- Update to version 1.8.1
Security fixes
* CVE-2025-49014: Fix heap use after free in f_strftime,
f_strflocaltime.
* GHSA-f946-j5j2-4w5m: Fix stack overflow in node_min_byte_len
of oniguruma.
CLI changes
* Fix assertion failure when syntax error happens at the end of
the query.
Language changes
* Revert the change of reduce/foreach state variable in 1.8.0.
* This change was reverted due to serious performance regression. (forwarded request 1289560 from mnhauke)
OBS-URL: https://build.opensuse.org/request/show/1289769
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/jq?expand=0&rev=20
- Update to version 1.8.1
Security fixes
* CVE-2025-49014: Fix heap use after free in f_strftime,
f_strflocaltime.
* GHSA-f946-j5j2-4w5m: Fix stack overflow in node_min_byte_len
of oniguruma.
CLI changes
* Fix assertion failure when syntax error happens at the end of
the query.
Language changes
* Revert the change of reduce/foreach state variable in 1.8.0.
* This change was reverted due to serious performance regression.
OBS-URL: https://build.opensuse.org/request/show/1289560
OBS-URL: https://build.opensuse.org/package/show/utilities/jq?expand=0&rev=42
- Update to version 1.8.0
Security fixes
* CVE-2024-23337: Fix signed integer overflow in jvp_array_write
and jvp_object_rehash.
* CVE-2024-53427: Reject NaN with payload while parsing JSON.
* CVE-2025-48060: Fix heap buffer overflow in jv_string_vfmt.
* Fix use of uninitialized value in check_literal.
* Fix segmentation fault on strftime/1, strflocaltime/1.
* Fix unhandled overflow in @base64d.
CLI changes
* Fix --indent 0 implicitly enabling --compact-output.
* Improve error messages to show problematic position in the
filter.
* Include column number in parser and compiler error messages.
* Fix error message for string literal beginning with single
quote.
* Improve JQ_COLORS environment variable to support larger
escapes like truecolor.
* Add --library-path long option for -L.
* Fix --slurp --stream when input has no trailing newline
character.
* Fix --indent option to error for malformed values.
* Fix option parsing of --binary on non-Windows platforms.
* Fix issue with ~/.jq on Windows where $HOME is not set.
* Increase the maximum parsing depth for JSON to 10000.
* Parse short options in order given.
* Consistently reset color formatting.
New functions
* Add trim/0, ltrim/0 and rtrim/0 to trim leading and trailing
white spaces.
OBS-URL: https://build.opensuse.org/request/show/1286713
OBS-URL: https://build.opensuse.org/package/show/utilities/jq?expand=0&rev=40
- Update to version 1.7
* Make object key color configurable using JQ_COLORS environment
variable.
* Change the default color of null to Bright Black.
* Respect NO_COLOR environment variable to disable color output.
* Improved --help output. Now mentions all options and nicer
order.
* Fix multiple issues of exit code using --exit-code/-e option.
* Add --raw-output0 for NUL (zero byte) separated output.
* Fix assert crash and validate JSON for --jsonarg.
* Remove deprecated --argfile option.
Language changes
* Use decimal number literals to preserve precision. Comparison
operations respects precision but arithmetic operations might
truncate.
* Adds new builtin pick(stream) to emit a projection of the
input object or array.
* Adds new builtin debug(msgs) that works like debug but applies
a filter on the input before writing to stderr.
* Adds new builtin scan($re; $flags). Was documented but not
implemented.
* Adds new builtin abs to get absolute value. This potentially
allows the literal value of numbers to be preserved as length
and fabs convert to float.
* Allow if without else-branch. When skipped the else-branch
will be . (identity).
* Allow use of $binding as key in object literals.
* Allow dot between chained indexes when using .["index"]
* Allow dot for chained value iterator .[], .[]?
* Fix try/catch catches more than it should.
OBS-URL: https://build.opensuse.org/request/show/1109563
OBS-URL: https://build.opensuse.org/package/show/utilities/jq?expand=0&rev=26
- Update to version 1.6
* Destructuring Alternation
* many new builtins (see docs)
* Add support for ASAN and UBSAN
* Make it easier to use jq with shebangs
* Add $ENV builtin variable to access environment
* Add JQ_COLORS env var for configuring the output colors
* change: Calling jq without a program argument now always assumes
"." for the program, regardless of stdin/stdout
* fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)
OBS-URL: https://build.opensuse.org/request/show/646096
OBS-URL: https://build.opensuse.org/package/show/utilities/jq?expand=0&rev=19