jawn v1.0.0-RC3 Release Notes
Release Date: 2020-01-11 // about 4 years ago-
๐ This release includes a fix by Daniel Strittmatter for a bug that resulted in invalid Unicode escape sequences in JSON strings being accepted by the parser (see #202 for details). This fix has also been backported to 0.14.x in 0.14.3.
It also includes a fix for a potential denial-of-service-attack vulnerability in jawn-ast (#221), reported by Andriy Plokhotnyuk in #220.
๐ There is one major set of breaking changes since 1.0.0-RC2 (#219), and a couple of small ones (see #214 and #218). We'll provide more information about migrating from 0.14.x in the 1.0.0 final release notes; in the meantime feel free to ask questions about updating in the Gitter channel.
๐ This is the first release that is cross-built for Dotty (specifically 0.21.0-RC1), although it isn't published for Dotty, since our goal is primarily to make sure that we're not doing anything that will be difficult to migrate to Scala 3. It should be possible to use the Scala 2 artifacts with any Dotty version via
withDottyCompat
. See #214 for the changes that were necessary to set up Dotty cross-building.๐ We've dropped support for Scala 2.11 in this release (see #217 for discussion). This release also updates the Play JSON version for the Play support module from 2.7.4 to 2.8.1 (#216).
If no major issues come up before then, we will publish Jawn 1.0.0 in one week (18 January 2020).