------------------------------------------------------------------- Mon Feb 16 11:44:51 UTC 2026 - msuchanek@suse.de - Update to version 20250913+git83.bc629c8 (upstream git snapshot + cherry-picked fixes): * Fix heap buffer overflow via side-effects in js_typed_array_constructor * Fix heap buffer overflow in js_typed_array_constructor_ta (bsc#1256914 CVE-2026-1145) * Add tests for OOB access in atomic ops * Fix use-after-free in Atomics operations with resizable ArrayBuffers (bsc#1256911 CVE-2026-1144) * \x{N} is a syntax error * slightly faster lexical variable assignment * Don't call well-known Symbol methods for RegExp on primitive values * removed use after free in js_create_module_bytecode_function() (#467) * removed memory leak in case of error in cpool_add() (#468) * fixed fast array extension optimization when there are multiple realms * added regexp duplicate named groups - fixed reset of captures with quantizers * updated to unicode 17.0.0 - updated test262 version * fixed Worker freeing logic (#462) * - optimized Regexp.prototype.exec - optimized String.prototype.replace - optimized 'arguments' object creation - optimized access to non strict 'arguments' elements * faster and simpler implementation of regexp backtracking * fixed BJSON array serialization (#457) * Added Iterator.concat (initial patch by bnoordhuis) * optimized add/sub int32 overflow * added error checking in JS_InstantiateFunctionListItem() * Closure optimization * Restore a mistakenly removed goto on error in js_build_module_ns() (igorburago) * fixed JS_PROP_AUTOINIT handling in js_closure_define_global_var() (#455) * fixed exception handling in put_var operation (regression introduced by commit a6816be) (#454) * More informative "not a constructor" error message (initial patch by bnoordhuis) (#368) * Fix length check in ArrayBuffer.prototype.slice (bnoordhuis) (#451) * fixed DataView resizing * qjs: added --strict option * Much faster destructuring at the expense of a slight incompatibility with the spec when direct evals are present (v8 behaves the same way). * fixed operation order in Regexp constructor * changed module rejection order according to spec change * optimized Array.prototype.push * added js_string_eq() * fixed argument evaluation order in Date constructor and Date.UTC() * faster and safer dbuf functions (#443) * Faster context creation and exception checks in JS_NewContext (#404) * faster appending of elements in arrays * optimized string_buffer_putc() * optimized post_inc and post_dec * optimized array access * optimized global variable access * optimize the create of arrays * Improve error handling in Promise.withResolvers (bnoordhuis) * fixed Date parsing: "1997-03-08 11:19:10-0700" is a valid date and "1997-03-08T11:19:10-07" should yield an error * added Math.sumPrecise() * added Map and WeakMap upsert methods (bnoordhuis) * - added Atomics.pause (bnoordhuis) * - added resizable array buffers (bnoordhuis) * fixed parsing of computed property name * - added ArrayBuffer.prototype.transfer (Divy Srivastava) * added the Iterator object * added set methods (bnoordhuis) * removed memory leak (#441) ------------------------------------------------------------------- Fri Feb 6 01:23:13 UTC 2026 - Avindra Goolcharan - ship libquickjs in devel, qjsc works now ------------------------------------------------------------------- Tue Nov 18 01:35:26 UTC 2025 - Avindra Goolcharan - update to 2025-09-13: * added JSON modules and import attributes * added JS_PrintValue() API * qjs: pretty print objects in print() and console.log() * qjs: better promise rejection tracker heuristics * added RegExp v flag * added RegExp modifiers * added RegExp.escape * added Float16Array * added Promise.try * improved JSON parser spec conformance * qjs: improved compatibility of std.parseExtJSON() with JSON5 and accept JSON5 modules * added JS_FreePropertyEnum() and JS_AtomToCStringLen() API * added Error.isError() * misc bug fixes ------------------------------------------------------------------- Wed Jun 18 00:26:00 UTC 2025 - Avindra Goolcharan - update to 2025-04-26: * removed the bignum extensions and qjscalc to simplify the code. The BFCalc calculator (web version) can be used as a replacement for qjscalc. * new BigInt implementation optimized for small numbers * added WeakRef, FinalizationRegistry and symbols as weakrefs * added builtin float64 printing and parsing functions for more correctness * faster repeated string concatenation * qjs: promise unhandled rejections are fatal errors by default * added column number in debug information * removed the "use strip" extension * qjs: added -s and --strip-source options * qjsc: added -s and --keep-source options * added JS_GetAnyOpaque() * added more callbacks for exotic objects in JSClassExoticMethods * misc bug fixes ------------------------------------------------------------------- Fri Feb 9 23:22:54 UTC 2024 - Avindra Goolcharan - update to 2024-01-13: * top-level-await support in modules * allow 'await' in the REPL * added Array.prototype.{with,toReversed,toSpliced,toSorted} and TypedArray.prototype.{with,toReversed,toSorted} * added String.prototype.isWellFormed and String.prototype.toWellFormed * added Object.groupBy and Map.groupBy * added Promise.withResolvers * class static block * 'in' operator support for private fields * optional chaining fixes * added RegExp 'd' flag * fixed RegExp zero length match logic * fixed RegExp case insensitive flag * added os.getpid() and os.now() * added cosmopolitan build * misc bug fixes - includes changes from 2023-12-09: * added Object.hasOwn, {String|Array|TypedArray}.prototype.at, {Array|TypedArray}.prototype.findLast{Index} * BigInt support is enabled even if CONFIG_BIGNUM disabled * updated to Unicode 15.0.0 * misc bug fixes ------------------------------------------------------------------- Thu Apr 6 17:32:39 UTC 2023 - Michal Suchanek - Requires at least gcc 7 to get stdatomic.h ------------------------------------------------------------------- Sat Mar 27 19:38:00 UTC 2021 - Avindra Goolcharan - update to 2021-03-27: * faster Array.prototype.push and Array.prototype.unshift * added JS_UpdateStackTop() * fixed Windows console * misc bug fixes ------------------------------------------------------------------- Mon Nov 23 20:50:09 UTC 2020 - Avindra Goolcharan - update to 2020-11-08: * improved function parameter initializers * added std.setenv(), std.unsetenv() and std.getenviron() * added JS_EvalThis() * misc bug fixes - includes 2020-09-06: * added logical assignment operators * added IsHTMLDDA support * faster for-of loops * os.Worker now takes a module filename as parameter * qjsc: added -D option to compile dynamically loaded modules or workers * misc bug fixes - includes 2020-07-05: * modified JS_GetPrototype() to return a live value * REPL: support unicode characters larger than 16 bits * added os.Worker * improved object serialization * added std.parseExtJSON * misc bug fixes - add qjscalc binary - pass optflags to build - cleanup build steps - cleanup description ------------------------------------------------------------------- Sat May 16 16:16:45 UTC 2020 - Duncan Mac-Vicar - Initial package