Skip to content

Releases: kivikakk/comrak

0.17.1

28 Mar 03:23
Compare
Choose a tag to compare

What's Changed

  • Fix some panics found by trivial fuzzing.

Full Changelog: 0.17.0...0.17.1

0.17.0

28 Mar 01:15
Compare
Choose a tag to compare

What's Changed

This contains some breaking changes from an API point of view, but output is largely unchanged. Spec compliance is improved, and benchmark runtime is over 20% faster.

  • SECURITY: GHSA-8hqf-xjwp-p67v / Quadratic runtime when parsing Markdown (GHSL-2023-047)
    • A variety of quadratic runtime issues that could lead to DoS were reported and addressed.
    • We replaced pest with an re2c-based scanner.
  • SECURITY: GHSA-xxmq-4vph-956w / Excessive output when parsing Markdown (GHSL-2023-048)
    • Reference output is limited to 100Kb.
  • SECURITY: GHSA-5r3x-p7xx-x6q5 / Attacker controlled data in AST nodes is not validated (GHSL-2023-049)
    • AST nodes no longer store raw Vec<u8>s, and instead store Strings.
  • Various API points were cleaned up.
  • Comrak now targets Rust 2018.
  • Add footnote attributes that mirror cmark-gfm by @digitalmoksha in #273
  • Add support for full_info_string render option by @digitalmoksha in #276
  • chore: improve debug performance by @conradludgate in #283

Many thanks to @philipturnbull and @darakian of the GitHub Security Lab for bringing these issues to my attention and detailing the reproduction steps for each case.

New Contributors

Full Changelog: 0.16.0...0.17.0

0.16.0

25 Jan 04:42
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: 0.15.0...0.16.0

0.15.0

14 Nov 04:19
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: 0.14.0...0.15.0

crates.io: https://crates.io/crates/comrak/0.15.0

0.14.0

12 Jul 22:06
Compare
Choose a tag to compare

What's Changed

New Contributors

Full Changelog: 0.13.2...0.14.0

crates.io: https://crates.io/crates/comrak/0.14.0

0.13.2

04 Jul 03:35
Compare
Choose a tag to compare

Changes since last release (0.13.1...0.13.2)

  • Fix Windows build.

On crates.io: https://crates.io/crates/comrak/0.13.2

0.13.1

26 Jun 05:34
Compare
Choose a tag to compare

Changes since last release (0.13.0...0.13.1)

  • Support compiling for WASM. (#222, Ben Wishoshavich)
  • Replace deprecated twoway dependency. (#224)

On crates.io: https://crates.io/crates/comrak/0.13.1

Windows build includes c465cb5.

0.13.0

06 Jun 23:11
Compare
Choose a tag to compare

Changes since last release (0.12.1...0.13.0)

  • SECURITY: Bump regex to 1.5.5. (#221, Dependabot)
  • Drop unneeded YAML dependency from Syntect. (#199, Chris Wong)
  • Match newline handling in code inlines to upstream, and improve test failure reporting. (#210, Michael Anderson)
  • Make all node value fields public. (#216, Evan Schwartz)
  • Line break handling adjustments. (#214, Michael Anderson)
  • Disable control characters in link definitions. (#219, Michael Anderson)

On crates.io: https://crates.io/crates/comrak/0.13.0

0.12.1

08 Sep 10:26
Compare
Choose a tag to compare

Changes since last release (0.12.0...0.12.1)

  • Only load syntax and theme sets once, on Syntect plugin instantiation. (#197)
  • Match syntax highlighting language names more loosely. (#198)

On crates.io: https://crates.io/crates/comrak/0.12.1

0.12.0

02 Sep 07:38
Compare
Choose a tag to compare

Changes since last release (0.11.0...0.12.0)

  • Add pluggable syntax highlighting, and default implementation with syntect. (Daniel Simon, #194)

On crates.io: https://crates.io/crates/comrak/0.12.0