- Armor against entity expansion attacks
- Improve YAML loading performance by using CSafeLoader where available
- Require PyYAML 5.3.1 or newer
- Test and release infrastructure improvements
if a port needs 2.x then set MODPY_VERSION=${MODPY_DEFAULT_VERSION_2}.
This commit doesn't change any versions currently used; it may be that
some ports have MODPY_DEFAULT_VERSION_2 but don't require it, those
should be cleaned up in the course of updating ports where possible.
Python module ports providing py3-* packages should still use
FLAVOR=python3 so that we don't have a mixture of dependencies some
using ${MODPY_FLAVOR} and others not.
- Add support for xmltodict force_list definition for xq CLI (#95)
- Support explicit doc markers (#93)
- Ensure proper ordering of help messages (#90)
- Fix interrupted release
- Fix documentation build
- Add -Y/–yaml-roundtrip for preserving YAML styles and tags
- Filter out -C and separate commingled yq and jq short options
- Set default block sequence indentation to 2 spaces, –indentless for 0
- Make main body of yq callable as a library function
- Test and release infrastructure updates
yq takes YAML input, converts it to JSON, and filters it through jq(1).
No output conversion is done by default. Command line arguments are forwarded.
yq exits 1 on YAML parsing errors, otherwise jq's exit code is forwarded.
YAML tags in the input are ignored (any nested data is treated as untagged).
Key order is preserved.
xq behaves like yq but takes XML input. Multiple XML documents can be passed
in separate files/streams. Entity expansion and DTD resolution is disabled to
avoid XML parsing vulnerabilities.
Feedback rsadowski kmos
OK kmos
