jsonatapy 2.1.7__tar.gz → 2.2.1__tar.gz

{jsonatapy-2.1.7 → jsonatapy-2.2.1}/CHANGELOG.md

@@ -19,8 +19,47 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Security
 
+## [2.2.1] - 2026-07-08
+
+> Same code as [2.1.7](#217---2026-07-08) below, renumbered. This project's release versions
+> track the jsonata-js major/minor version they target (patch numbers are independent — see
+> README). `2.1.7` incorrectly continued the old `2.1.x` patch series even though this release's
+> guardrails feature and signature-engine fixes target jsonata-js `2.2.0`/`2.2.1`; `2.1.7` is
+> superseded immediately by this release and should not be used.
+
+### Added
+- Guardrails: `timeout` (ms, error code `D1012`), `max_stack_depth` (error code `D1011`), and
+  `max_sequence_length` (error code `D2015`) keyword arguments on `compile()` and every
+  `evaluate*()` call, enforced consistently across all three execution engines (tree-walker,
+  compiled-expression fast path, bytecode VM). All default to `None` (unlimited) — no behavior
+  change unless configured. See [Guardrails](docs/api.md#guardrails). (jsonata-js 2.2.1 Phase 2, #56)
+- Documented the guardrails API in `docs/api.md`, `docs/usage.md`, and `docs/error-handling.md`
+  (previously shipped with accurate Python docstrings but no user-facing docs), and corrected
+  `docs/migration-from-js.md`'s stale claim that Python had no built-in timeout support.
+
+### Fixed
+- A deeply-nested expression (arithmetic chains, parenthesized/grouped expressions) no longer
+  crashes the whole process (previously a native stack overflow) — now raises a graceful `U1002`
+  error instead, via a depth guard in the parser and a second, defense-in-depth guard in the
+  post-parse AST pass.
+- `Instr::MakeArray`/`MakeObject`/`BlockEnd`'s bytecode operands (and `CallBuiltin`'s argument
+  count, and internal constant-pool bookkeeping) no longer silently produce wrong, truncated
+  results for oversized literals/blocks/calls (e.g. array literals with more than 65,535
+  elements) — such cases now fall back to the always-correct tree-walker instead.
+- `ast_transform.rs`'s depth-guard error messages no longer imply `%`/`@`/`#` ancestor-operator
+  usage (e.g. "...while resolving ancestor/path metadata") when the guard fires for any
+  sufficiently-nested expression, including plain arithmetic.
+- Release workflow now fails loudly on a fresh dispatch when the target version tag already
+  exists at a different commit, instead of silently reusing the wrong commit (#53).
+
 ## [2.1.7] - 2026-07-08
 
+**Superseded by [2.2.1](#221---2026-07-08) above, published the same day.** This version was
+numbered following a simple patch-increment from `2.1.6` rather than this project's actual
+versioning policy (track jsonata-js's major/minor). It is fully functional and was not yanked —
+package registries don't allow deleting a published version — but `2.2.1` is the version that
+should be used going forward.
+
 ### Added
 - Guardrails: `timeout` (ms, error code `D1012`), `max_stack_depth` (error code `D1011`), and
   `max_sequence_length` (error code `D2015`) keyword arguments on `compile()` and every

{jsonatapy-2.1.7 → jsonatapy-2.2.1}/Cargo.lock

@@ -483,7 +483,7 @@ dependencies = [
 
 [[package]]
 name = "jsonata-core"
-version = "2.1.7"
+version = "2.2.1"
 dependencies = [
  "base64",
  "chrono",

{jsonatapy-2.1.7 → jsonatapy-2.2.1}/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "jsonata-core"
-version = "2.1.7"
+version = "2.2.1"
 edition = "2021"
 authors = ["txjmb <txjmb@users.noreply.github.com>"]
 description = "High-performance Rust implementation of JSONata query and transformation language"

{jsonatapy-2.1.7 → jsonatapy-2.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: jsonatapy
-Version: 2.1.7
+Version: 2.2.1
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
@@ -54,6 +54,8 @@ workloads, and faster than the next pure-Rust implementation.
 
 Many, many thanks to the incredible work of all the maintainers of the [JSONata](https://github.com/jsonata-js/jsonata) reference library.  JSONata is a very powerful, well-designed, and useful language that has made an impact on many projects.  This project leverages their outstanding work to extend that capability to Python and Rust and would not be possible without that project.  The implementation in Rust was strongly influenced by their implementation.  The 1600+ tests they created provided the scaffolding and validation for all of this project.  This project will continue to follow and be a derivative of the reference project as the JSONata reference library evolves.
 
+Release versions will follow the reference jsonata-js project major and minor release numbers, but not necessarily patches.  This will make it easier for adopters of this library to understand each release's JSONata API compatibility.  As an example, 2.1.7 should be compliant with 2.1.x jsonata-js tests, but may have fixes specific to this library.  If a patch release for jsonata-js is relevant for this project, it will be included in a patch release that may or may not follow the patch numbers of the upstream project.
+
 [![Crates.io](https://img.shields.io/crates/v/jsonata-core.svg)](https://crates.io/crates/jsonata-core)
 [![PyPI version](https://badge.fury.io/py/jsonatapy.svg)](https://pypi.org/project/jsonatapy/)
 [![Python versions](https://img.shields.io/pypi/pyversions/jsonatapy.svg)](https://pypi.org/project/jsonatapy/)

{jsonatapy-2.1.7 → jsonatapy-2.2.1}/README.md

@@ -9,6 +9,8 @@ workloads, and faster than the next pure-Rust implementation.
 
 Many, many thanks to the incredible work of all the maintainers of the [JSONata](https://github.com/jsonata-js/jsonata) reference library.  JSONata is a very powerful, well-designed, and useful language that has made an impact on many projects.  This project leverages their outstanding work to extend that capability to Python and Rust and would not be possible without that project.  The implementation in Rust was strongly influenced by their implementation.  The 1600+ tests they created provided the scaffolding and validation for all of this project.  This project will continue to follow and be a derivative of the reference project as the JSONata reference library evolves.
 
+Release versions will follow the reference jsonata-js project major and minor release numbers, but not necessarily patches.  This will make it easier for adopters of this library to understand each release's JSONata API compatibility.  As an example, 2.1.7 should be compliant with 2.1.x jsonata-js tests, but may have fixes specific to this library.  If a patch release for jsonata-js is relevant for this project, it will be included in a patch release that may or may not follow the patch numbers of the upstream project.
+
 [![Crates.io](https://img.shields.io/crates/v/jsonata-core.svg)](https://crates.io/crates/jsonata-core)
 [![PyPI version](https://badge.fury.io/py/jsonatapy.svg)](https://pypi.org/project/jsonatapy/)
 [![Python versions](https://img.shields.io/pypi/pyversions/jsonatapy.svg)](https://pypi.org/project/jsonatapy/)

{jsonatapy-2.1.7 → jsonatapy-2.2.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "jsonatapy"
-version = "2.1.7"
+version = "2.2.1"
 description = "High-performance Python/Rust implementation of JSONata query and transformation language"
 authors = [
     {name = "txjmb", email = "txjmb@users.noreply.github.com"}