From cb509e026033537e77f0eb5873a47131a1d3bf68 Mon Sep 17 00:00:00 2001 From: "Andrei G." Date: Fri, 20 Feb 2026 03:36:44 +0100 Subject: [PATCH 1/2] release: prepare v0.4.4 --- CHANGELOG.md | 23 ++++++++++++++++++++++- Cargo.lock | 6 +++--- Cargo.toml | 2 +- crates/feedparser-rs-node/package.json | 2 +- crates/feedparser-rs-py/pyproject.toml | 2 +- 5 files changed, 28 insertions(+), 7 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index c4b27b3..87fe890 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,26 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [0.4.4] - 2026-02-20 + +### Fixed +- Handle XML entity references (e.g. `&`) in element text, matching Python feedparser behavior (#59) + +### Changed +- Update `pyo3` from 0.27.2 to 0.28.x to fix memory corruption vulnerability RUSTSEC-2026-0013 (#51, #62) +- Switch CI security audit from `npm audit` to `pnpm audit` for correct override handling (#62) +- Bump `minimatch` to >=10.2.1 to resolve ReDoS vulnerability GHSA-3ppc-4f35-3m26 (#62) +- Upgrade `@biomejs/biome` to 2.4.0 (#49, #54, #57) +- Make Rust coverage upload non-blocking in CI +- Bump `lewagon/wait-on-check-action` from 1.3.4 to 1.5.0 (#50) +- Add dependabot auto-merge workflow + +### Dependencies +- Bump `bytes` from 1.11.0 to 1.11.1 (#52) +- Bump `memchr` from 2.7.6 to 2.8.0 (#56) +- Bump `thiserror` in the patch-updates group (#48) +- Bump patch-updates group with multiple updates (#53, #55, #58) + ## [0.4.3] - 2026-01-15 ### Added @@ -187,7 +207,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Comprehensive test coverage - Documentation with examples -[Unreleased]: https://github.com/bug-ops/feedparser-rs/compare/v0.4.3...HEAD +[Unreleased]: https://github.com/bug-ops/feedparser-rs/compare/v0.4.4...HEAD +[0.4.4]: https://github.com/bug-ops/feedparser-rs/compare/v0.4.3...v0.4.4 [0.4.3]: https://github.com/bug-ops/feedparser-rs/compare/v0.4.2...v0.4.3 [0.4.2]: https://github.com/bug-ops/feedparser-rs/compare/v0.4.1...v0.4.2 [0.4.1]: https://github.com/bug-ops/feedparser-rs/compare/v0.4.0...v0.4.1 diff --git a/Cargo.lock b/Cargo.lock index 2a59abc..d3c064b 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -600,7 +600,7 @@ checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f" [[package]] name = "feedparser-rs" -version = "0.4.3" +version = "0.4.4" dependencies = [ "ammonia", "chrono", @@ -623,7 +623,7 @@ dependencies = [ [[package]] name = "feedparser-rs-node" -version = "0.4.3" +version = "0.4.4" dependencies = [ "feedparser-rs", "napi", @@ -633,7 +633,7 @@ dependencies = [ [[package]] name = "feedparser-rs-py" -version = "0.4.3" +version = "0.4.4" dependencies = [ "chrono", "feedparser-rs", diff --git a/Cargo.toml b/Cargo.toml index 89e7d51..fb613b6 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -7,7 +7,7 @@ members = [ resolver = "2" [workspace.package] -version = "0.4.3" +version = "0.4.4" edition = "2024" rust-version = "1.88.0" authors = ["bug-ops"] diff --git a/crates/feedparser-rs-node/package.json b/crates/feedparser-rs-node/package.json index 6895afa..e935023 100644 --- a/crates/feedparser-rs-node/package.json +++ b/crates/feedparser-rs-node/package.json @@ -1,6 +1,6 @@ { "name": "feedparser-rs", - "version": "0.4.3", + "version": "0.4.4", "description": "High-performance RSS/Atom/JSON Feed parser for Node.js", "main": "index.js", "types": "index.d.ts", diff --git a/crates/feedparser-rs-py/pyproject.toml b/crates/feedparser-rs-py/pyproject.toml index 7e31e1b..adfc02b 100644 --- a/crates/feedparser-rs-py/pyproject.toml +++ b/crates/feedparser-rs-py/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "maturin" [project] name = "feedparser-rs" -version = "0.4.3" +version = "0.4.4" description = "High-performance RSS/Atom/JSON Feed parser with feedparser-compatible API" readme = "README.md" license = { text = "MIT OR Apache-2.0" } From 2c2441ec40de452d86d89d87d10fc8402b957db6 Mon Sep 17 00:00:00 2001 From: "Andrei G." Date: Fri, 20 Feb 2026 14:10:10 +0100 Subject: [PATCH 2/2] release: update changelog with PR #60 reference --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 87fe890..1b202a3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,7 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [0.4.4] - 2026-02-20 ### Fixed -- Handle XML entity references (e.g. `&`) in element text, matching Python feedparser behavior (#59) +- Handle XML entity references (e.g. `&`) in element text, matching Python feedparser behavior (#59, #60) ### Changed - Update `pyo3` from 0.27.2 to 0.28.x to fix memory corruption vulnerability RUSTSEC-2026-0013 (#51, #62)