json 2.21.0-java → 2.21.2-java

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 1afa1e3890c8c870016c243fc967533cb0a0ef3061e95d6ba29262c7564809b9
4
- data.tar.gz: f8123182d86d00979ae0fadf3df150b7a2766e5e92a9323d97550ac13bd85769
3
+ metadata.gz: 8c5b113b589bfe7bb7c52941c7e35138bbbdda75ebfa8152c328f4192667997a
4
+ data.tar.gz: 270bf86c7014dac57c71013641d57358b3a0e7a80bfb7b91e7ccd7835b04c92e
5
5
  SHA512:
6
- metadata.gz: 83be4643e044a17198169036eb49eb2ae2dced41f26fe26335cd1feef90acb9b7c56be5a6a986de25dcde2f919a5d587c208f477e65d41783d347f84bf0fdeed
7
- data.tar.gz: d748f91e351cea5fc38a02c174ca8909bc31e4ef0b611e409936a0248429040e7a70daf6fcdca9781c0fe99a41558ff021dbf127098fb65bbddb4c6853a6a0b0
6
+ metadata.gz: 7609cd4c169b0f3756dc724f11d6c4f64e022fbbaa25edd2cfc6ba724fef024000b307a4f0d30b8231ece4213b13d19a7a2de5e798c57020fd992dcf9cb49b54
7
+ data.tar.gz: 1cc2005bf663bf351f0c627e2d4e7a3a46db9c629f00b29a972e94f4bf6519f67ffb87c0aecab9d44b6779cc27fdda92bcf24dc092c8eff1cf89989117e7fbd2
data/CHANGES.md CHANGED
@@ -2,6 +2,14 @@
2
2
 
3
3
  ### Unreleased
4
4
 
5
+ ### 2026-07-31 (2.21.2)
6
+
7
+ * Fix a use-after-free bug in `JSON::ResumableParser`. [GHSA-9hj4-r449-hfvc].
8
+
9
+ ### 2026-07-13 (2.21.1)
10
+
11
+ * Fix a compilation issue on Window and Microsoft Visual C++.
12
+
5
13
  ### 2026-07-12 (2.21.0)
6
14
 
7
15
  * `JSON.generate` now accept a `sort_keys` option, which takes either a boolean or a block.
Binary file
Binary file
data/lib/json/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module JSON
4
- VERSION = '2.21.0'
4
+ VERSION = '2.21.2'
5
5
  end
data/lib/json.rb CHANGED
@@ -121,9 +121,11 @@ require 'json/common'
121
121
  # ====== Input Options
122
122
  #
123
123
  # Option +max_nesting+ (\Integer) specifies the maximum nesting depth allowed;
124
- # defaults to +100+; specify +false+ to disable depth checking.
124
+ # defaults to +100+;
125
+ # You can set it to +false+ to disable depth checking entirely, but that is dangerous
126
+ # when parsing untrusted input.
125
127
  #
126
- # With the default, +false+:
128
+ # With the default, +100+:
127
129
  # source = '[0, [1, [2, [3]]]]'
128
130
  # ruby = JSON.parse(source)
129
131
  # ruby # => [0, [1, [2, [3]]]]
@@ -384,6 +386,15 @@ require 'json/common'
384
386
  # # Raises JSON::NestingError (nesting of 2 is too deep):
385
387
  # JSON.generate(obj, max_nesting: 2)
386
388
  #
389
+ # With +false+:
390
+ # obj = []
391
+ # obj[0] = obj
392
+ # # Raises SystemStackError: stack level too deep
393
+ # JSON.generate(obj, max_nesting: false)
394
+ #
395
+ # Setting +max_nesting+ to +false+ can lead to a stackoverflow and may leave the program
396
+ # in an unrecoverable state. It is discouraged.
397
+ #
387
398
  # ====== Escaping Options
388
399
  #
389
400
  # Options +script_safe+ (boolean) specifies wether <tt>'\u2028'</tt>, <tt>'\u2029'</tt>
metadata CHANGED
@@ -1,13 +1,13 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: json
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.21.0
4
+ version: 2.21.2
5
5
  platform: java
6
6
  authors:
7
7
  - Daniel Luz
8
8
  bindir: bin
9
9
  cert_chain: []
10
- date: 2026-07-12 00:00:00.000000000 Z
10
+ date: 2026-07-31 00:00:00.000000000 Z
11
11
  dependencies: []
12
12
  description: A JSON implementation as a JRuby extension.
13
13
  email: dev+ruby@mernen.com