jq/jq.changes

-------------------------------------------------------------------
Wed Dec 13 20:28:23 UTC 2023 - Martin Hauke <mardnh@gmx.de>

- Update to version 1.7.1
  Security
  * Fix CVE-2023-50246 (boo#1218034)
    + Fix heap buffer overflow in jvp_literal_number_literal.
  * Fix CVE-2023-50268 (boo#1218038)
      fix stack-buffer-overflow if comparing nan with payload.
  CLI changes
  * Make the default background color more suitable for bright
    backgrounds.
  * Allow passing the inline jq script after --.
  * Fix possible uninitialised value dereference if jq_init() fails
  Language changes
  * Simplify paths/0 and paths/1.
  * Reject U+001F in string literals.
  * Remove unused nref accumulator in block_bind_library.
  * Remove a bunch of unused variables, and useless assignments.
  * main.c: Remove unused EXIT_STATUS_EXACT option.
  * Actually use the number correctly casted from double to int as
    index.
  * src/builtin.c: remove unnecessary jv_copy-s in
    type_error/type_error2.
  * Remove undefined behavior caught by LLVM 10 UBSAN.
  * Convert decnum to binary64 (double) instead of decimal64.
    This makes jq behave like the JSON specification suggests and
    more similar to other languages.
  * Fix memory leaks on invalid input for ltrimstr/1 and
    rtrimstr/1.
  * Fix memory leak on failed get for setpath/2.
  * Fix nan from json parsing also for nans with payload that 
    start with 'n'.
  * Allow carriage return characters in comments.
  Documentation changes
  * Generate links in the man page.
  libjq
  * Add extern C for C++.

-------------------------------------------------------------------
Wed Nov 15 10:26:07 UTC 2023 - Dirk Müller <dmueller@suse.com>

- build with valgrind only on 64 bit architectures

-------------------------------------------------------------------
Wed Sep 27 04:32:39 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>

- switch to bootstrapped upstream tarball to fix version output
  [boo#1215737]

-------------------------------------------------------------------
Thu Sep  7 13:42:19 UTC 2023 - Martin Hauke <mardnh@gmx.de>

- Update to version 1.7
  * Make object key color configurable using JQ_COLORS environment
    variable.
  * Change the default color of null to Bright Black.
  * Respect NO_COLOR environment variable to disable color output.
  * Improved --help output. Now mentions all options and nicer
    order.
  * Fix multiple issues of exit code using --exit-code/-e option.
  * Add --raw-output0 for NUL (zero byte) separated output.
  * Fix assert crash and validate JSON for --jsonarg.
  * Remove deprecated --argfile option.
  Language changes
  * Use decimal number literals to preserve precision. Comparison
    operations respects precision but arithmetic operations might
    truncate.
  * Adds new builtin pick(stream) to emit a projection of the
    input object or array.
  * Adds new builtin debug(msgs) that works like debug but applies
    a filter on the input before writing to stderr.
  * Adds new builtin scan($re; $flags). Was documented but not
    implemented.
  * Adds new builtin abs to get absolute value. This potentially
    allows the literal value of numbers to be preserved as length
    and fabs convert to float.
  * Allow if without else-branch. When skipped the else-branch
    will be . (identity).
  * Allow use of $binding as key in object literals.
  * Allow dot between chained indexes when using .["index"]
  * Allow dot for chained value iterator .[], .[]?
  * Fix try/catch catches more than it should.
  * Speed up and refactor some builtins, also remove
    scalars_or_empty/0.
  * Now halt and halt_error exit immediately instead of continuing
    to the next input.
  * Fix issue converting string to number after previous convert
    error.
  * Fix issue representing large numbers on some platforms causing
    invalid JSON output.
  * Fix deletion using assigning empty against arrays.
  * Allow keywords to be used as binding name in more places.
  * Allow using nan as NaN in JSON.
  * Expose a module's function names in modulemeta.
  * Fix contains/1 to handle strings with NUL.
  * Fix stderr/0 to output raw text without any decoration.
  * Fix nth/2 to emit empty on index out of range.
  * Fix implode to not assert and instead replace invalid unicode
    codepoints.
  * Fix indices/1 and rindex/1 in case of overlapping matches in
    strings.
  * Fix sub/3 to resolve issues involving global search-and-replace
    (gsub) operations.
  * Fix empty regular expression matches.
  * Fix overflow exception of the modulo operator.
  * Fix string multiplication by 0 (and less than 1) to emit empty
    string.
  * Fix segfault when using libjq and threads.
  * Fix constant folding of division and reminder with zero
    divisor.
  * Fix error/0, error/1 to throw null error.
  * Simpler and faster transpose.
  * Simple and efficient implementation of walk/1.
  * Remove deprecated filters leaf_paths, recurse_down.
- Adjust URL/Source - new upstream
  https://github.com/stedolan/jq -> https://github.com/jqlang

-------------------------------------------------------------------
Fri Sep 23 16:16:46 UTC 2022 - Dirk Müller <dmueller@suse.com>

- build without valgrind on riscv64 - does not exist (yet)

-------------------------------------------------------------------
Thu Jul  4 17:27:13 UTC 2019 - myen@suse.com

- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904

-------------------------------------------------------------------
Fri Nov  2 12:35:25 UTC 2018 - Avindra Goolcharan <aavindraa@gmail.com>

- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)

-------------------------------------------------------------------
Fri Feb  3 09:26:17 UTC 2017 - idonmez@suse.com

- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176

-------------------------------------------------------------------
Mon Jan  2 08:47:00 UTC 2017 - mpluskal@suse.com

- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions

-------------------------------------------------------------------
Sat Jul 16 10:14:33 UTC 2016 - mpluskal@suse.com

- Make building more verbose
- Run tests

-------------------------------------------------------------------
Mon Apr 25 11:48:27 UTC 2016 - idonmez@suse.com

- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992

-------------------------------------------------------------------
Tue Aug 18 09:12:21 UTC 2015 - idonmez@suse.com

- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support

-------------------------------------------------------------------
Fri Jun 27 09:55:52 UTC 2014 - idonmez@suse.com

- Don't package static libs
- Fix rpath on the main binary

-------------------------------------------------------------------
Sun Jun 15 20:52:42 UTC 2014 - prusnak@opensuse.org

- Updated to 1.4
   + New command line arguments
     * jq --arg-file variable file
     * jq --unbuffered
     * jq -e / --exit-status (set exit status based on outputs)
     * jq -S / --sort-keys (now jq no longer sorts object keys by
      default
   + Syntax changes
     * .. -> like // in XPath (recursive traversal)
     * question mark (e.g., .a?) to suppress errors
     * ."foo" syntax (equivalent to .["foo"])
     * better error handling for .foo
     * added % operator (modulo)
     * allow negation without requiring extra parenthesis
     * more function arguments (up to six)
   + New filters
     * any, all
     * iterables, arrays, objects, scalars, nulls, booleans,
       numbers, strings, values
   + New string built-ins
     * split
     * join (join an array of strings with a given separator string)
     * ltrimstr, rtrimstr
     * startswith, endswith
     * explode, implode
     * fromjson, tojson
     * index, rindex, indices
   + New math functions
     * floor, sqrt, cbrt, etc.
   + Addition of libjq, a C API interface to jq's JSON representation
     and for running jq programs from C applications.


-------------------------------------------------------------------
Thu Oct 17 15:55:03 UTC 2013 - cdenicolo@suse.com

- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0

-------------------------------------------------------------------
Tue Oct  1 15:09:01 UTC 2013 - robert.munteanu@gmail.com

- Initial packaging of version 1.3