corvus_json_schema 0.1.1-aarch64-linux → 0.1.2-aarch64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2655fbc65f259a767740792d96a622a23d04c02c3249efc5117949d1b1d61875
-  data.tar.gz: 11006c39433985adeed20cd2261c145d75e92c2e98c84a88c6c89f3ff0dddc46
+  metadata.gz: 286632ce0d8101e99083636cee4a3d4149666130841755cfd92b8b9444590f6b
+  data.tar.gz: 241bda7ea04b98dafc4a843872020477f3c3f6eed1447258bf8977be8e53f811
 SHA512:
-  metadata.gz: 971456beb9fd0ded883cf7e0192533dca102e5fc106ccb26132062a4b2b1beba16e094f13892cb95b6c1a17e9ff3fe558fe768b33da41210d6eaee814ffd7e3f
-  data.tar.gz: b4130e85a1831f200b8f621d7a4b02e3294c95ab8ec72a44ed3f9867addb5c03f6a1e1c5ae76bd02627d88cda3db9b9252268675fc846f74916f0dc54546e92f
+  metadata.gz: b39b58f334e55e3f59db44db62737dac49ee5f7ca812d216620915bd5182161d2fab45dc89beff5c911f9972c328124c62df74c9143762d66c4c743db63d1df7
+  data.tar.gz: 54135b0b129626ef35887cfb6105a08e9232728ebcb8e2a0391d6ce5a9f55a4899c694c9411407c1a99d9698bc24893c9325e86e15dc7301cdb2a802d1ac700f

data/README.md

@@ -11,7 +11,7 @@ standalone evaluator.
   validated without creating Ruby objects for it.
 - **Precompiled**: native gems for Linux (x86_64 and aarch64, glibc and musl), macOS (x86_64 and arm64) and Windows
   (x64), for Ruby 3.3, 3.4 and 4.0. On other platforms the source gem builds the extension, which needs a Rust
-  toolchain (1.85 or later) and libclang.
+  toolchain (1.89 or later) and libclang.
 
 ## Install
 

data/VERSIONHISTORY.md

@@ -2,6 +2,14 @@
 
 The version history of the `corvus_json_schema` Ruby gem. It is versioned independently of the Corvus NuGet packages and of the [corvus-json-schema](../../src-rs/corvus-json-schema/VERSIONHISTORY.md) Rust crate it is built on.
 
+## V0.1.2
+
+V0.1.2 fixes a crash of the Ruby process for a schema whose `not` leads back to the schema it is in, by taking version 0.1.6 of the corvus-json-schema crate. There are no API changes. Versions 0.1.0 and 0.1.1 are affected.
+
+### Bug fixes
+
+- **A `not` that leads back to the schema it is in.** A schema can loop without consuming the instance. The gem abandons such an evaluation at `max_depth` (128 by default) and raises `CorvusJsonSchema::DepthError`. Evaluating `not` went around that guard. For a schema such as `{"not": {"$ref": "#"}}`, validating an instance that reached the `not` recursed in the native extension until the stack overflowed, which crashes the Ruby process. `valid?`, `valid_json?` and `evaluate` were all affected. A `not` is now under the guard, so they raise `CorvusJsonSchema::DepthError`. The fault is in the schema. No instance causes it for a schema without such a loop, so a program was exposed only if it compiled schemas it did not write. A schema that loops elsewhere under a `not` was not affected in this gem: it raised `CorvusJsonSchema::DepthError`, and still does.
+
 ## V0.1.1
 
 V0.1.1 fixes wrong validation results for one form of pattern, by taking version 0.1.4 of the corvus-json-schema crate. There are no API changes. Version 0.1.0 is affected.

data/lib/corvus_json_schema/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module CorvusJsonSchema
-  VERSION = "0.1.1"
+  VERSION = "0.1.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: corvus_json_schema
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: aarch64-linux
 authors:
 - endjin
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-10-08 00:00:00.000000000 Z
+date: 2026-10-09 00:00:00.000000000 Z
 dependencies: []
 description: 'JSON Schema validation for Ruby with the corvus-json-schema Rust crate:
   drafts 4, 6, 7, 2019-09 and 2020-12, results and annotations, Ruby values read in