This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a change to branch release
in repository https://gitbox.apache.org/repos/asf/commons-jexl.git
from 5bca2ad4 Bump to next development version
add e9aa7876 Bump actions/cache from 6.0.0 to 6.1.0
add 9a94643a Javadoc
add 769154f4 Bump actions/setup-java from 5.3.0 to 5.4.0
add 8cd85160 Pick up commons.jacoco.version from the parent POM.
add 100a272b Bump actions/checkout from 6.0.3 to 7.0.0
add f901652a Merge pull request #408 from
apache/dependabot/github_actions/actions/checkout-7.0.0
add 76594a80 Merge branch 'release'
add 824c2690 Updates for the next release
add c9ede1ba Fix typos.
add 7cf74b81 Normalize spelling
add 7d5e48e2 Flip null test
add 5a184d29 Bump github/codeql-action from 4.36.2 to 4.36.3
add 199c84b4 Bump github/codeql-action from 4.36.3 to 4.37.0
add 4d491721 Javadoc
add 792570d9 Javadoc
add 1df43a52 Javadoc
add b9554ecd Bump actions/setup-java from 5.4.0 to 5.5.0
add dcb15ab8 Bump actions/setup-java from 5.5.0 to 5.6.0
add 0fbd4011 Bump github/codeql-action from 4.37.0 to 4.37.1
add 77041ecd Bump org.apache.commons:commons-parent from 102 to 103.
add 765d80bf Add messages when throwing NullPointerException.
add c2afbfb6 Add messages when throwing NullPointerException.
add 5f294331 JEXL-467: TextMate JEXL bundle;
add c0b85019 JEXL-466: ensure JexlEngine is thread-local accessible when
creating TemplateScript and TemplateExpressions;
add f83b73f3 Bump actions/checkout from 7.0.0 to 7.0.1
add 2f260814 Update GH CI Java versions.
add 4d32e29e Update GH CI Java versions.
add e1527bc3 Bump github/codeql-action from 4.37.1 to 4.37.3
add ecb77121 Bump ossf/scorecard-action from 2.4.3 to 2.4.4.
add 60cbb544 Javadoc
add c5520e64 Bump github/codeql-action from 4.37.3 to 4.37.6.
add a7a3a84b Bump actions/setup-java from 5.6.0 to 5.7.0
add c8cd40fc JEXL-411: Allow optional leading zeroes in floating point
literals
add fecd3ad7 JEXL-411: move isAllDigits to JexlParser; - update
changes.xml;
add 9b0c5869 Merge pull request #409 from
NikRom5531/JEXL-411-leading-zeroes
add d0a99192 JEXL : skip jacoco on Java28+
add 9c3ab070 JEXL : skip findbugs on Java28+
add c28ff112 Bump codeql-action from 4.37.6 to 4.37.7
add bcd50796 Bump org.apache.commons:commons-parent from 103 to 104.
add 4c2a109c [JEXL-468] Harden introspection permissions and parser
feature enforcement
add 5f4c69ac [JEXL-468] Sandbox iterator gate, permission-parser polarity,
engine-compiler denial
add 759ebaa2 Apply suggestions from code review
add 8df14514 Merge pull request #410 from apache/JEXL-468
add 65a036f7 [JEXL-469] Add namespaceInstantiation feature knob
add 99426ef3 Merge pull request #411 from apache/JEXL-469
add ea2c4b85 [JEXL-470] Parser/string correctness fixes
add 28b91ced Merge pull request #412 from apache/JEXL-470
add 5e340cba [doc] Update changes.xml for JEXL-468, JEXL-469, JEXL-470
add 86ea6a3e [JEXL-468] Preserve deny-all package semantics when compose()
adds class-specific exceptions
add e1cc1e57 [JEXL-468] Refactor PermissionsParser: extract mergePackage,
fix readSpaces, add isDenyAll()
add 46962260 Merge pull request #413 from apache/JEXL-468b
add 175f5323 Bump github/codeql-action/init from 4.37.7 to 4.37.8
add cff828c4 Bump actions/setup-java from 5.7.0 to 6.0.0.
add 73fbe48e Bump github/codeql-action/analyze from 4.37.8 to 4.37.9.
add 964d8e73 JEXL-471 : Runtime hardening: Constrain BigInteger operations
and ensure regex interruptibility
add b60d958a JEXL-471 : fix review comments;
add 4e6c8bfc [JEXL-471] Complete double-check locking pattern in Pattern
cache
add 833ea619 JEXL-471 : Potential fix for pull request finding
add 5788b855 JEXL-471 : Apply batched suggestions from code review (take 2)
add 4e64e3cb JEXL-471 : fix review comments, last take.
add a60740ee Merge pull request #414 from apache/JEXL-471
add 14fce3a6 Bump org.apache.commons:commons-parent from 104 to 105.
add 2b997c1d Resolve record component accessors in property access
add ded79221 [JEXL-472] Consolidate record reflection into ClassTool, fix
test fixture
add 390d2043 JEXL-472: Consolidate record reflection into ClassTool, fix
test fixture
add 823d4e7c JEXL-472: fix review comments;
add bdeb80c2 JEXL-472: fix review comments;
add b45ab239 JEXL-472: ClassCreatorTest fails on java 28 (GC does not
reclaim classes?), fix by avoidance;
add 07ca868b Merge pull request #416 from apache/JEXL-472
add 1710d474 Bump actions/setup-java from 6.0.0 to 6.0.1
add bd6c2973 Bump github/codeql-action/* from 4.37.9 to 4.38.1
add 9098d9aa Protect main branches
add 063b86f5 Bump github/codeql-action from 4.38.1 to 4.38.2
add e614dda1 Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0
add c9e587a4 Merge pull request #417 from
garydgregory/fix/commons-lang3-3.21.0
add 0afb20de [test] Bump org.apache.commons:commons-lang3 from 3.20.0 to
3.21.0
add 3a927299 Update GH CI from Java 26 to 27
add 7f9d43c1 Add github.autolink_jira
add 4771e846 Use final
add f82fdb23 Bump actions/upload-artifact from 7.0.1 to 7.0.2
add 0de4316f Bump github/codeql-action/analyze from 4.37.5 to 4.38.3
add 2d53554e Revert "Bump github/codeql-action/analyze from 4.37.5 to
4.38.3"
add 3ed427a6 Bump github/codeql-action/analyze from 4.37.5 to 4.38.3
add a1bd8054 JEXL-473 : Add feature to restrict allowed pragmas
add 7b922b15 Prepare for the release candidate
No new revisions were added by this update.
Summary of changes:
.asf.yaml | 23 ++
.github/workflows/codeql-analysis.yml | 10 +-
.github/workflows/dependency-review.yml | 2 +-
.github/workflows/maven.yml | 10 +-
.github/workflows/scorecards-analysis.yml | 8 +-
.gitignore | 2 +
CONTRIBUTING.md | 26 +-
README.md | 12 +-
RELEASE-NOTES.txt | 58 ++-
pom.xml | 26 +-
src/changes/changes.xml | 18 +
.../org/apache/commons/jexl3/JexlArithmetic.java | 444 +++++++++++++--------
.../java/org/apache/commons/jexl3/JexlBuilder.java | 85 ++--
.../java/org/apache/commons/jexl3/JexlCache.java | 20 +-
.../org/apache/commons/jexl3/JexlConfigLoader.java | 68 +++-
.../java/org/apache/commons/jexl3/JexlContext.java | 52 +--
.../java/org/apache/commons/jexl3/JexlEngine.java | 94 ++---
.../org/apache/commons/jexl3/JexlException.java | 294 +++++++-------
.../org/apache/commons/jexl3/JexlExpression.java | 8 +-
.../org/apache/commons/jexl3/JexlFeatures.java | 209 +++++++++-
.../java/org/apache/commons/jexl3/JexlInfo.java | 24 +-
.../org/apache/commons/jexl3/JexlOperator.java | 78 ++--
.../java/org/apache/commons/jexl3/JexlOptions.java | 74 ++--
.../java/org/apache/commons/jexl3/JexlScript.java | 34 +-
.../java/org/apache/commons/jexl3/JxltEngine.java | 116 +++---
.../java/org/apache/commons/jexl3/MapContext.java | 2 +-
.../org/apache/commons/jexl3/ObjectContext.java | 10 +-
.../commons/jexl3/internal/ArrayBuilder.java | 20 +-
.../org/apache/commons/jexl3/internal/Closure.java | 12 +-
.../apache/commons/jexl3/internal/Debugger.java | 69 ++--
.../org/apache/commons/jexl3/internal/Engine.java | 163 ++++----
.../apache/commons/jexl3/internal/Engine32.java | 14 +-
.../commons/jexl3/internal/FqcnResolver.java | 22 +-
.../org/apache/commons/jexl3/internal/Frame.java | 36 +-
.../commons/jexl3/internal/IntegerRange.java | 14 +-
.../apache/commons/jexl3/internal/Interpreter.java | 199 ++++++---
.../commons/jexl3/internal/InterpreterBase.java | 233 +++++------
.../commons/jexl3/internal/LexicalFrame.java | 10 +-
.../commons/jexl3/internal/LexicalScope.java | 18 +-
.../apache/commons/jexl3/internal/LongRange.java | 14 +-
.../apache/commons/jexl3/internal/MapBuilder.java | 4 +-
.../apache/commons/jexl3/internal/Operator.java | 85 ++--
.../org/apache/commons/jexl3/internal/Scope.java | 56 +--
.../org/apache/commons/jexl3/internal/Script.java | 48 +--
.../commons/jexl3/internal/ScriptVisitor.java | 10 +-
.../apache/commons/jexl3/internal/SetBuilder.java | 4 +-
.../apache/commons/jexl3/internal/SoftCache.java | 14 +-
.../org/apache/commons/jexl3/internal/Source.java | 10 +-
.../commons/jexl3/internal/TemplateDebugger.java | 44 +-
.../commons/jexl3/internal/TemplateEngine.java | 150 +++----
.../jexl3/internal/TemplateInterpreter.java | 32 +-
.../commons/jexl3/internal/TemplateScript.java | 78 ++--
.../internal/introspection/AbstractExecutor.java | 50 +--
.../internal/introspection/BooleanGetExecutor.java | 14 +-
.../jexl3/internal/introspection/ClassMap.java | 44 +-
.../jexl3/internal/introspection/ClassMisc.java | 18 +-
.../jexl3/internal/introspection/ClassTool.java | 90 ++++-
.../internal/introspection/ConstructorMethod.java | 8 +-
.../internal/introspection/DuckGetExecutor.java | 12 +-
.../internal/introspection/DuckSetExecutor.java | 18 +-
.../introspection/EnumerationIterator.java | 2 +-
.../internal/introspection/FieldGetExecutor.java | 10 +-
.../internal/introspection/FieldSetExecutor.java | 12 +-
.../jexl3/internal/introspection/IndexedType.java | 56 +--
.../jexl3/internal/introspection/Introspector.java | 52 +--
.../internal/introspection/ListGetExecutor.java | 12 +-
.../internal/introspection/ListSetExecutor.java | 16 +-
.../internal/introspection/MapGetExecutor.java | 12 +-
.../internal/introspection/MapSetExecutor.java | 18 +-
.../internal/introspection/MethodExecutor.java | 16 +-
.../jexl3/internal/introspection/MethodKey.java | 70 ++--
.../jexl3/internal/introspection/Permissions.java | 313 ++++++++++-----
.../internal/introspection/PermissionsParser.java | 120 ++++--
.../introspection/PropertyGetExecutor.java | 14 +-
.../introspection/PropertySetExecutor.java | 36 +-
.../internal/introspection/RecordGetExecutor.java | 100 +++++
.../internal/introspection/SandboxUberspect.java | 15 +-
.../jexl3/internal/introspection/Uberspect.java | 44 +-
.../commons/jexl3/introspection/JexlMethod.java | 14 +-
.../jexl3/introspection/JexlPermissions.java | 149 ++++---
.../jexl3/introspection/JexlPropertyGet.java | 12 +-
.../jexl3/introspection/JexlPropertySet.java | 12 +-
.../commons/jexl3/introspection/JexlSandbox.java | 100 ++---
.../commons/jexl3/introspection/JexlUberspect.java | 92 ++---
.../apache/commons/jexl3/parser/ASTIdentifier.java | 12 +-
.../apache/commons/jexl3/parser/ASTJexlScript.java | 30 +-
.../commons/jexl3/parser/ASTJxltLiteral.java | 4 +-
.../jexl3/parser/ASTNamespaceIdentifier.java | 4 +-
.../commons/jexl3/parser/ASTNumberLiteral.java | 4 +-
.../commons/jexl3/parser/ASTRegexLiteral.java | 13 +-
.../commons/jexl3/parser/ASTStringLiteral.java | 2 +-
.../commons/jexl3/parser/ASTSwitchStatement.java | 2 +-
.../commons/jexl3/parser/FeatureController.java | 12 +-
.../apache/commons/jexl3/parser/JavaccError.java | 4 +-
.../org/apache/commons/jexl3/parser/JexlNode.java | 34 +-
.../apache/commons/jexl3/parser/JexlParser.java | 181 ++++++---
.../commons/jexl3/parser/JexlScriptParser.java | 16 +-
.../apache/commons/jexl3/parser/NumberParser.java | 53 ++-
.../commons/jexl3/parser/OperatorController.java | 2 +-
.../commons/jexl3/parser/ParseException.java | 2 +-
.../org/apache/commons/jexl3/parser/Parser.jjt | 19 +-
.../apache/commons/jexl3/parser/ParserVisitor.java | 8 +-
.../apache/commons/jexl3/parser/SimpleNode.java | 24 +-
.../apache/commons/jexl3/parser/StringParser.java | 117 ++++--
.../commons/jexl3/parser/TokenMgrException.java | 2 +-
.../commons/jexl3/scripting/JexlScriptEngine.java | 24 +-
.../jexl3/scripting/JexlScriptEngineFactory.java | 8 +-
.../org/apache/commons/jexl3/scripting/Main.java | 8 +-
src/site/xdoc/download_jexl.xml | 28 +-
src/site/xdoc/index.xml | 2 +-
src/site/xdoc/issue-tracking.xml | 10 +-
.../org/apache/commons/jexl3/AntishCallTest.java | 6 +-
.../org/apache/commons/jexl3/Arithmetic360.java | 32 +-
.../commons/jexl3/ArithmeticOperatorTest.java | 32 +-
.../org/apache/commons/jexl3/ArithmeticTest.java | 173 +++++++-
.../apache/commons/jexl3/CachePerformanceTest.java | 4 +-
.../java/org/apache/commons/jexl3/CacheTest.java | 8 +-
.../org/apache/commons/jexl3/ClassCreatorTest.java | 3 +
.../commons/jexl3/ComposePermissionsTest.java | 58 +++
.../org/apache/commons/jexl3/ConcurrentCache.java | 6 +-
.../org/apache/commons/jexl3/ExceptionTest.java | 2 +-
.../org/apache/commons/jexl3/FeaturesTest.java | 10 +-
.../org/apache/commons/jexl3/Issues300Test.java | 6 +-
.../org/apache/commons/jexl3/Issues400Test.java | 135 ++++++-
.../java/org/apache/commons/jexl3/JXLTTest.java | 8 +-
.../apache/commons/jexl3/JexlConfigLoaderTest.java | 166 ++++++++
.../org/apache/commons/jexl3/JexlEvalContext.java | 8 +-
.../org/apache/commons/jexl3/JexlTestCase.java | 5 +
.../commons/jexl3/JxltFeatureEnforcementTest.java | 82 ++++
.../java/org/apache/commons/jexl3/LexicalTest.java | 8 +-
.../commons/jexl3/NamespaceInstantiationTest.java | 138 +++++++
.../org/apache/commons/jexl3/ReadonlyContext.java | 8 +-
.../commons/jexl3/RecordPropertyAccessTest.java | 109 +++++
.../apache/commons/jexl3/ScriptCallableTest.java | 2 +-
.../java/org/apache/commons/jexl3/ScriptTest.java | 6 +-
.../java/org/apache/commons/jexl3/SpreadCache.java | 16 +-
.../java/org/apache/commons/jexl3/SwitchTest.java | 34 ++
.../commons/jexl3/SynchronizedArithmetic.java | 34 +-
.../apache/commons/jexl3/SynchronizedContext.java | 6 +-
.../java/org/apache/commons/jexl3/VarTest.java | 28 +-
.../commons/jexl3/examples/AbstractOutput.java | 6 +-
.../commons/jexl3/examples/MethodPropertyTest.java | 4 +-
.../apache/commons/jexl3/examples/StreamTest.java | 24 +-
.../org/apache/commons/jexl3/internal/Util.java | 16 +-
.../jexl3/internal/introspection/NoJexlTest.java | 30 +-
.../introspection/PermissionsInitOrderTest.java | 127 ++++++
.../PermissionsRestrictedSweepTest.java | 159 ++++++++
.../internal/introspection/PermissionsTest.java | 46 ++-
.../commons/jexl3/introspection/SandboxTest.java | 28 ++
.../commons/jexl3/jexl342/OptionalArithmetic.java | 4 +-
.../jexl3/jexl342/ReferenceGetExecutor.java | 8 +-
.../jexl3/jexl342/ReferenceMethodExecutor.java | 8 +-
.../jexl3/jexl342/ReferenceSetExecutor.java | 8 +-
.../commons/jexl3/jexl342/ReferenceUberspect.java | 30 +-
.../org/apache/commons/jexl3/junit/Asserter.java | 16 +-
.../apache/commons/jexl3/parser/ParserTest.java | 18 +
tools/JEXL.tmbundle/Syntaxes/JEXL.tmLanguage | 383 ++++++++++++++++++
tools/JEXL.tmbundle/info.plist | 10 +
tools/JEXL.tmbundle/language-configuration.json | 28 ++
tools/JEXL.tmbundle/package.json | 30 ++
160 files changed, 5180 insertions(+), 2278 deletions(-)
create mode 100644
src/main/java/org/apache/commons/jexl3/internal/introspection/RecordGetExecutor.java
create mode 100644
src/test/java/org/apache/commons/jexl3/JxltFeatureEnforcementTest.java
create mode 100644
src/test/java/org/apache/commons/jexl3/NamespaceInstantiationTest.java
create mode 100644
src/test/java/org/apache/commons/jexl3/RecordPropertyAccessTest.java
create mode 100644
src/test/java/org/apache/commons/jexl3/internal/introspection/PermissionsInitOrderTest.java
create mode 100644
src/test/java/org/apache/commons/jexl3/internal/introspection/PermissionsRestrictedSweepTest.java
create mode 100644 tools/JEXL.tmbundle/Syntaxes/JEXL.tmLanguage
create mode 100644 tools/JEXL.tmbundle/info.plist
create mode 100644 tools/JEXL.tmbundle/language-configuration.json
create mode 100644 tools/JEXL.tmbundle/package.json
