build(deps): bump jsoup from 1.13.1 to 1.14.3 #288

Merged

dependabot[bot] merged 2 commits from dependabot/gradle/org.jsoup-jsoup-1.14.3 into main

2021-12-11 11:41:29 +00:00

dependabot[bot] commented

2021-09-30 16:07:53 +00:00

(Migrated from github.com)

Bumps jsoup from 1.13.1 to 1.14.3.

Release notes

Sourced from jsoup's releases.

jsoup 1.14.3

jsoup 1.14.3 is out now, adding native XPath selector support, improved \<template> support, and also includes a bunch of bug fixes, improvements, and performance enhancements.

See the release announcement for the full changelog.

jsoup 1.14.2

Caught by the fuzz! jsoup 1.14.2 is out now, and includes a set of parser bug fixes and improvements for handling rough HTML and XML, as identified by the Jazzer JVM fuzzer. This release also includes other fixes and improvements.

See the release announcement for the full changelog.

jsoup 1.14.1

jsoup 1.14.1 is out now, with simple request session management, increased parse robustness, and a ton of other improvements, speed-ups, and bug fixes.

See the full announcement for all the details on what's changed.

Changelog

Sourced from jsoup's changelog.

jsoup changelog

*** Release 1.14.3 [PENDING]

Improvement: added native XPath support in Element#selectXpath(String) jhy/jsoup#1629

Improvement: added full support for the <template> tag to the HTML5 parser spec. jhy/jsoup#1634

Improvement: added support in CharacterReader to track newlines, so that parse errors can be reported more intuitively. jhy/jsoup#1624

Improvement: tracked parse errors now have more details, including the erroneous token, to help clarify the errors.

Improvement: speed and memory optimizations for the :has(subquery) selector.

Improvement: the :contains(text) and :containsOwn(text) selectors are now whitespace normalized, aligning to the document text that they are matching against. jhy/jsoup#876

Improvement: in Element, speed optimized adopting all of an element's child nodes into a currently empty element. Improves the HTML adoption agency algorithm when adopting elements with many children. jhy/jsoup#1638

Improvement: increased the parse speed when in RCData (e.g. ) and unescaped tokens are found, by memoizing the scan and reducing GC. jhy/jsoup#1644

Improvement: when parsing custom tags (in HTML or XML), added a flyweight cache on Tag.valueOf(name) to reduce memory overhead when many tags are repeated. Also tuned other areas of the parser when many very deeply stacked custom elements were present. jhy/jsoup#1646

Bugfix: when tracking errors or checking for validity in the Cleaner, errors were incorrectly raised for missing optional closing tags.

Bugfix: the OSGi bundle meta-data incorrectly set a version on the import of javax.annotation (used as a build-time dependency for nullability assertions). jhy/jsoup#1616

Bugfix: the Attributes::equals() method was sensitive to the order of its contents, but it should not be. jhy/jsoup#1492

Bugfix: when the HTML parser was configured to preserve case, Element text methods would miss adding whitespace for "BR" tags.

Bugfix: attribute names are now normalized & validated correctly for the specific output syntax (HTML or XML). Previously, syntactically invalid attribute names could be output by the html() methods. Such attributes are still available in the DOM, and will be normalized if possible on output.

... (truncated)

Commits

0006162 [maven-release-plugin] prepare release jsoup-1.14.3
80a9396 Javadoc update for XPath
0d1f04a Javadoc update to add @since 1.14.3
89de796 Bump junit-jupiter from 5.8.0 to 5.8.1 (#1645)
b14eb2a Test case and change note for parser improvements incl tag flyweight
4b46397 Short-circuit tag scans for custom tags
d3f4e31 Flyweight Tag.valueOf in TreeBuilder
a8df71b Limit the stack depth we scan looking for mis-closed DD / DT tags
e4ae6fa Per spec, only foster incoming nodes if current node is a table foster target
41932fe JDK 17 changelog
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [jsoup](https://github.com/jhy/jsoup) from 1.13.1 to 1.14.3. <details> <summary>Release notes</summary> Sourced from <a href="https://github.com/jhy/jsoup/releases">jsoup's releases</a>. <blockquote> <h2>jsoup 1.14.3</h2> jsoup 1.14.3 is out now, adding native XPath selector support, improved <code>\<template></code> support, and also includes a bunch of bug fixes, improvements, and performance enhancements. See the <a href="https://jsoup.org/news/release-1.14.3">release announcement</a> for the full changelog. <h2>jsoup 1.14.2</h2> Caught by the fuzz! jsoup 1.14.2 is out now, and includes a set of parser bug fixes and improvements for handling rough HTML and XML, as identified by the Jazzer JVM fuzzer. This release also includes other fixes and improvements. See the <a href="https://jsoup.org/news/release-1.14.2">release announcement</a> for the full changelog. <h2>jsoup 1.14.1</h2> jsoup 1.14.1 is out now, with simple request session management, increased parse robustness, and a ton of other improvements, speed-ups, and bug fixes. See the full <a href="https://jsoup.org/news/release-1.14.1">announcement</a> for all the details on what's changed. </blockquote> </details> <details> <summary>Changelog</summary> Sourced from <a href="https://github.com/jhy/jsoup/blob/master/CHANGES">jsoup's changelog</a>. <blockquote> jsoup changelog *** Release 1.14.3 [PENDING] <ul> <li> Improvement: added native XPath support in Element#selectXpath(String) <a href="https://github-redirect.dependabot.com/jhy/jsoup/pull/1629">jhy/jsoup#1629</a> </li> <li> Improvement: added full support for the <template> tag to the HTML5 parser spec. <a href="https://github-redirect.dependabot.com/jhy/jsoup/issues/1634">jhy/jsoup#1634</a> </li> <li> Improvement: added support in CharacterReader to track newlines, so that parse errors can be reported more intuitively. <a href="https://github-redirect.dependabot.com/jhy/jsoup/pull/1624">jhy/jsoup#1624</a> </li> <li> Improvement: tracked parse errors now have more details, including the erroneous token, to help clarify the errors. </li> <li> Improvement: speed and memory optimizations for the :has(subquery) selector. </li> <li> Improvement: the :contains(text) and :containsOwn(text) selectors are now whitespace normalized, aligning to the document text that they are matching against. <a href="https://github-redirect.dependabot.com/jhy/jsoup/issues/876">jhy/jsoup#876</a> </li> <li> Improvement: in Element, speed optimized adopting all of an element's child nodes into a currently empty element. Improves the HTML adoption agency algorithm when adopting elements with many children. <a href="https://github-redirect.dependabot.com/jhy/jsoup/issues/1638">jhy/jsoup#1638</a> </li> <li> Improvement: increased the parse speed when in RCData (e.g. ) and unescaped  tokens are found, by memoizing the  scan and reducing GC. <a href="https://github-redirect.dependabot.com/jhy/jsoup/issues/1644">jhy/jsoup#1644</a> </li> <li> Improvement: when parsing custom tags (in HTML or XML), added a flyweight cache on Tag.valueOf(name) to reduce memory overhead when many tags are repeated. Also tuned other areas of the parser when many very deeply stacked custom elements were present. <a href="https://github-redirect.dependabot.com/jhy/jsoup/issues/1646">jhy/jsoup#1646</a> </li> <li> Bugfix: when tracking errors or checking for validity in the Cleaner, errors were incorrectly raised for missing optional closing tags. </li> <li> Bugfix: the OSGi bundle meta-data incorrectly set a version on the import of javax.annotation (used as a build-time dependency for nullability assertions). <a href="https://github-redirect.dependabot.com/jhy/jsoup/issues/1616">jhy/jsoup#1616</a> </li> <li> Bugfix: the Attributes::equals() method was sensitive to the order of its contents, but it should not be. <a href="https://github-redirect.dependabot.com/jhy/jsoup/issues/1492">jhy/jsoup#1492</a> </li> <li> Bugfix: when the HTML parser was configured to preserve case, Element text methods would miss adding whitespace for "BR" tags. </li> <li> Bugfix: attribute names are now normalized & validated correctly for the specific output syntax (HTML or XML). Previously, syntactically invalid attribute names could be output by the html() methods. Such attributes are still available in the DOM, and will be normalized if possible on output. </li> </ul>  </blockquote> ... (truncated) </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jhy/jsoup/commit/00061629b5b91f09afbfea7eae3710bb3253c5b9"><code>0006162</code></a> [maven-release-plugin] prepare release jsoup-1.14.3</li> <li><a href="https://github.com/jhy/jsoup/commit/80a939612f702962ffa7f0fd121fedc2040e0afe"><code>80a9396</code></a> Javadoc update for XPath</li> <li><a href="https://github.com/jhy/jsoup/commit/0d1f04a04ffc26592a8dda787a1fd0d707285e0f"><code>0d1f04a</code></a> Javadoc update to add <a href="https://github.com/since"><code>@since</code></a> 1.14.3</li> <li><a href="https://github.com/jhy/jsoup/commit/89de79670c77039a99177fe6f739ea6f675a3a59"><code>89de796</code></a> Bump junit-jupiter from 5.8.0 to 5.8.1 (<a href="https://github-redirect.dependabot.com/jhy/jsoup/issues/1645">#1645</a>)</li> <li><a href="https://github.com/jhy/jsoup/commit/b14eb2a26c3fcbaa9d95edb569692baa0283c4ca"><code>b14eb2a</code></a> Test case and change note for parser improvements incl tag flyweight</li> <li><a href="https://github.com/jhy/jsoup/commit/4b46397a3c6f18f88cac76c6e983e2aa6cbef230"><code>4b46397</code></a> Short-circuit tag scans for custom tags</li> <li><a href="https://github.com/jhy/jsoup/commit/d3f4e319e009f7af8f1305279495d05e8488b089"><code>d3f4e31</code></a> Flyweight Tag.valueOf in TreeBuilder</li> <li><a href="https://github.com/jhy/jsoup/commit/a8df71b3f520e528406655ab4a73c369c83d8aac"><code>a8df71b</code></a> Limit the stack depth we scan looking for mis-closed DD / DT tags</li> <li><a href="https://github.com/jhy/jsoup/commit/e4ae6faa38e3452a639961dbb834adcb2d104d2c"><code>e4ae6fa</code></a> Per spec, only foster incoming nodes if current node is a table foster target</li> <li><a href="https://github.com/jhy/jsoup/commit/41932fe2078f6c7c8414b0c71f65d6aa2d8d9a6d"><code>41932fe</code></a> JDK 17 changelog</li> <li>Additional commits viewable in <a href="https://github.com/jhy/jsoup/compare/jsoup-1.13.1...jsoup-1.14.3">compare view</a></li> </ul> </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.jsoup:jsoup&package-manager=gradle&previous-version=1.13.1&new-version=1.14.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>