« Changelog History


Nokogiri v1.13.9 Release Notes

Release Date: 2022-10-18 // 12 months ago

  • 🔒 Security

    Dependencies

    • 🚀 [CRuby] Vendored libxml2 is updated to v2.10.3 from v2.9.14.
    • 🚀 [CRuby] Vendored libxslt is updated to v1.1.37 from v1.1.35.
    • 🚀 [CRuby] Vendored zlib is updated from 1.2.12 to 1.2.13. (See LICENSE-DEPENDENCIES.md for details on which packages redistribute this library.)

    🛠 Fixed

    • ⚡️ [CRuby] Nokogiri::XML::Namespace objects, when compacted, update their internal struct's reference to the Ruby object wrapper. Previously, with GC compaction enabled, a segmentation fault was possible after compaction was triggered. [#2658] (Thanks, @eightbitraptor and @peterzhu2118!)
    • 🚚 [CRuby] Document#remove_namespaces! now defers freeing the underlying xmlNs struct until the Document is GCed. Previously, maintaining a reference to a Namespace object that was removed in this way could lead to a segfault. [#2658]

Previous changes from v1.13.8

  • 🗄 Deprecated

    • 🚚 XML::Reader#attribute_nodes is deprecated due to incompatibility between libxml2's xmlReader memory semantics and Ruby's garbage collector. Although this method continues to exist for backwards compatibility, it is unsafe to call and may segfault. This method will be removed in a future version of Nokogiri, and callers should use #attribute_hash instead. [#2598]

    👌 Improvements

    • XML::Reader#attribute_hash is a new method to safely retrieve the attributes of a node from XML::Reader. [#2598, #2599]

    🛠 Fixed

    • 💎 [CRuby] Calling XML::Reader#attributes is now safe to call. In Nokogiri <= 1.13.7 this method may segfault. [#2598, #2599]