Control: tag -1 + confirmed upstream

On Wed, 17 Jun 2026 16:15:14 +0000, Santiago Vila wrote:

#   Failed test 'trapped a failure because of a non-reference'
#   at t/04-ENV.t line 28.
#                   undef
#     doesn't match '(?^:use allow_nonref)'
# Looks like you failed 1 test of 8.
t/04-ENV.t .............
ok 1 - got the right handlerType
ok 2 - got a JSON::Any object
not ok 3 - trapped a failure because of a non-reference
ok 4 - got another JSON::Any object
ok 5 - got the same data back again
ok 6 - no failure with config change
ok 7 - got another JSON::Any object
ok 8 - trapped a failure because the constructor option overrides the 
environment variable
1..8
Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/8 subtests
Found deprecated package JSON::Syck. Please upgrade to Cpanel::JSON::XS, 
JSON::XS, JSON::PP, JSON or JSON::DWIW at (eval 9) line 1.

Confirmed.

This is probably caused by a change in libcpanel-json-xs-perl:

4.42 2026-06-27 (rurban)
…
        - Change allow_nonref default to true (GH #241, matching JSON::PP and
          JSON::XS 4.0+ and the insecure RFC 7159).
          encode and decode now accept non-reference values by default.
          decode_json() with an explicit 0/1 second argument still works.
          allow_nonref(0) to disable scalars-only for secure JSON.


Cheers,
gregor, forwarding upstream

--
 .''`.  https://info.comodo.priv.at -- Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
`-

Attachment: signature.asc
Description: Digital Signature

Reply via email to