dependabot[bot]
1a394919f9
build(deps): bump the docker-actions group with 5 updates ( #3506 )
2026-03-09 20:50:20 +09:00
itchyny
4b145b3a58
Group Docker actions updates in dependabot config
2026-03-09 17:34:16 +09:00
dependabot[bot]
03a269b2f7
build(deps): bump crazy-max/ghaction-import-gpg from 6 to 7 ( #3501 )
2026-03-09 17:31:28 +09:00
Scott Seal
3985b80ce5
Fix use-after-free in args2obj() array argument path ( #3498 )
...
Copy `kk` and `vk` before passing to jv_object_get(), which consumes
its arguments. Without copies, subsequent loop iterations read freed
memory (CWE-416) and post-loop jv_free() double-frees (CWE-415).
This bug was introduced in `b279713e` when array processing was hoisted
out of
the loop into locals without accounting for jv_object_get() semantics.
Fixes GHSA-gf4g-95wj-4q4r.
2026-03-09 17:30:08 +09:00
itchyny
3cd7e0da00
Fix crash when importing a module with errors twice ( #3497 )
...
When a module fails to parse as a library, `load_library` cached the
invalid block. A second import/include of the same module would find
the cached invalid block and pass it to `block_bind_library`,
triggering the assertion failure. Skip caching the block when there
are parse errors to avoid this problem.
2026-03-06 15:32:29 +09:00
itchyny
ed3c7f214b
Fix tonumber and toboolean to reject strings with embedded null bytes ( #3496 )
2026-03-05 08:28:43 +09:00
itchyny
bfcf82fde1
Refactor @uri and @urid and fix multi-byte UTF-8 corruption ( #3495 )
...
This commit improves performance by refactoring `@uri` and `@urid`
to pre-alloacte buffers and build the `jv` string at the end.
Also, this fixes `@urid` to prevent multi-byte UTF-8 corruption,
and to preserve embedded null bytes.
2026-03-05 08:28:09 +09:00
dependabot[bot]
36b6ae00b1
build(deps): bump the official-actions group with 3 updates ( #3494 )
2026-03-03 15:36:54 +09:00
itchyny
0df54c888a
Fix infinite loop and undefined behavior in del(.[nan]) ( #3490 )
2026-03-02 21:58:28 +09:00
itchyny
262f0b81c1
Add missing validity check in f_strflocaltime after f_localtime ( #3491 )
2026-03-02 21:58:07 +09:00
itchyny
c3d3e7d656
Fix buttons in tutorial to toggle labels when clicked on ( #3493 )
2026-03-02 17:46:58 +09:00
dependabot[bot]
2beac1aed0
build(deps): bump markdown from 3.10 to 3.10.2 in /docs ( #3492 )
2026-03-01 16:06:09 +09:00
dependabot[bot]
2d5239e8c1
build(deps): bump jsonschema from 4.25.1 to 4.26.0 in /docs ( #3474 )
2026-03-01 16:04:55 +09:00
itchyny
601a37f452
Refactor tm2jv to handle fractional seconds removing duplicated code ( #3489 )
2026-03-01 06:18:14 +09:00
itchyny
750dbe723b
Fix memory leaks and double frees ( #3487 )
2026-03-01 06:15:58 +09:00
Fabian Fleischer
2ad99a6c70
Pre-allocate tokenbuf for string parser ( #3485 )
...
Fixes #3483
2026-02-28 15:45:16 +01:00
Fabian Fleischer
061fd14d74
Fix off-by-one in modulo operator ( #3486 )
2026-02-27 04:35:36 +09:00
itchyny
22361cfb87
Improve error message truncation with closing delimiters ( #3478 )
...
Truncated strings now show closing delimiters: `..."` for strings,
`...]` for arrays, and `...}` for objects, making error messages
clearer.
2026-02-25 08:14:23 +09:00
Ze Sheng
a2741ee0a8
Limit number of function parameters and definitions to prevent SEGV ( #3460 )
2026-02-25 07:49:40 +09:00
itchyny
b33a7634ba
Fix reversed pointer subtraction in f_env bounds check ( #3465 )
2026-01-20 21:56:09 +09:00
itchyny
d44baeb67a
Support arm/v7 architecture in Docker images ( #3463 )
2026-01-15 14:10:07 +09:00
dependabot[bot]
ea9e41f758
build(deps): bump the official-actions group with 2 updates ( #3450 )
2025-12-17 11:24:39 +09:00
dependabot[bot]
f46dc3dd61
build(deps): bump markdown from 3.9 to 3.10 in /docs ( #3442 )
2025-12-17 11:24:12 +09:00
José Joaquín Atria
88b9c4920e
Fix stder typo ( #3446 )
...
The manual was missing an "r" in "stderr".
2025-12-12 10:54:39 +01:00
bigmoonbit
0eb3da11ed
chore: fix typo in tests/jq.test ( #3441 )
...
fix typo in tests/jq.test
Signed-off-by: bigmoonbit <bigmoonbit@outlook.com >
2025-11-27 10:44:45 +01:00
dependabot[bot]
39572e129f
build(deps): bump actions/checkout from 5 to 6 in the official-actions group ( #3439 )
2025-11-24 15:15:18 +09:00
Jan-Piet Mens
4829059147
Add missing word in manual for rawfile ( #3434 )
2025-11-18 09:49:59 +09:00
itchyny
33b3a68f9c
Fix expected value assertion ( fix #3430 , ref #3393 ) ( #3431 )
2025-11-04 21:21:21 +09:00
Mattias Wadman
cff4e00982
website: Add wiki link to navigation bar ( #3424 )
...
Related to #3423
2025-10-31 10:17:25 +01:00
itchyny
5529788292
Fix slurping raw input not to corrupt multi-byte characters ( fix #3389 ) ( #3421 )
2025-10-31 15:16:29 +09:00
dependabot[bot]
8d9a3c3ab3
build(deps): bump the official-actions group with 2 updates ( #3429 )
2025-10-27 16:48:33 +09:00
Ish Nagy
b29504b4e1
Increase the maximum printing depth from 256 to 10000 ( fixes #3413 ) ( #3414 )
2025-10-14 14:12:57 +09:00
Sudhakar Verma
589a6947fa
jq_fuzz_execute: limit oniguruma depth to 1024 ( #3377 )
...
Fixes #3375 - I'll also fix the oss-fuzz build for this in a PR
Signed-off-by: Sudhakar Verma <sudhakar.verma@canonical.com >
2025-10-05 12:50:42 +09:00
dependabot[bot]
c9c96b3cdd
build(deps): bump lxml from 6.0.1 to 6.0.2 in /docs ( #3416 )
2025-10-01 06:39:11 +00:00
dependabot[bot]
f240512140
build(deps): bump markdown from 3.8.2 to 3.9 in /docs ( #3418 )
2025-10-01 06:37:39 +00:00
dependabot[bot]
2b084a6d2d
build(deps): bump pyyaml from 6.0.2 to 6.0.3 in /docs ( #3417 )
2025-10-01 06:37:20 +00:00
A4-Tacks
169457328d
Fix rtrimstr("") always output "" ( #3415 )
...
Example
---
**Before this fix**:
```sh
$ jq -n '"foo"|rtrimstr("")'
""
```
**After this fix**:
```sh
$ jq -n '"foo"|rtrimstr("")'
"foo"
```
2025-09-29 17:15:43 +02:00
itchyny
c8017bf079
Fix localization test for time formatting functions ( fix #3368 ) ( #3409 )
2025-09-15 07:48:02 +09:00
itchyny
a4d9d54010
Fix expected value assertion for NaN value ( fix #3393 ) ( #3408 )
2025-09-15 07:47:51 +09:00
itchyny
695830c453
Fix year 2038 problem on 32-bit platforms ( fix #3369 ) ( #3407 )
2025-09-15 07:46:29 +09:00
Kartik Shah
cd3a4c3d31
Remove extra space from die func output ( #3391 )
2025-09-15 07:43:10 +09:00
dependabot[bot]
63c5f4e196
build(deps): bump the official-actions group with 2 updates ( #3405 )
2025-09-09 11:57:01 +00:00
dependabot[bot]
755ac61755
build(deps): bump jsonschema from 4.25.0 to 4.25.1 in /docs ( #3404 )
2025-09-05 12:02:28 +00:00
dependabot[bot]
68f9e0a7e1
build(deps): bump lxml from 6.0.0 to 6.0.1 in /docs ( #3403 )
2025-09-05 12:01:56 +00:00
dependabot[bot]
21471c5e3b
build(deps): bump the official-actions group across 1 directory with 3 updates ( #3401 )
2025-08-27 03:05:20 +00:00
dependabot[bot]
a8115e5bc9
build(deps): bump jsonschema from 4.24.0 to 4.25.0 in /docs ( #3382 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-04 21:12:16 +09:00
itchyny
0ff997f7c4
Update GPG signing key ( fix #3381 )
2025-07-31 23:00:24 +09:00
Dennis Ameling
4357b6154e
CI: add builds for Windows arm64 ( #3376 )
2025-07-27 08:23:57 +09:00
Alyssa Ross
3c5ceac8e7
jq.test: drop non-portable %F test ( #3365 )
...
%F is a non-portable GNU extension, not supported by all strptime
implementations (for example musl's).
2025-07-05 01:25:28 +09:00
itchyny
b9e19de76e
Update jq documentation for jq 1.8.1 release
2025-07-01 20:54:28 +09:00
dependabot[bot]