This is an automated email from the ASF dual-hosted git repository.

henrib pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-jexl.git


The following commit(s) were added to refs/heads/master by this push:
     new 5e340cba [doc] Update changes.xml for JEXL-468, JEXL-469, JEXL-470
5e340cba is described below

commit 5e340cba109cbaad2863c90f52459611a3498cd4
Author: Henrib <[email protected]>
AuthorDate: Tue Aug 25 16:03:39 2026 +0200

    [doc] Update changes.xml for JEXL-468, JEXL-469, JEXL-470
---
 src/changes/changes.xml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index c0177686..ed248075 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -30,11 +30,14 @@
         <release version="3.7.1" date="YYYY-MM-DD" description="This is a 
feature and maintenance release. Java 8 or later is required.">
             <!-- ADD -->
             <action dev="henrib" type="add" issue="JEXL-467">IntelliJ and 
VSCode editors (TextMate bundle) support for JEXL.</action>
+            <action dev="henrib" due-to="Claude" type="add" 
issue="JEXL-469">Add JexlFeatures.namespaceInstantiation(boolean) to control 
whether a namespace bound to a Class or class-name string is reflectively 
auto-instantiated into a functor; string namespaces now resolve through the 
permission-aware uberspect.</action>
             <!-- FIX -->
             <action dev="henrib" type="fix" 
issue="JEXL-466">IllegalStateException parsing a template with string 
interpolation.</action>
             <action dev="NikRom5531" due-to="Felix Rudolphi" type="fix" 
issue="JEXL-411">Leading zeroes in floating point numbers should be 
optional.</action>
             <action dev="ggregory" type="fix" due-to="Gary Gregory">Pick up 
commons.jacoco.version from the parent POM.</action>
             <action dev="ggregory" type="fix" due-to="Gary Gregory">Add 
messages when throwing NullPointerException.</action>
+            <action dev="henrib" due-to="Claude" type="fix" 
issue="JEXL-468">Improve robustness of introspection permissions and sandbox 
delegation: close nested-class and interface-method denial gaps, fix 
class-initialization ordering, gate sandbox iteration, fix permission-parser 
polarity, deny second-stage compiler surface under RESTRICTED, and enforce 
parser feature restrictions in sub-parsers.</action>
+            <action dev="henrib" due-to="Claude" type="fix" 
issue="JEXL-470">Fix several parser and interpreter correctness issues: Unicode 
escape hex-digit validation, safe-navigation array-access child indexing, regex 
escape preservation, empty()/size() error and cancellation propagation, and 
switch+continue semantics.</action>
             <!-- UPDATE -->
             <action type="update" dev="ggregory" due-to="Gary Gregory">Bump 
org.apache.commons:commons-parent from 102 to 104.</action>
         </release>

Reply via email to