json 2.19.9-java → 2.20.0-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f868e8b079bbfd0c07f55ec36c9d2ce852e63bab1b5095053744297e25cff251
-  data.tar.gz: 0c91a99e820eb62b0efddd05bd400af34139123d61852504884472080d635d1e
+  metadata.gz: f01681908b8ed67cdfbfb53e8f7a580259cd6c5ea973217292233aee473a2bcb
+  data.tar.gz: 6cb81cbffd79eeff08ad709da839556c18492423a8980c50cd79c72a3720b022
 SHA512:
-  metadata.gz: 7f8d242f8dd44d94b1975f22c8684962d85608da1a660632792b40a32675e16588ed8ac21b16caba7a0822bb1015e2a2b54d524199cc8fb43ae455329c0fef97
-  data.tar.gz: 9a9ecc0b75fbdd1bc1b579d0913737d49a0abbd87ceb9ebbc26af1f15d0e8053e76cfbe735d44828b1caff4a765172cfdabcd4cbd1846d7563beab8ec3f4a00a
+  metadata.gz: 32142742b1ccfe813374514fa2e51fbe99280ec08f67b611177c10c2bee032e6ec5725e1ee826f7a0ff484ab33e0fa40c40ee28240cbda11619ddb4127f6d748
+  data.tar.gz: d33bdd91bc38c61a82bcadc58bd8b4a085d77943945d31d5ff1f1de14d01a42a7fe7c2088c9fea76c3e10b00ee24cfe89ccafd3df9eace5d2e7f761dd007ebac

data/CHANGES.md

@@ -2,10 +2,20 @@
 
 ### Unreleased
 
+### 2026-06-23 (2.20.0)
+
+* Both C and Java parsers are no longer recursive, so parsing very deep documents with `max_nesting: false` will no longer
+  result in `SystemStackError stack level too deep` errors.
+  * The `:max_nesting` option still defaults to `100`.
+* Optimized floating point number parsing further by replacing the ryu algorithm by a port of Eisel-Lemire Fast Float.
+* Added `JSON::ResumableParser` to parse streams of JSON documents. Not yet available on JRuby.
+* Deprecate default support of JavaScript comments in the parser and add `allow_comments: true` parsing option.
+* Integrate with Ruby 4.1 `ruby_sized_xfree`.
+
 ### 2026-06-11 (2.19.9)
 
 * Fix buffer overflow that could lead to a crash when writing JSON directly into an IO
-  with `JSON.generate(object, io)`. [CVE-PENDING].
+  with `JSON.generate(object, io)`. [CVE-2026-54696].
 
 ### 2026-06-03 (2.19.8)
 

data/LEGAL

@@ -15,6 +15,6 @@ ext/json/ext/vendor/jeaiii-ltoa.h::
   This file is adapted from https://github.com/jeaiii/itoa
   It is licensed under the MIT License
 
-ext/json/ext/vendor/ryu.h::
-  This file is adapted from the Ryu algorithm by Ulf Adams https://github.com/ulfjack/ryu.
-  It is dual-licensed under Apache License 2.0 OR Boost Software License 1.0.
+ext/json/ext/vendor/fast_float_parser.h::
+  This file is adapted from the Fast Float C++ library by The fast_float authors https://github.com/fastfloat/fast_float
+  It is licensed under the MIT License

data/README.md

@@ -306,5 +306,3 @@ The latest version of this library can be downloaded at
 Online Documentation should be located at
 
 * https://www.rubydoc.info/gems/json
-
-[Ragel]: http://www.colm.net/open-source/ragel/

data/lib/json/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module JSON
-  VERSION = '2.19.9'
+  VERSION = '2.20.0'
 end

data/lib/json.rb

@@ -145,11 +145,11 @@ require 'json/common'
 #   # warning: detected duplicate keys in JSON object.
 #   # This will raise an error in json 3.0 unless enabled via `allow_duplicate_key: true`
 #
-# When set to `+true+`
+# When set to +true+:
 #   # The last value is used.
 #   JSON.parse('{"a": 1, "a":2}') => {"a" => 2}
 #
-# When set to `+false+`, the future default:
+# When set to +false+, the future default:
 #   JSON.parse('{"a": 1, "a":2}') => duplicate key at line 1 column 1 (JSON::ParserError)
 #
 # ---
@@ -184,6 +184,20 @@ require 'json/common'
 #
 # ---
 #
+# Option +allow_comments+ (boolean) specifies whether to allow
+# JavaScript style comments (either <tt>// comment</tt> or <tt>/* comment */</tt>);
+# defaults to +false+.
+#
+# When not specified, a deprecation warning is emitted if a comment is encountered.
+#
+# When set to +true+, comments are ignored:
+#   JSON.parse('/* comment */ {"a": 1, "a":2}') # => {"a" => 2}
+#
+# When set to +false+, the future default:
+#   JSON.parse('/* comment */ {"a": 1, "a":2}') # unexpected character: '/' at line 1 column 1 (JSON::ParserError)
+#
+# ---
+#
 # Option +allow_control_characters+ (boolean) specifies whether to allow
 # unescaped ASCII control characters, such as newlines, in strings;
 # defaults to +false+.

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: json
 version: !ruby/object:Gem::Version
-  version: 2.19.9
+  version: 2.20.0
 platform: java
 authors:
 - Daniel Luz
 bindir: bin
 cert_chain: []
-date: 2026-06-11 00:00:00.000000000 Z
+date: 2026-06-23 00:00:00.000000000 Z
 dependencies: []
 description: A JSON implementation as a JRuby extension.
 email: dev+ruby@mernen.com