0x (2021-06-28) + Take the Float pattern from ruamel: https://pypi.org/project/ruamel.yaml + </action> + </release> + <release version="1.29" date="2021-06-08" description="Maintenance"> + <action dev="Wolf2323" type="fix"> + Fix Events ordering and improve Node-Comment association (2021-05-13) + </action> + <action dev="asomov" type="fix"> + Fix corner case for comments where blank lines after plain token (2021-03-02) + </action> + <action dev="asomov" type="add"> + Add a test for issue 500 (2021-03-14) + </action> + <action dev="asomov" type="remove"> + Remove unused variable (2021-02-28) + </action> + </release> + <release version="1.28" date="2021-02-22" description="Maintenance"> + <action dev="maslovalex" type="fix"> + Fix tests to work on Windows (2021-02-19) + </action> + <action dev="asomov" type="add"> + Add enumCaseSensitive property to LoaderOptions to control constructing enum with case sensitivity (2021-01-05) + </action> + <action dev="asomov" type="fix" issue="493"> + ENV substitution default can contain special characters (2021-01-03) + </action> + <action dev="asomov" type="add"> + Allow for read and write YAML with Comments (2020-11-01) + </action> + <action dev="asomov" type="fix" issue="485"> + Alias names are too permissive compared to libyaml and future spec. + Follow https://github.com/yaml/yaml-spec/blob/master/rfc/RFC-0003.md (2020-10-06) + </action> + </release> + <release version="1.27" date="2020-08-31" description="Maintenance"> + <action dev="asomov" type="fix" issue="481"> + Serialize anchors that are not used by any alias (2020-08-14) + </action> + <action dev="asomov" type="fix" issue="416"> + Add indentWithIndicator option to improve dumping sequences (2020-07-14) + </action> + <action dev="asomov" type="fix" issue="480"> + Anchor should allow non ascii characters while dumping (2020-06-29) + </action> + <action dev="asomov" type="update" issue="remove"> + Remove Spring related tests because they are outdated and upgrading to Spring 5 + makes the tests fail under JDK 7 (2020-05-02) + </action> + <action dev="asomov" type="update" issue="476"> + Make constructor of EnvScalarConstructor public (2020-04-24) + </action> + <action dev="asomov" type="fix" issue="474"> + Parse the value of byte and short after a narrowing primitive conversion (2020-04-16) + </action> + <action dev="asomov" type="add"> + Add test for different Line Break Characters in the error message (2020-03-09) + </action> + <action dev="asomov" type="update"> + Fix yet another OWASP false positive. It complains that the Spring controller makes SnakeYAML insecure + even though SnakeYAML does not use Spring controller and does not depend on Spring (but the tests do). + Bump spring.version from 3.2.17.RELEASE to 5.2.4.RELEASE (2020-03-08) + </action> + <action dev="asomov" type="update"> + Migrated to GIT (2020-02-29) + </action> + </release> + <release version="1.26" date="2020-02-28" description="Maintenance"> + <action dev="asomov" type="fix" issue="377"> + Allow configuration for preventing billion laughs attack (2020-02-24) + </action> + <action dev="asomov" type="update"> + Update Maven wrapper (2020-01-18) + </action> + <action dev="asomov" type="fix" issue="468"> + Parse ENV variables similar to how it works in docker-compose (2019-12-25) + </action> + <action dev="asomov" type="fix" issue="468"> + Allow non ASCII characters in the anchor names (2019-12-23) + </action> + <action dev="asomov" type="update" issue="462"> + Clean up composer internal maps after construction. Should not have any impact but + it does not harm (2019-10-25) + </action> + <action dev="asomov" type="update" issue="459"> + The '!' tag now works the same way as for PyYAML. (12 is parsed as int instead of string) + The spec files are modified (spec-08-07.canonical spec-08-07.data) + </action> + <action dev="asomov" type="add"> + Add test for not implemented "!" tag (2019-10-11) + </action> + <action dev="asomov" type="update"> + Refactor Events: expose Event.ID via a getter (2019-10-05) + </action> + <action dev="asomov" type="update"> + Refactor ScalarAnalysis: make it immutable (2019-09-28) + </action> + <action dev="asomov" type="add" issue="454"> + Add example for integer without time pattern (2019-08-22) + </action> + </release> + <release version="1.25" date="2019-08-13" description="Maintenance"> + <action dev="asomov" type="update"> + Deprecate setting tags in TypeDescription (2019-06-23) + </action> + <action dev="asomov" type="fix" issue="449"> + Add test for issue 449 (2019-06-19) + </action> + <action dev="asomov" type="add" issue="441"> + Restore the way to get anchor for a Node (2019-04-13) + </action> + <action dev="asomov" type="fix" issue="437"> + Introduce setting to keep !!str tag for String even when it contains non-printable chars (2019-03-24) + </action> + <action dev="asomov" type="update"> + Update plugin versions (2019-03-04) + </action> + </release> + <release version="1.24" date="2019-02-28" description="Maintenance"> + <action dev="asomov" type="update"> + Refactor BaseConstructor: Factored out postponed mapping logic so subclasses can effectively + override constructMapping2ndStep() and delegate to the postponed mapping logic. + This is backported from SnakeYAML engine (2019-01-26) + </action> + <action dev="asomov" type="fix" issue="431"> + Customize simple key length when dumping (2019-01-17) + </action> + <action dev="asomov" type="fix" issue="430"> + Wrap runtime exceptions into YAMLException (2019-01-14) + </action> + <action dev="asomov" type="fix"> + Fix: Null tag constructor not called when parsing top-level null value (2019-01-13) + (issue reported for snakeyaml-engine) + </action> + <action dev="asomov" type="fix" issue="429"> + Provide "Automatic-Module-Name" entry in MANIFEST (2018-12-16) + </action> + <action dev="asomov" type="fix" issue="426"> + Fix NPE when duplicate keys are not allowed and the key is null (2018-12-02) + </action> + <action dev="asomov" type="update"> + Support java.sql classes without the need to depend on java.sql module in java9+ (2018-11-06) + </action> + <action dev="asomov" type="update"> + Require Java 7 (2018-11-06) + </action> + <action dev="asomov" type="fix" issue="423"> + Date Serialization Fails for TimeZones on Daylight Savings Time (2018-11-06) + </action> + </release> + <release version="1.23" date="2018-08-27" description="Maintenance"> + <action dev="asomov" type="fix" issue="412"> + Add another getter for ScalarStyle to support backwards compatibility (2018-08-27) + </action> + </release> + <release version="1.22" date="2018-08-25" description="Maintenance"> + <action dev="asomov" type="update"> + Run tests under Java 11 (2018-08-19) + </action> + <action dev="asomov" type="update"> + Use Maven 3.5.4 (2018-08-19) + </action> + <action dev="asomov" type="fix" issue="412"> + Restore the Boolean constructors for Events and Nodes for binary compatibility + of dependent projects (2018-08-17) + </action> + <action dev="asomov" type="fix" issue="411"> + System Property "java.runtime.name" is not required to be defined (2018-08-12) + Ensure Compatibility with Graal + </action> + <action dev="asomov" type="fix" issue="409"> + Dumping Enum breaks when Enum value is Anonymous inner class (2018-08-07) + Solution: refactor the way to detect if the full tag can be omitted (and !!str is used instead). + Instead of checking whether the class for property and the class for the actual value is the same + we can just check that the property class is not java.lang.Enum + </action> + </release> + <release version="1.21" date="2018-04-13" description="Maintenance"> + <action dev="asomov" type="update"> + Scanner throws IndexOutOfBoundsException if no more token left but getToken() + or peekToken() called (2018-04-10) + </action> + <action dev="asomov" type="update"> + Enhance output of token IDs (2018-04-06) + </action> + <action dev="asomov" type="add"> + Mark: expose buffer and pointer (2018-04-06) + </action> + <action dev="asomov" type="fix" issue="401"> + Restore index in Mark - it is used in JRuby (2018-03-26) + </action> + <action dev="asomov" type="fix" issue="397"> + Plain scalars with colons in flow sequences/mappings are valid YAML (2018-03-03) + </action> + </release> + <release version="1.20" date="2018-02-28" description="Maintenance"> + <action dev="maslovalex" type="fix" issue="393"> + Improve reflective access operation to avoid warning under Java 9 (2018-02-24) + </action> + <action dev="asomov" type="update"> + Refactor collection node - flow style must not be null (2018-02-16) + </action> + <action dev="asomov" type="remove"> + Refactor: remove unused method isResolved in Node (2018-02-15) + </action> + <action dev="asomov" type="remove"> + Refactor: remove unused code in Tag (2018-02-15) + </action> + <action dev="asomov" type="update"> + Refactor nodes and events - use enum FlowStyle instead of Boolean (2018-02-10) + </action> + <action dev="asomov" type="update"> + Refactor ScalarToken, ScalarNode and ScalarEvent - use enum ScalarStyle instead of Character (2018-02-10) + </action> + <action dev="asomov" type="update"> + Refactor Token - remove unused code (2018-02-08) + </action> + <action dev="asomov" type="update"> + Refactor Mark - remove unused code (2018-02-06) + </action> + <action dev="asomov" type="fix" issue="395"> + Introduce DuplicateKeyException and report line number for duplicate keys + when creating non-Javabeans (2017-12-15) + </action> + </release> + <release version="1.19" date="2017-10-14" description="Maintenance"> + <action dev="maslovalex" type="update"> + Only use FIELD access for Android in PropertyUtils (2017-08-20) + </action> + <action dev="maslovalex" type="update"> + Add getAnnotations() and getAnnotation() methods to Property (2017-08-20) + </action> + <action dev="maslovalex" type="fix" issue="383"> + Some configuration properties of Representer are ignored. + </action> + <action dev="maslovalex" type="fix" issue="386"> + Fix order of duplicate keys indices to prevent wrong removals. + </action> + <action dev="maslovalex" type="fix" issue="382"> + Fix 382: same as 322 + </action> + <action dev="maslovalex" type="fix" issue="322"> + Fix 322: if there is no getter try to get type information from a setter + </action> + <action dev="asomov" type="fix" issue="377"> + Add test for 'billion laughs attack' + </action> + <action dev="asomov" type="fix" issue="368"> + Relax final restriction on TypeDescription (2017-05-05) + </action> + <action dev="asomov" type="fix" issue="375"> + Empty yaml file must return null instead of throwing an exception when loading a JavaBean (2017-05-03) + </action> + <action dev="asomov" type="fix" issue="374"> + Fix Number when it is used as a JavaBean property with a custom Locale (2017-04-30) + </action> + <action dev="asomov" type="add" issue="373"> + Add redundant test (2017-04-06) + </action> + <action dev="asomov" type="update"> + Provide access to node's anchor, pull request#20 (2017-03-30) + </action> + <action dev="asomov" type="fix" issue="370"> + Remove redundant "Bundle-RequiredExecutionEnvironment: J2SE-1.5" (2017-03-16) + </action> + <action dev="asomov" type="fix" issue="364"> + Serializing Calendar objects with certain timezone offsets renders invalid YAML (2017-02-28) + </action> + </release> + <release version="1.18" date="2017-02-22" description="Maintenance"> + <action dev="asomov" type="fix" issue="358"> + Validate DumperOptions to prevent invalid YAML to be dumped (2017-01-12) + </action> + <action dev="asomov" type="fix" issue="355"> + Fix for emitter to split long plain string scalars over multiple lines (2017-01-10) + </action> + <action dev="asomov" type="update"> + Let Mark implement Serializable so that ParserException can be serialized (2016-12-15) + </action> + <action dev="asomov" type="update" issue="354"> + Add tests for issue 354 (2016-12-12) + </action> + <action dev="maslovalex" type="fix" issue="337"> + Throw exception in case of duplicate keys in MappingNode and + LoaderOptions.allowDuplicateKeys is false. (2016-11-25) + </action> + <action dev="maslovalex" type="fix" issue="351"> + Keep same nodes order on merge (preprocess keys for MappingNode + and remove duplicates keeping the last one). (2016-11-22) + </action> + <action dev="asomov" type="fix" issue="349"> + Ignore white spaces for base64 encoded scalar (2016-11-17) + </action> + <action dev="maslovalex" type="fix" issue="348"> + Not removing parent object when composed object is an anchor. (2016-10-13) + </action> + <action dev="asomov" type="fix" issue="323"> + Support "Miscellaneous Symbols and Pictographs" (2016-09-05) + </action> + <action dev="asomov" type="fix" issue="341"> + Fix NPE in BaseRepresenter.multiRepresenters if it contains 'null' as value (2016-05-03) + </action> + <action dev="asomov" type="update" issue="335"> + Add example for issue 335 - the same tag for different node kinds (2016-03-19) + </action> <action dev="asomov" type="update" issue="332"> Add example for issue 332 (2016-02-24) </action> |