jawn v1.0.0-RC3 Release Notes

Release Date: 2020-01-11 // about 4 years ago
  • ๐Ÿš€ This release includes a fix by Daniel Strittmatter for a bug that resulted in invalid Unicode escape sequences in JSON strings being accepted by the parser (see #202 for details). This fix has also been backported to 0.14.x in 0.14.3.

    It also includes a fix for a potential denial-of-service-attack vulnerability in jawn-ast (#221), reported by Andriy Plokhotnyuk in #220.

    ๐Ÿš€ There is one major set of breaking changes since 1.0.0-RC2 (#219), and a couple of small ones (see #214 and #218). We'll provide more information about migrating from 0.14.x in the 1.0.0 final release notes; in the meantime feel free to ask questions about updating in the Gitter channel.

    ๐Ÿš€ This is the first release that is cross-built for Dotty (specifically 0.21.0-RC1), although it isn't published for Dotty, since our goal is primarily to make sure that we're not doing anything that will be difficult to migrate to Scala 3. It should be possible to use the Scala 2 artifacts with any Dotty version via withDottyCompat. See #214 for the changes that were necessary to set up Dotty cross-building.

    ๐Ÿš€ We've dropped support for Scala 2.11 in this release (see #217 for discussion). This release also updates the Play JSON version for the Play support module from 2.7.4 to 2.8.1 (#216).

    If no major issues come up before then, we will publish Jawn 1.0.0 in one week (18 January 2020).