inkmark 0.1.1-x86_64-linux → 0.1.3-x86_64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e2a15e50a66a9f65d9e60d598ce05bec29af8eb820995b32c371a2f170fb2d39
-  data.tar.gz: 6a05cdb5f0df0a58423e6276594e37d5f0602119835fc6668a6e67b13c80cdf6
+  metadata.gz: d3d72b51b78b82b2e41b4df33577091dc25b7d1bd47307fb4019e6ce43da9ec5
+  data.tar.gz: 5a9e1bea46b7d4a5c679ef1f02313d234c02f54f9edd6331c93d22182a66bc55
 SHA512:
-  metadata.gz: ee9062294806ea2d7d6e6ceba879e693e09aedfa1e3dd0476ff993b43b4543e2330efa592cdf64d3f2c78351e2a4b72d3a7106a8113228c718957f3a123f461e
-  data.tar.gz: 11b33439d3e6624937add388a5b5d2c7640993a5e38f91ecd12e1d1c3c1de8e1e0f80810bbd7583c1cc61c34dce4d84e4f1addb4a326d8c0add1b043dee1c7c2
+  metadata.gz: 90b3571ade15e54a05037704b96db0d980115a3538469a2f02d2f24ff8c7b6209b9b69e3c9d19079263d50a705d0928a9d1c95d12fc3085df31c7a091627f41f
+  data.tar.gz: 477eb505f54c132c48cb713348987d22cec85ab4c974e86926eac1e1f755e6ec001c48ac8d9ba8dde0beabd7cf884e2d5a74bfee9dfd715b1811f3229c36a07c

data/CHANGELOG.md

@@ -1,3 +1,12 @@
+## [0.1.3] - 2026-06-21
+
+- Fix possible XSS via unescaped language tag in syntax-highlighted code blocks.
+
+## [0.1.2] - 2026-06-21
+
+- Fix `Inkmark.truncate_markdown` raising `TypeError` when called without explicit `options:`.
+- Update dependencies on the Rust side.
+
 ## [0.1.1] - 2026-04-22
 
 - Strip DWARF debug info from shipped Linux and Windows binaries via `strip = "debuginfo"`.

data/README.md

@@ -18,6 +18,11 @@ A very fast, feature-packed, AI-first Markdown gem for Ruby.
 - **Security conscious**. Raw HTML denied by default. Hostname and URL-scheme allowlists for both links and images. GFM tagfilter for dangerous tags. A Rust-backed gem.
 - **Easy extension API**. Hook any element with a Ruby block—no subclassing, no intermediate AST, no HTML post-processing. Rewrite URLs, swap code blocks for your own renderer, drop subtrees, or just walk the document for analysis. Handlers fire inside the single-pass parser, so extension costs essentially nothing beyond the render itself—and far less than regexing over output HTML.
 
+**See the introductory post for background and motivation**:
+
+**[Inkmark: a very fast, feature-packed, AI-first Markdown gem for Ruby
+](https://yaroslav.io/posts/inkmark-fast-ai-first-markdown)**
+
 ## Contents
 
 - [Installation](#installation)
@@ -50,6 +55,8 @@ gem "inkmark"
 
 Ruby 3.3+ is supported.
 
+The gem comes precompiled, a compiler toolchain is _not_ required for installation.
+
 ## Quick start
 
 ```ruby

data/lib/inkmark/version.rb

@@ -2,5 +2,5 @@
 
 class Inkmark
   # Current gem version.
-  VERSION = "0.1.1"
+  VERSION = "0.1.3"
 end

data/lib/inkmark.rb

@@ -222,7 +222,13 @@ class Inkmark
       params = normalize_truncate_params(
         chars: chars, words: words, at: at, marker: marker
       )
-      _native_truncate_markdown(source, params, resolve_frozen_options(options))
+      # truncate's native binding requires an options Hash; unlike the
+      # to_html/to_plain_text bindings it has no nil fast path, so fall
+      # back to the default options hash when the resolver returns nil.
+      _native_truncate_markdown(
+        source, params,
+        resolve_frozen_options(options) || default_options.to_native_hash_frozen
+      )
     end
 
     # Render +source+ through the filter pipeline and serialize to plain

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: inkmark
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.3
 platform: x86_64-linux
 authors:
 - Yaroslav Markin
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2026-04-22 00:00:00.000000000 Z
+date: 2026-06-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake