ruby.git/ext/psych/lib, branch v3_3_11

[ruby/psych] Bump up 5.1.2

2023-12-19T02:07:47+00:00

https://github.com/ruby/psych/commit/a9ab74d132

[ruby/psych] Use `compare_by_identity` instead of `object_id`

2023-12-19T02:07:45+00:00

Object IDs became more expensive in Ruby 2.7. Using `Hash#compare_by_identity` let's us get the same effect, without needing to force all these objects to have object_ids assigned to them.

https://github.com/ruby/psych/commit/df69e4a12e

[ruby/psych] Prefer each_char in Psych::Visitors::Visitor::ToRuby#deserialize

2023-11-27T01:35:08+00:00

Use safe navigation operator with each_char to remove empty strings and improve readability.

https://github.com/ruby/psych/commit/5fe714b216

[ruby/psych] Bump up v5.1.1.1

2023-10-16T11:55:01+00:00

https://github.com/ruby/psych/commit/51cc86ff3f

[ruby/psych] Bump up v5.1.1

2023-10-11T06:13:53+00:00

https://github.com/ruby/psych/commit/f306512d60

[ruby/psych] Update SnakeYAML Engine to 2.7

2023-10-02T02:47:36+00:00

https://github.com/ruby/psych/commit/094c811588

[ruby/psych] Extract accessor methods without forwardable

2023-07-05T10:11:36+00:00

  We should leave additional dependency if we leave from them.

https://github.com/ruby/psych/commit/3d0325a774

[ruby/psych] Remove private methods unused since #487

2023-07-01T15:30:21+00:00

https://github.com/ruby/psych/commit/902c292f26

[ruby/psych] Bump version to 5.1 for release

2023-02-07T12:25:44+00:00

This version primarily updates the JRuby extension to use
SnakeYAML Engine, a newer version of the SnakeYAML library, which
also updates YAML support to 1.2. The JRuby extension now also
exposes settings for the parser.

https://github.com/ruby/psych/commit/6f2b16b343

Initial move to SnakeYAML Engine

2023-01-31T04:14:05+00:00

See jruby/jruby#7570 for some of the justification for this move. We only
require the parser from SnakeYAML, but in the original form it is
encumbered with Java object serialization code that keeps getting
flagged as a CVE risk. We disagree with the assessment, at least
as it pertains to JRuby (we do not use the code in question) but
our inclusion of the library continues to get flagged by auditing
tools.

This commit starts the process of moving to the successor library,
SnakeYAML Engine. The parser API is largely unchanged, except as
seen in this commit. No Java exceptions are thrown, but a number
of Psych tests fail (possibly due to Engine being YAML 1.2 only).