jekyll-documents 0.7.0 → 0.7.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 34e9456980c65a0eab294a17100d6de0bcf522bc3652afcadc3c2521c8c9d48b
-  data.tar.gz: be4ff590ed8c3e251fb7c56a1e57a33e2650d60a63c44113bb2a4c48402fe906
+  metadata.gz: 884c3afc18e96312dcd25a2328f652ec8cb1417ad8ec26337b4aa4ee2f175517
+  data.tar.gz: 29e0d75b6b50c68acb124e0b31123cc85c3810789c39d562beb8da00c5c50a87
 SHA512:
-  metadata.gz: 4c456c2e5ff0b55a6d51bc777770bed926b6cfa4c8a1393fda110f5d0a8d3e0e49af5c5399e1a0bdf2f4c8f5632e19ec8490975722842a5657b9f6e737c4412a
-  data.tar.gz: 5ff47c4204e58ad1e49bd48cd146d4f51ccf44254f1244530b0fd39f8fa2b5817531cfa293409a3f6fbad7063bc3425599e2c1bf37d094b5dbb45bba5cc13dc8
+  metadata.gz: c50ee45d94b33d62b344dadda31c9cf865d8d175de1b00e7c7f92aaeb046f0cef7fec3835de627e68ec0ce9849d925b8fbacb3012be5a5face435822c173b9c3
+  data.tar.gz: 3a28dee0ff0b8078cac42e4097676a991496e8510a38518bd7d6ea013275f2f9f804b15b5f4ab46e846f6ab2a5eaa8e72dfd4a535ed8a1b9c7cf338671a64019

data/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## [0.7.2] - 2026-09-09
+
+### Fixed
+- Replaced polynomial-time Liquid tag option regexes with a shared linear-time parser
+
+## [0.7.1] - 2026-09-09
+
+### Changed
+- Development dependencies now live in `Gemfile`; the gemspec declares runtime dependencies only
+- Removed redundant transitive dependency pins and made `Gemfile` read the exact Ruby version from `.ruby-version`
+- Refreshed compatible locked dependency versions and tracked `Gemfile.lock` for reproducible CI development environments
+- Updated CI and release workflows to use `.ruby-version`
+
 ## [0.7.0] - 2026-09-05
 
 ### Added

data/jekyll-documents.gemspec

@@ -31,13 +31,4 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
 
   spec.add_dependency "jekyll", ">= 4.4", "< 5.0"
-
-  spec.add_development_dependency "bundler-audit", "~> 0.9"
-  spec.add_development_dependency "plaintext", "~> 0.3"
-  spec.add_development_dependency "rake", "~> 13.4"
-  spec.add_development_dependency "rspec", "~> 3.13"
-  spec.add_development_dependency "rubocop", "~> 1.90"
-  spec.add_development_dependency "rubocop-performance", "~> 1.27"
-  spec.add_development_dependency "simplecov", "~> 1.1"
-  spec.add_development_dependency "yard", "~> 0.9"
 end

data/lib/jekyll/documents/options_parser.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+require "strscan"
+
+module Jekyll
+  module Documents
+    # Linear-time parser for Liquid tag markup key:value pairs.
+    # Replaces polynomial-redos-vulnerable regex scanning with
+    # anchored scans that advance through the input once.
+    module OptionsParser
+      module_function
+
+      def parse_options(markup)
+        scanner = StringScanner.new(markup.to_s)
+        options = {}
+
+        until scanner.eos?
+          scanner.skip(/\s+/)
+          break if scanner.eos?
+
+          key = scanner.scan(/\w+/)
+          unless key
+            scanner.getch
+            next
+          end
+
+          scanner.skip(/\s*/)
+          next unless scanner.scan(":")
+
+          scanner.skip(/\s*/)
+          value = if scanner.scan(/'([^']*)'/) || scanner.scan(/"([^"]*)"/)
+                    scanner[1]
+                  else
+                    scanner.scan(/\S+/)
+                  end
+          options[key] = value unless value.nil?
+        end
+
+        options
+      end
+    end
+  end
+end

data/lib/jekyll/documents/tags/doc_category.rb

@@ -152,13 +152,7 @@ module Jekyll
       end
 
       def extract_options(text)
-        options = {}
-        text.to_s.scan(
-          /(\w+)\s*:\s*(?:'([^']*)'|"([^"]*)"|([^\s]+))/
-        ) do |key, single, double, bare|
-          options[key] = single || double || bare
-        end
-        options
+        OptionsParser.parse_options(text)
       end
 
       def escape_html(value)

data/lib/jekyll/documents/tags/doc_link.rb

@@ -148,13 +148,7 @@ module Jekyll
       end
 
       def extract_options(text)
-        options = {}
-        text.to_s.scan(
-          /(\w+)\s*:\s*(?:'([^']*)'|"([^"]*)"|([^\s]+))/
-        ) do |key, single, double, bare|
-          options[key] = single || double || bare
-        end
-        options
+        OptionsParser.parse_options(text)
       end
 
       def escape_html(value)

data/lib/jekyll/documents/tags/document_icon.rb

@@ -45,13 +45,7 @@ module Jekyll
 
       def parse_markup(markup)
         expression = markup.to_s.strip[/\A[^\s]+/]
-        options = {}
-        markup.to_s.scan(
-          /(\w+)\s*:\s*(?:'([^']*)'|"([^"]*)"|([^\s]+))/
-        ) do |key, single, double, bare|
-          options[key] = single || double || bare
-        end
-        [expression, options]
+        [expression, OptionsParser.parse_options(markup)]
       end
 
       def escape_html(value)

data/lib/jekyll/documents/tags/latest_documents.rb

@@ -46,19 +46,9 @@ module Jekyll
                        })
       end
 
+      # supports: count:5 category:'referat'
       def parse_args(markup)
-        # supports: count:5 category:'referat'
-        args = {}
-        # Safe: markup comes from Jekyll template authors (trusted), not end users
-        # Runs only during static site generation, not on user requests
-        markup.scan(/(\w+)\s*:\s*'([^']*)'|(\w+)\s*:\s*([^\s]+)/).each do |match|
-          if match[0]
-            args[match[0]] = match[1]
-          else
-            args[match[2]] = match[3]
-          end
-        end
-        args
+        OptionsParser.parse_options(markup)
       end
     end
   end

data/lib/jekyll/documents/version.rb

@@ -2,6 +2,6 @@
 
 module Jekyll
   module Documents
-    VERSION = "0.7.0"
+    VERSION = "0.7.2"
   end
 end

data/lib/jekyll-documents.rb

@@ -11,6 +11,7 @@ require_relative "jekyll/documents/text_extraction_manifest"
 require_relative "jekyll/documents/assets_generator"
 require_relative "jekyll/documents/json_index_generator"
 require_relative "jekyll/documents/layout_registrar"
+require_relative "jekyll/documents/options_parser"
 
 # Liquid tag(s)
 require_relative "jekyll/documents/tags/latest_documents"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: jekyll-documents
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.7.2
 platform: ruby
 authors:
 - Svend Gundestrup
@@ -29,118 +29,6 @@ dependencies:
     - - "<"
       - !ruby/object:Gem::Version
         version: '5.0'
-- !ruby/object:Gem::Dependency
-  name: bundler-audit
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.9'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.9'
-- !ruby/object:Gem::Dependency
-  name: plaintext
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.3'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.3'
-- !ruby/object:Gem::Dependency
-  name: rake
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '13.4'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '13.4'
-- !ruby/object:Gem::Dependency
-  name: rspec
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.13'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.13'
-- !ruby/object:Gem::Dependency
-  name: rubocop
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.90'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.90'
-- !ruby/object:Gem::Dependency
-  name: rubocop-performance
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.27'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.27'
-- !ruby/object:Gem::Dependency
-  name: simplecov
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.1'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.1'
-- !ruby/object:Gem::Dependency
-  name: yard
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.9'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.9'
 description: A Jekyll plugin + theme that scans assets/documents/**, creates a collection
   item per file, adds metadata (title/date/category), outputs pages, generates a JSON
   index for Lunr, and integrates with jekyll-sitemap.
@@ -266,6 +154,7 @@ files:
 - lib/jekyll/documents/generator.rb
 - lib/jekyll/documents/json_index_generator.rb
 - lib/jekyll/documents/layout_registrar.rb
+- lib/jekyll/documents/options_parser.rb
 - lib/jekyll/documents/tags/doc_category.rb
 - lib/jekyll/documents/tags/doc_link.rb
 - lib/jekyll/documents/tags/document_icon.rb