Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package perl-Cpanel-JSON-XS for 
openSUSE:Factory checked in at 2025-09-09 20:30:17
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/perl-Cpanel-JSON-XS (Old)
 and      /work/SRC/openSUSE:Factory/.perl-Cpanel-JSON-XS.new.1977 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "perl-Cpanel-JSON-XS"

Tue Sep  9 20:30:17 2025 rev:41 rq:1303255 version:4.400.0

Changes:
--------
--- /work/SRC/openSUSE:Factory/perl-Cpanel-JSON-XS/perl-Cpanel-JSON-XS.changes  
2025-01-12 11:20:41.270551411 +0100
+++ 
/work/SRC/openSUSE:Factory/.perl-Cpanel-JSON-XS.new.1977/perl-Cpanel-JSON-XS.changes
        2025-09-09 20:30:48.526651628 +0200
@@ -1,0 +2,12 @@
+Mon Sep  8 17:01:48 UTC 2025 - Tina Müller <[email protected]>
+
+- updated to 4.400.0 (4.40)
+   see /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes
+
+  4.40 2025-09-07 (rurban)
+  - Fix CVE-2025-40929 overflow with overlong numbers, fuzzing only.
+  - Detect more malformed numbers, with two decimal points.
+  - Pin github actions to latest @v via pinact run -u
+  (bsc#1249331)
+
+-------------------------------------------------------------------

Old:
----
  Cpanel-JSON-XS-4.39.tar.gz

New:
----
  Cpanel-JSON-XS-4.40.tar.gz
  README.md
  _scmsync.obsinfo
  build.specials.obscpio

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ perl-Cpanel-JSON-XS.spec ++++++
--- /var/tmp/diff_new_pack.WKkL2c/_old  2025-09-09 20:30:49.090675397 +0200
+++ /var/tmp/diff_new_pack.WKkL2c/_new  2025-09-09 20:30:49.090675397 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package perl-Cpanel-JSON-XS
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,15 +18,16 @@
 
 %define cpan_name Cpanel-JSON-XS
 Name:           perl-Cpanel-JSON-XS
-Version:        4.390.0
+Version:        4.400.0
 Release:        0
-# 4.39 -> normalize -> 4.390.0
-%define cpan_version 4.39
+# 4.40 -> normalize -> 4.400.0
+%define cpan_version 4.40
 License:        Artistic-1.0 OR GPL-1.0-or-later
 Summary:        CPanel fork of JSON::XS, fast and correct serializing
 URL:            https://metacpan.org/release/%{cpan_name}
 Source0:        
https://cpan.metacpan.org/authors/id/R/RU/RURBAN/%{cpan_name}-%{cpan_version}.tar.gz
 Source1:        cpanspec.yml
+Source100:      README.md
 BuildRequires:  perl
 BuildRequires:  perl-macros
 BuildRequires:  perl(Time::Piece)
@@ -51,7 +52,7 @@
 and vice versa.
 
 %prep
-%autosetup  -n %{cpan_name}-%{cpan_version}
+%autosetup -n %{cpan_name}-%{cpan_version} -p1
 
 find . -type f ! -path "*/t/*" ! -name "*.pl" ! -path "*/bin/*" ! -path 
"*/script/*" ! -path "*/scripts/*" ! -name "configure" -print0 | xargs -0 chmod 
644
 

++++++ Cpanel-JSON-XS-4.39.tar.gz -> Cpanel-JSON-XS-4.40.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.39/.github/workflows/testsuite.yml 
new/Cpanel-JSON-XS-4.40/.github/workflows/testsuite.yml
--- old/Cpanel-JSON-XS-4.39/.github/workflows/testsuite.yml     2024-07-04 
12:37:35.000000000 +0200
+++ new/Cpanel-JSON-XS-4.40/.github/workflows/testsuite.yml     2025-09-08 
13:53:39.000000000 +0200
@@ -19,10 +19,10 @@
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # 
v5.0.0
       - run: perl -V
       - name: install cpan deps
-        uses: perl-actions/[email protected]
+        uses: 
perl-actions/install-with-cpm@8b1a9840b26cc3885ae2889749a48629be2501b0 # v1.9
         with:
           install: |
             Data::Dumper
@@ -64,7 +64,8 @@
       matrix:
         perl-version:
           [
-            #"5.40",
+            "5.42",
+            "5.40",
             "5.38",
             "5.36",
             "5.34",
@@ -84,13 +85,13 @@
           ]
 
     steps:
-      - uses: actions/checkout@v1
-      - uses: shogo82148/actions-setup-perl@v1
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # 
v5.0.0
+      - uses: 
shogo82148/actions-setup-perl@5796a908661aa68fc0a5b8f55c6791af2376d72e # v1.35.0
         with:
           perl-version: ${{ matrix.perl-version }}
       - run: perl -V
       - name: install cpan deps
-        uses: perl-actions/[email protected]
+        uses: 
perl-actions/install-with-cpm@8b1a9840b26cc3885ae2889749a48629be2501b0 # v1.9
         with:
           sudo: false
           install: |
@@ -117,7 +118,7 @@
         perl-version: [latest]
 
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # 
v5.0.0
       - run: perl -V
       - run: perl Makefile.PL
       - run: make test
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.39/Changes 
new/Cpanel-JSON-XS-4.40/Changes
--- old/Cpanel-JSON-XS-4.39/Changes     2024-12-12 22:14:18.000000000 +0100
+++ new/Cpanel-JSON-XS-4.40/Changes     2025-09-08 13:53:39.000000000 +0200
@@ -2,6 +2,11 @@
 
 TODO: http://stevehanov.ca/blog/index.php?id=104 compression
 
+4.40 2025-09-07 (rurban)
+       - Fix CVE-2025-40929 overflow with overlong numbers, fuzzing only.
+       - Detect more malformed numbers, with two decimal points.
+       - Pin github actions to latest @v via pinact run -u
+
 4.39 2024-12-12 (rurban)
         - Fix Windows -Dusequadmath (sisyphus GH #235, GH #229)
         - Fix inconsistent behavior between decoding escaped and unescaped
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.39/META.json 
new/Cpanel-JSON-XS-4.40/META.json
--- old/Cpanel-JSON-XS-4.39/META.json   2024-12-12 22:14:40.000000000 +0100
+++ new/Cpanel-JSON-XS-4.40/META.json   2025-09-08 16:00:51.000000000 +0200
@@ -4,7 +4,7 @@
       "Reini Urban <[email protected]>"
    ],
    "dynamic_config" : 0,
-   "generated_by" : "ExtUtils::MakeMaker version 7.70, CPAN::Meta::Converter 
version 2.150010",
+   "generated_by" : "ExtUtils::MakeMaker version 7.76, CPAN::Meta::Converter 
version 2.150010",
    "license" : [
       "perl_5"
    ],
@@ -100,7 +100,7 @@
          "url" : "https://github.com/rurban/Cpanel-JSON-XS";
       }
    },
-   "version" : "4.39",
+   "version" : "4.40",
    "x_contributors" : [
       "Ashley Willis <[email protected]>",
       "Chip Salzenberg <[email protected]>",
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.39/META.yml 
new/Cpanel-JSON-XS-4.40/META.yml
--- old/Cpanel-JSON-XS-4.39/META.yml    2024-12-12 22:14:40.000000000 +0100
+++ new/Cpanel-JSON-XS-4.40/META.yml    2025-09-08 16:00:50.000000000 +0200
@@ -22,7 +22,7 @@
   Config: '0'
   ExtUtils::MakeMaker: '0'
 dynamic_config: 0
-generated_by: 'ExtUtils::MakeMaker version 7.70, CPAN::Meta::Converter version 
2.150010'
+generated_by: 'ExtUtils::MakeMaker version 7.76, CPAN::Meta::Converter version 
2.150010'
 license: perl
 meta-spec:
   url: http://module-build.sourceforge.net/META-spec-v1.4.html
@@ -48,7 +48,7 @@
   bugtracker: https://github.com/rurban/Cpanel-JSON-XS/issues
   license: http://dev.perl.org/licenses/
   repository: https://github.com/rurban/Cpanel-JSON-XS
-version: '4.39'
+version: '4.40'
 x_contributors:
   - 'Ashley Willis <[email protected]>'
   - 'Chip Salzenberg <[email protected]>'
@@ -74,4 +74,4 @@
   - 'Sergey Aleynikov <[email protected]>'
   - 'Syohei Yoshida <[email protected]>'
   - 'tevfik1903 <[email protected]>'
-x_serialization_backend: 'CPAN::Meta::YAML version 0.018'
+x_serialization_backend: 'CPAN::Meta::YAML version 0.020'
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.39/Makefile.PL 
new/Cpanel-JSON-XS-4.40/Makefile.PL
--- old/Cpanel-JSON-XS-4.39/Makefile.PL 2024-12-12 21:46:17.000000000 +0100
+++ new/Cpanel-JSON-XS-4.40/Makefile.PL 2025-09-08 15:31:58.000000000 +0200
@@ -196,7 +196,41 @@
 README : \$(VERSION_FROM)
        pod2text \$(VERSION_FROM) > README
 
+release-test : xtest dist
+       if test \"\$(shell git rev-parse --abbrev-ref HEAD)\" != \"master\" || 
\\
+           test \"\$(shell git diff --raw)\" != \"\" || \\
+           test \"\$(shell git diff --cached --raw)\" != \"\" ; then \\
+          echo 'You are not on a clean master branch, aborting.'; \\
+          exit 1; \\
+       fi
+       if test \"\$(shell git ls --show-signature -n 1 | head -n2 | tail -n1 | 
cut -c1-5)\" != \"gpg: \" ; then \\
+            echo 'need git commit with -S'; \\
+            exit 1; \\
+       fi
+       if test \"\$(shell git ls --no-show-signature -n 1 | head -n5 | tail 
-n1 | cut -c5-11)\" != \"Release\" ; then \\
+            echo 'need git commit with -m Release'; \\
+            exit 1; \\
+       fi
+       echo -git tag -f \$(VERSION)
+       echo cpan-upload \$(DISTVNAME).tar\$(SUFFIX)
+       echo git push
+       echo git push --tags
+
 release : xtest dist
+       if test \"\$(shell git rev-parse --abbrev-ref HEAD)\" != \"master\" || 
\\
+           test \"\$(shell git diff --raw)\" != \"\" || \\
+           test \"\$(shell git diff --cached --raw)\" != \"\" ; then \\
+          echo 'You are not on a clean master branch, aborting.'; \\
+          exit 1; \\
+       fi
+       if test \"\$(shell git ls --show-signature -n 1 | head -n2 | tail -n1 | 
cut -c1-5)\" != \"gpg: \" ; then \\
+            echo 'need git commit with -S'; \\
+            exit 1; \\
+       fi
+       if test \"\$(shell git ls --no-show-signature -n 1 | head -n5 | tail 
-n1 | cut -c5-11)\" != \"Release\" ; then \\
+            echo 'need git commit with -m Release'; \\
+            exit 1; \\
+       fi
        -git tag -f \$(VERSION)
        cpan-upload \$(DISTVNAME).tar\$(SUFFIX)
        git push
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.39/SIGNATURE 
new/Cpanel-JSON-XS-4.40/SIGNATURE
--- old/Cpanel-JSON-XS-4.39/SIGNATURE   2024-12-12 22:14:41.000000000 +0100
+++ new/Cpanel-JSON-XS-4.40/SIGNATURE   2025-09-08 16:00:52.000000000 +0200
@@ -1,5 +1,5 @@
 This file contains message digests of all files listed in MANIFEST,
-signed via the Module::Signature module, version 0.89.
+signed via the Module::Signature module, version 0.93.
 
 To verify the content in this distribution, first make sure you have
 Module::Signature installed, then type:
@@ -16,18 +16,18 @@
 
 SHA256 aac2b4bbaa7b93eaf72300f60e167a17e05adcd721087f735ba55d2900f31490 
.appveyor.yml
 SHA256 082201a3cbd62a55f2e58ffbb991c4b2bb806de0009bc9497ffcc07202f60855 
.github/FUNDING.yml
-SHA256 724cc9e03083bc4d51ec2659118a9bb7ca66ca5f640a1d249ae3732d68511380 
.github/workflows/testsuite.yml
+SHA256 27d585f5789434eac4d99d9a66b143c3c76d27c7a622061922919e4f70f93887 
.github/workflows/testsuite.yml
 SHA256 a3c34aba52e269e6cec558ecf9cff393138574189fdff26b183bee9cc2e0434f 
.travis.yml
 SHA256 c3f2a1a4f66382f796f71a571946722edba53cf3238152b26fd325f4c2f1a20f 
.whitesource
 SHA256 8de3540a3cd7ecc9a9dcb48975fe852c082fe17d4462f87bb72aa7cc47f083ad COPYING
-SHA256 ee990945735ae8b4b7b264dbd98ac361fa4b5ef59d2893343c53c2b09b3971e1 Changes
+SHA256 ae4bb1db5a3fa099f35c9a5b79648fa98c3e17bc30d01fb66e55bb72344bed39 Changes
 SHA256 a5378ebe65273d49047a21e94af087f70a303793ffed2a695c800ed965ac185d 
MANIFEST
-SHA256 445f18f73b799c4a86167412664e567fd0b6aa1d3d61fdf61dc74a1143e5dcd5 
META.json
-SHA256 be01f9e157d49e4cc37184bcc5e73cbc0befb3b441bc6b1ae647e838427c2e61 
META.yml
-SHA256 1ad5eab412179cae0dceb6fd9346aa20650988dd6eee23c3482a21d8714dd5bf 
Makefile.PL
+SHA256 48ed49a7b028baa86cec0aa499e2448f68890cfa166db960b7fe316f85d16757 
META.json
+SHA256 0acb81669300bb982e04541b1063b424d334af2d2f7e0399fa596abd638161a4 
META.yml
+SHA256 0fc7078919ff510137a654acc66bd68c971786cafd8ee621afae6d99321df4bb 
Makefile.PL
 SHA256 c62f5a06dffaa850fe7d55cad1c5ce3fbdb5504031b73b6043aa2974708c9293 README
-SHA256 54c8486f5141eae12a12db7bb92d5883605edfd30de355a531ba267ebbdb4e5e XS.pm
-SHA256 b71b7e0cadd6dfefb8f593d85de68d4d7b4d36b73e2e75344b79be377d98a61e XS.xs
+SHA256 5ff0b6a015d21a2344ec786a6f8faa7547346720cfa02a0526c9952b2211d903 XS.pm
+SHA256 5bf1c4bc302db55d0e23eeac0dc9c2b1f03bb76a6d6af0f87d496cbbf1527315 XS.xs
 SHA256 c95e4b970183cbd6d1ec9c88c37a80f12bd2b66ed6be3c008ffd578d2f622c01 
XS/Boolean.pm
 SHA256 20596259e7e399ed1984a469a9a907be878499406d5285a11f1ab98f93aff44f 
XS/Type.pm
 SHA256 2f34a530b7ce981b0df9aacd2b6944ccf74c4a7f8bb49fde57b342663e7feb26 
bin/cpanel_json_xs
@@ -35,7 +35,7 @@
 SHA256 3290077eba2e57ff1d2bf46c2a7d34a3b9c7f9b24fe517a3943430f5720da95f 
ppport.h
 SHA256 8bd5ef4d15ed3a9b2e641cc04549d6eed1532c86bba907e2b035d80c8dd5ac2c 
t/00_load.t
 SHA256 0cefac61a4f61481fb66be51997b99b0e6da84f62b4976686d9ef87284ca5378 
t/01_utf8.t
-SHA256 d2ec342bd9183411689ae9fee51b4e6730f6e5dce95f49cb59b4b38237337f1e 
t/02_error.t
+SHA256 03fc2d9f0c948bba46a1d3b6ee6b5ebae233341fc4a9a70b03acd34d93c3b8c3 
t/02_error.t
 SHA256 e02e3fc388734af0fb8f7b8c8ebe4163ba4cfe5db94cc46b67776db0774ac716 
t/03_types.t
 SHA256 36a9a87f4e143077195add1e8d931ff49d7e71f93f66326def22703158c268e1 
t/04_dwiw_encode.t
 SHA256 9317a15e310457888e161acc67abf0ac62b54b5bcbcdedcdcf5b48f90b19081f 
t/05_dwiw_decode.t
@@ -51,7 +51,7 @@
 SHA256 f2047975a3b8392feb6a87d782ecc7746ae2117bde57f716cc90877c8850f2e0 
t/108_decode.t
 SHA256 e6f7738431bc8d77ad0b8ad2db9ab54426f7bbc86eb5f5794b1a4616f454baef 
t/109_encode.t
 SHA256 d6c467d647ab46c64734d6c6913ff262e854e00073a804da186caf894c5367d0 
t/10_pc_keysort.t
-SHA256 b83ef117bbbadaa4cdeccf0a0dec6087bd97094980638d982f7f805cf006f988 
t/110_bignum.t
+SHA256 f2c74f93ce4ab2aa6cc882d15cc670d34ad85efb859b8f57cfa0718b735e60d2 
t/110_bignum.t
 SHA256 9c6d125de04ea14d24bbc96aafcbe8fbad75811ce4bf4e4d2d569eee8f195de0 
t/112_upgrade.t
 SHA256 b207546715e27fe738f448fb0e1087b73bfd2a002c0254f656e6b4d47e154f58 
t/113_overloaded_eq.t
 SHA256 89a6817b7b7ad584200b65c4b17e0c3960637162308d7bfd6d74756754235cc5 
t/114_decode_prefix.t
@@ -446,15 +446,15 @@
 SHA256 aca6f846869ab2e4881e807739086e1535b1438bd0e23d7a021360742736a6a9 
xt/pod.t
 -----BEGIN PGP SIGNATURE-----
 
-iQGzBAEBAwAdFiEEOKQWew22nknF9yFsuMKIZqsnp6IFAmdbUkEACgkQuMKIZqsn
-p6J51Av/YTs0fXeOQoB8pgohlUf8bZAmOAguteMvxaI+rrkDjVbHLIR53fC/TXEF
-OCPQqrqFO6aayuUlU3R1rK8LnGjtwBtdo47C548gxIsORITTM8+iQRjt5bnOfpV8
-pSHdY9x6HxYWdvEEWa3zOxqr6KOy4yZWtf2Jnki1VUMrsriD9rxJ9nGlA1quULXX
-GMILyv1hkDdMC+wdkbY5YECJfPZo1xvRl8uIciFKNKb+Aysl1SJ/PTzP4lgoHTP4
-Hxu9B0QG72JXh2ZacpmqnlXfNAIJaA1WrmiQf+mPrriC8xyu9s/wsaLcoc1ndvqH
-sWXiRyjfEw+0+B8VeIK/NEeJ9dnLRpWx0/IBvtnjQS3afnlflooaf8pB7D6SHBY4
-nS4vipjB3UUw+vA4wO3up9WHDuG7WlucO7k9nqSHcZSorCub7z2mB/TL5Dd88h/s
-2X0wBnuqgVjY8UYvnbr4BeSVRdhMwSNsJbyQ3J5XVDAj86N7P9o0xYLYuTlVS1fK
-rfVlKCoA
-=Rrxl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+=Z+fz
 -----END PGP SIGNATURE-----
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.39/XS.pm 
new/Cpanel-JSON-XS-4.40/XS.pm
--- old/Cpanel-JSON-XS-4.39/XS.pm       2024-12-12 22:14:18.000000000 +0100
+++ new/Cpanel-JSON-XS-4.40/XS.pm       2025-09-08 13:53:39.000000000 +0200
@@ -1,5 +1,5 @@
 package Cpanel::JSON::XS;
-our $VERSION = '4.39';
+our $VERSION = '4.40';
 our $XS_VERSION = $VERSION;
 # $VERSION = eval $VERSION;
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.39/XS.xs 
new/Cpanel-JSON-XS-4.40/XS.xs
--- old/Cpanel-JSON-XS-4.39/XS.xs       2024-12-12 21:55:54.000000000 +0100
+++ new/Cpanel-JSON-XS-4.40/XS.xs       2025-09-08 13:53:39.000000000 +0200
@@ -710,17 +710,19 @@
   /* if we recurse too deep, skip all remaining digits */
   /* to avoid a stack overflow attack */
   if (UNLIKELY(--maxdepth <= 0))
-    while (((U8)*s - '0') < 10)
+    while (*s >= '0' && *s <= '9')
       ++s;
 
   for (;;)
     {
-      U8 dig = (U8)*s - '0';
+      U8 dig = (U8)(*s - '0');
 
       if (UNLIKELY(dig >= 10))
         {
-          if (dig == (U8)((U8)'.' - (U8)'0'))
+          if (dig == (U8)('.' - '0'))
             {
+              if (postdp)
+                break;
               ++s;
               json_atof_scan1 (s, accum, expo, 1, maxdepth);
             }
@@ -739,7 +741,7 @@
               else if (*s == '+')
                 ++s;
 
-              while ((dig = (U8)*s - '0') < 10)
+              while (*s >= '0' && *s <= '9')
                 exp2 = exp2 * 10 + *s++ - '0';
 
               *expo += neg ? -exp2 : exp2;
@@ -3677,6 +3679,8 @@
           ++dec->cur;
         }
       while (*dec->cur >= '0' && *dec->cur <= '9');
+      if (*dec->cur == '.')
+        ERR ("malformed number (two decimal points)");
 
       is_nv = 1;
     }
@@ -3697,6 +3701,8 @@
           ++dec->cur;
         }
       while (*dec->cur >= '0' && *dec->cur <= '9');
+      if (*dec->cur == '.' && is_nv == 1)
+        ERR ("malformed number (two decimal points)");
 
       is_nv = 1;
     }
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.39/t/02_error.t 
new/Cpanel-JSON-XS-4.40/t/02_error.t
--- old/Cpanel-JSON-XS-4.39/t/02_error.t        2022-05-03 13:12:46.000000000 
+0200
+++ new/Cpanel-JSON-XS-4.40/t/02_error.t        2025-09-08 13:53:39.000000000 
+0200
@@ -1,4 +1,4 @@
-use Test::More tests => 36;
+use Test::More tests => 41;
 
 use utf8;
 use Cpanel::JSON::XS;
@@ -52,3 +52,9 @@
 eval { decode_json ("false") }; ok $@ =~ /JSON text must be an object or 
array/, "false $@";
 eval { decode_json ("1") }; ok $@ =~ /JSON text must be an object or array/, 
"wrong 1";
 
+# more malformed numbers
+eval { Cpanel::JSON::XS->new->allow_nonref->decode ('001') }; ok $@ =~ 
/malformed number/;
+eval { Cpanel::JSON::XS->new->allow_nonref->decode ('1.0.1') }; ok !!$@;
+eval { Cpanel::JSON::XS->new->allow_nonref->decode ('1.0.') }; ok !!$@;
+eval { Cpanel::JSON::XS->new->allow_nonref->decode ('1.') }; ok $@ =~ 
/malformed number/;
+eval { Cpanel::JSON::XS->new->allow_nonref->decode ('-') }; ok $@ =~ 
/malformed number/;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/Cpanel-JSON-XS-4.39/t/110_bignum.t 
new/Cpanel-JSON-XS-4.40/t/110_bignum.t
--- old/Cpanel-JSON-XS-4.39/t/110_bignum.t      2024-07-04 12:37:35.000000000 
+0200
+++ new/Cpanel-JSON-XS-4.40/t/110_bignum.t      2025-09-08 13:53:39.000000000 
+0200
@@ -73,7 +73,7 @@
 is( "$inf", $exp, '-inf stringify' );
 
 # see if allow_bignum is enough, always decodes to a BigFloat
-my $num = $json->decode(4.5);
+$num = $json->decode(4.5);
 isa_ok( $num, 'Math::BigFloat' );
 is(
     $num->bcmp('4.5'),

++++++ README.md ++++++

## Build Results

Current state of perl in openSUSE:Factory is

![Factory build 
results](https://br.opensuse.org/status/openSUSE:Factory/perl-Cpanel-JSON-XS/standard)

The current state of perl in the devel project build (devel:languages:perl)

![Devel project build 
results](https://br.opensuse.org/status/devel:languages:perl/perl-Cpanel-JSON-XS)



++++++ _scmsync.obsinfo ++++++
mtime: 1757351017
commit: 8bf9656a284497e3756b5e3b0057cec36ffe9828d8cace5e2beea00487cc3673
url: https://src.opensuse.org/perl/perl-Cpanel-JSON-XS.git
revision: 8bf9656a284497e3756b5e3b0057cec36ffe9828d8cace5e2beea00487cc3673
projectscmsync: https://src.opensuse.org/perl/_ObsPrj

++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore      1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore      2025-09-08 19:46:20.000000000 +0200
@@ -0,0 +1 @@
+.osc

Reply via email to