diff -Nru libyaml-perl-1.27/Changes libyaml-perl-1.29/Changes --- libyaml-perl-1.27/Changes 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/Changes 2019-05-11 08:27:11.000000000 +0000 @@ -1,3 +1,10 @@ +1.29 Sat 11 May 2019 10:26:54 AM CEST + - Fix regex for alias to match the one for anchors (PR#214 TINITA) + +1.28 Sun 28 Apr 2019 11:46:21 AM CEST + - Security fix: only enable loading globs when $LoadCode is set (PR#213 + TINITA) + 1.27 Sat Nov 3 14:01:26 CET 2018 - Remove a warning about uninitialized value for perl <= 5.10 diff -Nru libyaml-perl-1.27/CONTRIBUTING libyaml-perl-1.29/CONTRIBUTING --- libyaml-perl-1.27/CONTRIBUTING 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/CONTRIBUTING 2019-05-11 08:27:11.000000000 +0000 @@ -57,4 +57,4 @@ -# This file generated by Zilla-Dist-0.0.196 +# This file generated by Zilla-Dist-0.0.203 diff -Nru libyaml-perl-1.27/debian/changelog libyaml-perl-1.29/debian/changelog --- libyaml-perl-1.27/debian/changelog 2018-11-09 19:05:28.000000000 +0000 +++ libyaml-perl-1.29/debian/changelog 2019-07-19 00:17:36.000000000 +0000 @@ -1,3 +1,16 @@ +libyaml-perl (1.29-1) unstable; urgency=medium + + * Import upstream version 1.29: + only enable loading globs when $LoadCode is set. + * Refresh ysh-location.patch (offset). + * Annotate test-only build dependencies with . + * Declare compliance with Debian Policy 4.4.0. + * Bump debhelper-compat to 12. + * debian/watch: use uscan version 4. + * Update years of upstream and packaging copyright. + + -- gregor herrmann Thu, 18 Jul 2019 21:17:36 -0300 + libyaml-perl (1.27-1) unstable; urgency=medium * Import upstream version 1.27. diff -Nru libyaml-perl-1.27/debian/compat libyaml-perl-1.29/debian/compat --- libyaml-perl-1.27/debian/compat 2018-11-09 19:05:28.000000000 +0000 +++ libyaml-perl-1.29/debian/compat 1970-01-01 00:00:00.000000000 +0000 @@ -1 +0,0 @@ -10 diff -Nru libyaml-perl-1.27/debian/control libyaml-perl-1.29/debian/control --- libyaml-perl-1.27/debian/control 2018-11-09 19:05:28.000000000 +0000 +++ libyaml-perl-1.29/debian/control 2019-07-19 00:17:36.000000000 +0000 @@ -5,11 +5,11 @@ Section: perl Testsuite: autopkgtest-pkg-perl Priority: optional -Build-Depends: debhelper (>= 10) +Build-Depends: debhelper-compat (= 12) Build-Depends-Indep: perl, - libtest-deep-perl, - libtest-yaml-perl -Standards-Version: 4.2.1 + libtest-deep-perl , + libtest-yaml-perl +Standards-Version: 4.4.0 Vcs-Browser: https://salsa.debian.org/perl-team/modules/packages/libyaml-perl Vcs-Git: https://salsa.debian.org/perl-team/modules/packages/libyaml-perl.git Homepage: https://metacpan.org/release/YAML diff -Nru libyaml-perl-1.27/debian/copyright libyaml-perl-1.29/debian/copyright --- libyaml-perl-1.27/debian/copyright 2018-11-09 19:05:28.000000000 +0000 +++ libyaml-perl-1.29/debian/copyright 2019-07-19 00:17:36.000000000 +0000 @@ -4,7 +4,7 @@ Source: https://metacpan.org/release/YAML Files: * -Copyright: 2001-2018, Ingy döt Net +Copyright: 2001-2019, Ingy döt Net 2009-2010, Adam Kennedy License: Artistic or GPL-1+ @@ -12,7 +12,7 @@ Copyright: 2003-2005, Chip Salzenberg 2005-2006, Florian Ragwitz 2008, Marc 'HE' Brockschmidt - 2008-2018, gregor herrmann + 2008-2019, gregor herrmann 2009, Damyan Ivanov 2009, Iulian Udrea 2009, Rene Mayorga diff -Nru libyaml-perl-1.27/debian/patches/ysh-location.patch libyaml-perl-1.29/debian/patches/ysh-location.patch --- libyaml-perl-1.27/debian/patches/ysh-location.patch 2018-11-09 19:05:28.000000000 +0000 +++ libyaml-perl-1.29/debian/patches/ysh-location.patch 2019-07-19 00:17:36.000000000 +0000 @@ -2,11 +2,11 @@ Origin: vendor Forwarded: not-needed Author: gregor herrmann -Last-Update: 2018-05-12 +Last-Update: 2019-07-18 --- a/lib/YAML.pod +++ b/lib/YAML.pod -@@ -664,7 +664,7 @@ +@@ -668,7 +668,7 @@ =head1 YSH - THE YAML SHELL diff -Nru libyaml-perl-1.27/debian/watch libyaml-perl-1.29/debian/watch --- libyaml-perl-1.27/debian/watch 2018-11-09 19:05:28.000000000 +0000 +++ libyaml-perl-1.29/debian/watch 2019-07-19 00:17:36.000000000 +0000 @@ -1,2 +1,2 @@ -version=3 -https://metacpan.org/release/YAML .+/YAML-v?(\d[\d.-]+)\.(?:tar(?:\.gz|\.bz2)?|tgz|zip)$ +version=4 +https://metacpan.org/release/YAML .+/YAML-v?@ANY_VERSION@@ARCHIVE_EXT@$ diff -Nru libyaml-perl-1.27/lib/YAML/Any.pm libyaml-perl-1.29/lib/YAML/Any.pm --- libyaml-perl-1.27/lib/YAML/Any.pm 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/lib/YAML/Any.pm 2019-05-11 08:27:11.000000000 +0000 @@ -1,6 +1,6 @@ use strict; use warnings; package YAML::Any; -our $VERSION = '1.27'; +our $VERSION = '1.29'; use Exporter (); diff -Nru libyaml-perl-1.27/lib/YAML/Loader.pm libyaml-perl-1.29/lib/YAML/Loader.pm --- libyaml-perl-1.27/lib/YAML/Loader.pm 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/lib/YAML/Loader.pm 2019-05-11 08:27:11.000000000 +0000 @@ -244,7 +244,7 @@ elsif ($preface =~ s/^\*([^ ,:]*)\s*//) { $token = $1; $self->die('YAML_PARSE_ERR_BAD_ALIAS') - unless $token =~ /^[a-zA-Z0-9]+$/; + unless $token =~ /^[a-zA-Z0-9_.\/-]+$/; $self->die('YAML_PARSE_ERR_MANY_ALIAS') if $alias; $self->die('YAML_PARSE_ERR_ANCHOR_ALIAS') if $anchor; $alias = $token; diff -Nru libyaml-perl-1.27/lib/YAML/Types.pm libyaml-perl-1.29/lib/YAML/Types.pm --- libyaml-perl-1.27/lib/YAML/Types.pm 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/lib/YAML/Types.pm 2019-05-11 08:27:11.000000000 +0000 @@ -99,7 +99,7 @@ } no strict 'refs'; if (exists $node->{SCALAR}) { - if ($YAML::LoadBlessed) { + if ($YAML::LoadBlessed and $loader->load_code) { *{"${package}::$name"} = \$node->{SCALAR}; } delete $node->{SCALAR}; @@ -111,7 +111,7 @@ delete $node->{IO}; next; } - if ($YAML::LoadBlessed) { + if ($YAML::LoadBlessed and $loader->load_code) { *{"${package}::$name"} = $node->{$elem}; } delete $node->{$elem}; diff -Nru libyaml-perl-1.27/lib/YAML.pm libyaml-perl-1.29/lib/YAML.pm --- libyaml-perl-1.27/lib/YAML.pm 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/lib/YAML.pm 2019-05-11 08:27:11.000000000 +0000 @@ -1,5 +1,5 @@ package YAML; -our $VERSION = '1.27'; +our $VERSION = '1.29'; use YAML::Mo; diff -Nru libyaml-perl-1.27/lib/YAML.pod libyaml-perl-1.29/lib/YAML.pod --- libyaml-perl-1.27/lib/YAML.pod 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/lib/YAML.pod 2019-05-11 08:27:11.000000000 +0000 @@ -12,7 +12,7 @@ =head1 VERSION -This document describes L version B<1.27>. +This document describes L version B<1.29>. =head1 NOTE @@ -405,6 +405,10 @@ C. Since this is potentially risky, only use this option if you know where your YAML has been. +LoadCode must be enabled also to use the feature of evaluating typeglobs +(because with the typeglob feature you would be able to set the variable +C<$YAML::LoadCode> from a YAML file). + =item Preserve When set to true, this option tells the Loader to load hashes into YAML::Node @@ -716,7 +720,7 @@ =head1 COPYRIGHT AND LICENSE -Copyright 2001-2018. Ingy döt Net. +Copyright 2001-2019. Ingy döt Net. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. diff -Nru libyaml-perl-1.27/LICENSE libyaml-perl-1.29/LICENSE --- libyaml-perl-1.27/LICENSE 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/LICENSE 2019-05-11 08:27:11.000000000 +0000 @@ -1,4 +1,4 @@ -This software is copyright (c) 2018 by Ingy döt Net. +This software is copyright (c) 2019 by Ingy döt Net. This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself. @@ -12,7 +12,7 @@ --- The GNU General Public License, Version 1, February 1989 --- -This software is Copyright (c) 2018 by Ingy döt Net. +This software is Copyright (c) 2019 by Ingy döt Net. This is free software, licensed under: @@ -272,7 +272,7 @@ --- The Artistic License 1.0 --- -This software is Copyright (c) 2018 by Ingy döt Net. +This software is Copyright (c) 2019 by Ingy döt Net. This is free software, licensed under: diff -Nru libyaml-perl-1.27/Makefile.PL libyaml-perl-1.29/Makefile.PL --- libyaml-perl-1.27/Makefile.PL 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/Makefile.PL 2019-05-11 08:27:11.000000000 +0000 @@ -1,4 +1,4 @@ -# This file was automatically generated by Dist::Zilla::Plugin::MakeMaker v6.010. +# This file was automatically generated by Dist::Zilla::Plugin::MakeMaker v6.012. use strict; use warnings; @@ -23,7 +23,7 @@ "Test::More" => "0.88", "Test::YAML" => "1.05" }, - "VERSION" => "1.27", + "VERSION" => "1.29", "test" => { "TESTS" => "t/*.t" } diff -Nru libyaml-perl-1.27/MANIFEST libyaml-perl-1.29/MANIFEST --- libyaml-perl-1.27/MANIFEST 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/MANIFEST 2019-05-11 08:27:11.000000000 +0000 @@ -1,4 +1,4 @@ -# This file was automatically generated by Dist::Zilla::Plugin::Manifest v6.010. +# This file was automatically generated by Dist::Zilla::Plugin::Manifest v6.012. CONTRIBUTING Changes LICENSE diff -Nru libyaml-perl-1.27/META.json libyaml-perl-1.29/META.json --- libyaml-perl-1.27/META.json 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/META.json 2019-05-11 08:27:11.000000000 +0000 @@ -4,7 +4,7 @@ "Ingy d\u00f6t Net " ], "dynamic_config" : 0, - "generated_by" : "Dist::Zilla version 6.010, CPAN::Meta::Converter version 2.150010", + "generated_by" : "Dist::Zilla version 6.012, CPAN::Meta::Converter version 2.150010", "license" : [ "perl_5" ], @@ -58,7 +58,8 @@ "web" : "https://github.com/ingydotnet/yaml-pm" } }, - "version" : "1.27", + "version" : "1.29", + "x_generated_by_perl" : "v5.24.1", "x_serialization_backend" : "Cpanel::JSON::XS version 4.02" } diff -Nru libyaml-perl-1.27/META.yml libyaml-perl-1.29/META.yml --- libyaml-perl-1.27/META.yml 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/META.yml 2019-05-11 08:27:11.000000000 +0000 @@ -10,7 +10,7 @@ configure_requires: ExtUtils::MakeMaker: '0' dynamic_config: 0 -generated_by: 'Dist::Zilla version 6.010, CPAN::Meta::Converter version 2.150010' +generated_by: 'Dist::Zilla version 6.012, CPAN::Meta::Converter version 2.150010' license: perl meta-spec: url: http://module-build.sourceforge.net/META-spec-v1.4.html @@ -28,5 +28,6 @@ bugtracker: https://github.com/ingydotnet/yaml-pm/issues homepage: https://github.com/ingydotnet/yaml-pm repository: https://github.com/ingydotnet/yaml-pm.git -version: '1.27' +version: '1.29' +x_generated_by_perl: v5.24.1 x_serialization_backend: 'YAML::Tiny version 1.73' diff -Nru libyaml-perl-1.27/README libyaml-perl-1.29/README --- libyaml-perl-1.27/README 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/README 2019-05-11 08:27:11.000000000 +0000 @@ -4,7 +4,7 @@ VERSION - This document describes YAML version 1.27. + This document describes YAML version 1.29. NOTE @@ -394,6 +394,10 @@ eval(). Since this is potentially risky, only use this option if you know where your YAML has been. + LoadCode must be enabled also to use the feature of evaluating + typeglobs (because with the typeglob feature you would be able to set + the variable $YAML::LoadCode from a YAML file). + Preserve When set to true, this option tells the Loader to load hashes into @@ -706,7 +710,7 @@ COPYRIGHT AND LICENSE - Copyright 2001-2018. Ingy döt Net. + Copyright 2001-2019. Ingy döt Net. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. diff -Nru libyaml-perl-1.27/t/load-tests.t libyaml-perl-1.29/t/load-tests.t --- libyaml-perl-1.27/t/load-tests.t 2018-11-03 13:01:42.000000000 +0000 +++ libyaml-perl-1.29/t/load-tests.t 2019-05-11 08:27:11.000000000 +0000 @@ -428,8 +428,12 @@ - &b/2 b - &c_3 c - &d-4 d +- *a.1 +- *b/2 +- *c_3 +- *d-4 +++ perl -['a', 'b', 'c', 'd'] +['a', 'b', 'c', 'd', 'a', 'b', 'c', 'd'] === Compact nested block sequences +++ yaml