From dedb7948fc3e1dfcd4b19115977fca97c21f0447 Mon Sep 17 00:00:00 2001 From: David MacCormack <35852337+dmaccormack@users.noreply.github.com> Date: Mon, 6 Sep 2021 22:07:01 -0400 Subject: [PATCH] doc: Release v2.0.2 --- CHANGELOG.md | 9 +++++++++ SECURITY.md | 12 ++++++------ 2 files changed, 15 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index e1999fc5..ec8e7d89 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,14 @@ # ChangeLog (jsonurl-java) +## v2.0.2 + +### Bug Fixes + +* Fix ampersand decode bug ([@dmaccormack](https://github.com/dmaccormack "Link to profile for user dmaccormack")) +* Fix bug in JsonUrlTestAppender.addCodePoint() ([@dmaccormack](https://github.com/dmaccormack "Link to profile for user dmaccormack")) +* Fix NPE when appending a null String ([@dmaccormack](https://github.com/dmaccormack "Link to profile for user dmaccormack")) +* Fix bug writing number-like strings that include plus, with AQF ([@dmaccormack](https://github.com/dmaccormack "Link to profile for user dmaccormack")) + ## v2.0.1 ### Overview diff --git a/SECURITY.md b/SECURITY.md index 48fc1a6b..48785502 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -4,23 +4,23 @@ The following versions are actively supported, including security updates. -| Version | Supported | -| --------- | ------------------ | -| 2.0.1 | :white_check_mark: | -| < 2.0.1 | :x: | +| Version | Supported | +| ------- | ------------------ | +| 2.0.2 | :white_check_mark: | +| < 2.0.2 | :x: | ## Reporting a Vulnerability First: thank you for engaging in responsible disclosure! If you beleive you've found a vulnerability or other security related issue -please email a complete description to jsonurl.org ``at'' gmail.com. +please email a complete description to jsonurl.org \`\`at'' gmail.com. If the issue is accepted a discussion will begin on a private [Zulip][zulip] channel, and you may be be invited to participate. Once a fix is in place, and a new release is made, a GitHub security advisory will be created to make the information public. -If the vulnerability is declined a Github issue may still be created, +If the vulnerability is declined a Github issue may still be created, and/or the Zulip channel may be made public, to make the discussion public if the repository owners see value in that. Otherwise, we appreciate your engagement in responsible disclosure and you are now free to disclose