Skip to content

CHANGELOG.md

Latest commit

 

History

History
38 lines (23 loc) · 1.5 KB

CHANGELOG.md

File metadata and controls

38 lines (23 loc) · 1.5 KB

1.3.1

  • Trivial improvements.

1.3.0

  • Full fix for the high-severity security vulnerability RUSTSEC-2024-0006 a.k.a. GHSA-r7qv-8r2h-pg27:
    • Deprecates quote APIs in favor of try_ equivalents that complain about nul bytes.
    • Also adds a builder API, which allows re-enabling nul bytes without using the deprecated interface, and in the future can allow other things (as discussed in quoting_warning).
    • Adds documentation about various security risks that remain, particularly with interactive shells.
  • Adds explicit MSRV of 1.46.0.

1.2.1

  • Partial fix for the high-severity security vulnerability RUSTSEC-2024-0006 a.k.a. GHSA-r7qv-8r2h-pg27 without bumping MSRV:
    • The bytes { and \xa0 are now escaped by quoting functions.

1.2.0

  • Adds bytes module to support operating directly on byte strings.

1.1.0

  • Adds the std feature (enabled by default).
  • Disabling the std feature makes the crate work in #![no_std] mode, assuming presence of the alloc crate.

1.0.0

  • Adds the join convenience function.
  • Fixes parsing of '\\n' to match the behavior of bash/Zsh/Python shlex. The result was previously \n, now it is \\n.

0.1.1

  • Adds handling of # comments.

0.1.0

This is the initial release.