leptris 1.9.397.0-aarch64-linux → 1.9.398.0-aarch64-linux

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c65a84ecbd6e96187a169401563798f631e7de15b0638bc8f0d0fbc7d2f43f8d
-  data.tar.gz: 5267225bffc4d8b4438ffecdcb68def71cf4821827277efd9d7e39269ef5ac53
+  metadata.gz: 1c84575ff4701153bfd035f65d1ab416a7623c56dbac71f4ed1f7c781e902f4d
+  data.tar.gz: c71192697eace0cef20fef8c77eddc1ed3ad8abd82be12864a77b6aae3c39127
 SHA512:
-  metadata.gz: 2a6f4e3a13f4b84ab998021800d2233f7d4ffb91f29ec4ef860b8776a15482df23eb61c9b5f91ace55ab5eb64a5174eac68a2ae6ce78d3ecce0f50e6dd60199e
-  data.tar.gz: 1fbea43a7237f8dad724876fe5b53b6a45260b9595b14b89da3e32a0bf38f378d9fa7785650525c4d59d869fb2c38bef5a6f07bb7a34354a3933ccef467b8a8e
+  metadata.gz: '038d13c05f966615bd72c2e78369e0bdff70e20b3409e28117a88fd52f86838fa6266bc63e7cd28cbc70e834ea7f3249c9cc7fb65b62da58fc99cedda80e2258'
+  data.tar.gz: e546b900e38bb669cd6c4658d5f896b855555a97e1974e11a6b545d1bb2c071315fd289b78a5b3bd6981f9f799cb7501e635f14a44dab97ee83ddd2868056cfc

data/Rakefile

@@ -8,7 +8,7 @@ RSpec::Core::RakeTask.new(:spec)
 # Pin for `rake compile` and the platform-gem builds. Keep in lockstep
 # with .github/workflows/build.yml (which calls `rake compile`) and the
 # CHANGELOG when libleptris releases.
-LIBLEPTRIS_VERSION = "1.9.397"
+LIBLEPTRIS_VERSION = "1.9.398"
 # Vendored alongside libleptris for fn:normalize-unicode (TODO
 # .restructure/20): built per platform with a RELOCATABLE @rpath
 # install name, loaded by ffi.rb before libleptris so the

data/lib/leptris/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Leptris
-  VERSION = "1.9.397.0"
+  VERSION = "1.9.398.0"
 end

data/vendor-src/README.md

@@ -1,7 +1,7 @@
 Sources vendored in this gem (recompile rights; the ruby
 variant builds them at install via extconf.rb):
 
-- libleptris v1.9.397
+- libleptris v1.9.398
 - utf8proc v2.11.0
 
 Rebuild by hand:

data/vendor-src/libleptris/CHANGELOG.md

@@ -1,5 +1,25 @@
 ## [Unreleased]
 
+## [1.9.398] - 2026-10-31
+
+### Fixed
+
+- **gMonth accepts both XSD 1.0 spellings (leptris#1936, PR
+  #1937).** The first edition defined the lexical as `--MM--` (the
+  W3C suite's gMonth002/004 carry `--03--`); the errata added
+  `--MM`. Both validate now, each with its optional timezone.
+- **Absent timezone must end the lexical.** `tz_optional`'s absent
+  path returned success without reaching end of string, so the
+  g-regional/date family accepted trailing garbage (`--03garbage`,
+  `2026-10-08x`). Pinned by a 15-row red-first spec; the XSD
+  compile suite stays 138/138.
+- **The automaton size cap is inert at instance validation
+  (moxml#514, PR #1938).** The #1894 cap is a resource guard, not a
+  validity signal: a document whose content model hits the cap
+  validates on its merits instead of failing.
+
+
+
 ## [1.9.397] - 2026-10-31
 
 ### Performance

data/vendor-src/libleptris/CMakeLists.txt

@@ -3,7 +3,7 @@
 cmake_minimum_required(VERSION 3.20)
 
 project(leptris
-    VERSION 1.9.397
+    VERSION 1.9.398
     DESCRIPTION "Fast XML parser and XPath evaluator in pure C"
     LANGUAGES C CXX
 )

data/vendor-src/libleptris/src/leptris/xsd/datatypes.c

@@ -146,7 +146,9 @@ static int two_digits(const char** p) {
     return 1;
 }
 static int tz_optional(const char** p) {
-    if (**p != 'Z' && **p != '+' && **p != '-') return 1; /* absent */
+    /* #1936: the absent timezone is only absent at END of string —
+     * "2000-01-01garbage" used to pass the g-regional family. */
+    if (**p != 'Z' && **p != '+' && **p != '-') return **p == 0;
     if (**p == 'Z') { (*p)++; return **p == 0; }
     (*p)++;
     return two_digits(p) && *(*p) == ':' && (*p)++ && two_digits(p) &&
@@ -393,7 +395,15 @@ int xsd_builtin_valid(const char* type, const char* v) {
         const char* p = v;
         if (*p++ != '-') return 0;
         if (*p++ != '-') return 0;
-        return two_digits_bounded(&p, 1, 12) && tz_optional(&p);
+        if (!two_digits_bounded(&p, 1, 12)) return 0;
+        /* #1936: XSD 1.0 first edition spelled the lexical --MM--
+         * (the errata added --MM) — both are valid 1.0 forms, each
+         * carrying the optional timezone. */
+        if (p[0] == '-' && p[1] == '-') {
+            const char* q = p + 2;
+            return tz_optional(&q);
+        }
+        return tz_optional(&p);
     }
     if (strcmp(type, "xs:dateTime") == 0) {
         const char* p = v;

data/vendor-src/libleptris/src/leptris/xsd/validate.c

@@ -392,14 +392,13 @@ static void validate_children(struct xsd_validator* v,
     int ok = xsd_content_valid(s, model, xsd_target_ns(s), names, uris,
                                n);
     if (ok == -2) {
-        /* #1894: pathological occurrence product — the automaton
-         * exceeds the compile-time size cap. Loud, not a hang. */
-        const char* l2 = NULL;
-        leptris_element_expanded_name(elem, &l2, NULL, NULL);
-        verrf_atk(v, elem, "content-model", l2 ? l2 : "", "element",
-                  l2 ? l2 : "",
-                  "content model exceeds the automaton size cap "
-                  "(pathological occurrence product)");
+        /* #1894/#514: pathological occurrence product — the automaton
+         * exceeds the compile-time size cap. The cap is a resource
+         * guard, not a validity verdict: the content model is
+         * engine-INERT for this element (no instance finding — the
+         * consuming validator decides), the same posture as the
+         * compile-time guard. The element's content check is skipped
+         * and the walk continues; under-report, never false-report. */
         free(names);
         free(uris);
         return;

data/vendor-src/libleptris/test/xsd/test_xsd_compile.cpp

@@ -460,6 +460,35 @@ TEST(XsdDatatypes, BuiltinsLexicalMatrix) {
     }
 }
 
+/* leptris#1936: gMonth accepts BOTH XSD 1.0 spellings — the
+ * errata's --MM and the first edition's --MM-- — each with the
+ * optional timezone; and the g-regional/date family rejects
+ * trailing garbage after an absent timezone. */
+TEST(XsdDatatypes, GMonthSpellingsAndStrictTail) {
+    const BuiltinCase rows[] = {
+        {"xs:gMonth", "--03", 1},
+        {"xs:gMonth", "--03--", 1},
+        {"xs:gMonth", "--03Z", 1},
+        {"xs:gMonth", "--03--Z", 1},
+        {"xs:gMonth", "--03--+05:00", 1},
+        {"xs:gMonth", "--03-05:00", 1},
+        {"xs:gMonth", "--12", 1},
+        {"xs:gMonth", "--13", 0},
+        {"xs:gMonth", "--00", 0},
+        {"xs:gMonth", "--03garbage", 0},
+        {"xs:gMonth", "--03-x", 0},
+        {"xs:gMonth", "--03--05:00", 0},
+        {"xs:date", "2026-10-08garbage", 0},
+        {"xs:gDay", "---05garbage", 0},
+        {"xs:gYear", "2026x", 0},
+    };
+    for (const BuiltinCase& c : rows) {
+        SCOPED_TRACE(std::string(c.type) + " : " + c.value);
+        EXPECT_EQ(leptris_xsd_builtin_valid(c.type, c.value), c.expect)
+            << c.type << " : " + std::string(c.value);
+    }
+}
+
 /* leptris#1883: the builtin lexical table converges on Datatypes
  * Part 2 — collapse semantics, unbounded integers, +INF spelling,
  * 64-bit bounds, calendar/duration/binary grammars, xmlns prefix. */
@@ -3657,6 +3686,33 @@ TEST(XsdContent, PathologicalProductFailsLoudlyNotOom) {
     leptris_xsd_free(s);
 }
 
+/* lutaml/moxml#514: the cap is a resource guard, not a validity
+ * verdict. A content model whose NFA crosses the cap is engine-INERT
+ * at INSTANCE validation — no structured row flips a suite-valid
+ * document to invalid (the compile-time loud face above is the one
+ * place the guard reports). */
+TEST(XsdContent, Issue514CapIsInertAtInstanceValidation) {
+    std::string xsd =
+        "<xs:schema xmlns:xs=\"http://www.w3.org/2001/XMLSchema\">"
+        "<xs:element name=\"r\"><xs:complexType><xs:sequence"
+        " minOccurs=\"0\" maxOccurs=\"2000\"><xs:element name=\"e\""
+        " minOccurs=\"0\" maxOccurs=\"2000\"/></xs:sequence>"
+        "</xs:complexType></xs:element></xs:schema>";
+    LeptrisStatus st = LEPTRIS_OK;
+    LeptrisXsdSchema s =
+        leptris_xsd_compile(xsd.data(), xsd.size(), &st);
+    ASSERT_EQ(st, LEPTRIS_OK);
+    ASSERT_NE(s, (LeptrisXsdSchema)0);
+    LeptrisDocument d = leptris_parse_string("<r><e/><e/></r>", 15, &st);
+    ASSERT_NE(d, nullptr);
+    /* The instance is suite-valid and stays valid: the capped model
+     * is skipped, not failed. */
+    EXPECT_EQ(leptris_xsd_validate(s, d), 1);
+    EXPECT_EQ(leptris_xsd_error_count(s), 0u);
+    leptris_document_free(d);
+    leptris_xsd_free(s);
+}
+
 TEST(XsdContent, Issue1894ReproStaysUnderCapAndCorrect) {
     /* The issue's exact shape — seq maxOccurs=100 x element
      * unbounded — lowers to a loop region (not copies) and must stay

data/vendor-src/libleptris/vcpkg.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://raw.githubusercontent.com/microsoft/vcpkg/master/scripts/vcpkg.schema.json",
   "name": "leptris",
-  "version": "1.9.397",
+  "version": "1.9.398",
   "description": "High-performance XML parser and XPath 1.0 engine in C (libleptris)",
   "homepage": "https://github.com/leptris/leptris",
   "license": "MIT",

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: leptris
 version: !ruby/object:Gem::Version
-  version: 1.9.397.0
+  version: 1.9.398.0
 platform: aarch64-linux
 authors:
 - Ribose Inc.