json 2.18.0-java → 2.18.2-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 01703c1e2adcabaf3a125765317390a3316605491b546b07e28e9b96514a3115
-  data.tar.gz: 88f16279231338f9c361f60f0714444c95464b68eb2cdfbf386a79c249fbaf15
+  metadata.gz: 817a2f4bdfeaca6822638f570c4a485cbb14f632c4a93c38268e2941f4ce7cf8
+  data.tar.gz: db0aa08b2b7f511f953a2da20c3e95afc1a0c80bd31de6bd55da43df8d7f8720
 SHA512:
-  metadata.gz: e7be2f57299fc2951a1b9db08524ceba095a0a01d7d277b7bde247dc744d5084b59fc104f2a2774a6e189b6294ce1839cd4eab0a741c4aae4b8f2a5721a8b199
-  data.tar.gz: d77c19ed8e1ab52b27374acdc4f23357faad3ce3151663accc4c70d68fc65e8e207396f23a61a8fbd722c7bdf62118644f234e3e2f4effc75e62c6dcdc4a00f3
+  metadata.gz: a9c891a107a4f6a61c1a24198f0bd3f7b1dff8e0f302071f28319ec0c546463525da884bf8d8ca360b769d17f208c405649de2d41bcf67e7f8b1fb866c7ea393
+  data.tar.gz: c412298860ece34252ea1bcaadb5d1d28c8a977c1bf9a691f69df3d897a91b153780bde5e752ab59db5d8a4378eed172cca51cca240c0316919c32abe5158a1d

data/CHANGES.md

@@ -2,6 +2,16 @@
 
 ### Unreleased
 
+### 2026-11-02 (2.18.2)
+
+* Backport handling of unescaped control characters preceeded by a backslash from 2.19.3.
+  GHSA-cjpr-jw2g-fw99.
+
+### 2026-02-03 (2.18.1)
+
+* Fix a potential crash in very specific circumstance if GC triggers during a call to `to_json`
+  without first invoking a user defined `#to_json` method.
+
 ### 2025-12-11 (2.18.0)
 
 * Add `:allow_control_characters` parser options, to allow JSON strings containing unescaped ASCII control characters (e.g. newlines).
@@ -66,7 +76,7 @@
 * Fix `JSON.generate` `strict: true` mode to also restrict hash keys.
 * Fix `JSON::Coder` to also invoke block for hash keys that aren't strings nor symbols.
 * Fix `JSON.unsafe_load` usage with proc
-* Fix the parser to more consistently reject invalid UTF-16 surogate pairs. 
+* Fix the parser to more consistently reject invalid UTF-16 surogate pairs.
 * Stop defining `String.json_create`, `String#to_json_raw`, `String#to_json_raw_object` when `json/add` isn't loaded.
 
 ### 2025-07-28 (2.13.2)

data/lib/json/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module JSON
-  VERSION = '2.18.0'
+  VERSION = '2.18.2'
 end

data/lib/json.rb

@@ -6,6 +6,15 @@ require 'json/common'
 #
 # \JSON is a lightweight data-interchange format.
 #
+# \JSON is easy for us humans to read and write,
+# and equally simple for machines to read (parse) and write (generate).
+#
+# \JSON is language-independent, making it an ideal interchange format
+# for applications in differing programming languages
+# and on differing operating systems.
+#
+# == \JSON Values
+#
 # A \JSON value is one of the following:
 # - Double-quoted text:  <tt>"foo"</tt>.
 # - Number:  +1+, +1.0+, +2.0e2+.
@@ -173,6 +182,18 @@ require 'json/common'
 # When enabled:
 #   JSON.parse('[1,]', allow_trailing_comma: true) # => [1]
 #
+# ---
+#
+# Option +allow_control_characters+ (boolean) specifies whether to allow
+# unescaped ASCII control characters, such as newlines, in strings;
+# defaults to +false+.
+#
+# With the default, +false+:
+#   JSON.parse(%{"Hello\nWorld"}) # invalid ASCII control character in string (JSON::ParserError)
+#
+# When enabled:
+#   JSON.parse(%{"Hello\nWorld"}, allow_control_characters: true) # => "Hello\nWorld"
+#
 # ====== Output Options
 #
 # Option +freeze+ (boolean) specifies whether the returned objects will be frozen;

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: json
 version: !ruby/object:Gem::Version
-  version: 2.18.0
+  version: 2.18.2
 platform: java
 authors:
 - Daniel Luz
 bindir: bin
 cert_chain: []
-date: 2025-12-11 00:00:00.000000000 Z
+date: 2026-11-02 00:00:00.000000000 Z
 dependencies: []
 description: A JSON implementation as a JRuby extension.
 email: dev+ruby@mernen.com