v0.1.2

What's Changed

• Make the deny-all entity resolver a non-overridable floor (Xerces and Android) by @ppkarwasz in #29
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #27
• Extract HardeningDocumentBuilderFactory and reuse the resolver floor by @ppkarwasz in #30
• Add regression test for external schema-location properties by @ppkarwasz in #31
• Add SECURITY.md with reporting policy and threat model by @ppkarwasz in #32
• Fix XInclude hardening: block at resolver level by @thientd in #33
• Enforce no-host-side-effects promises and clarify threat model by @ppkarwasz in #35
• Simplify stock JDK XInclude hardening by @ppkarwasz in #36
• Use a neutral SSRF leak marker in tests by @ppkarwasz in #38

New Contributors

• @thientd made their first contribution in #33

Full Changelog: v0.1.1...v0.1.2

v0.1.1

What's Changed

• Fix JPMS and OSGi resolution of optional dependencies by @ppkarwasz in #23

Full Changelog: v0.1.0...v0.1.1

v0.1.0

What's Changed

• fix: make ExternalSchemaTest more reliable by @ppkarwasz in #1
• fix: make DTD-based attack tests more reliable by @ppkarwasz in #2
• Add explicit version for Moditect plugin by @ppkarwasz in #3
• Tag tests according to JAXP interface by @ppkarwasz in #4
• Relax restrictions on DOCTYPE by @ppkarwasz in #5
• Move all classes to single package by @ppkarwasz in #6
• Remove the XmlProvider SPI by @ppkarwasz in #7
• Add support for Xalan by @ppkarwasz in #8
• Adds support for Android by @ppkarwasz in #9
• Add Android tests and rationalise test suite by @ppkarwasz in #10
• Align StAX hardening with the SAX/DOM external-subset contract by @ppkarwasz in #11
• Change project coordinates to eu.copernik:copernik-xml-factory by @ppkarwasz in #12
• build(deps): bump org.apache.commons:commons-parent from 98 to 99 by @dependabot[bot] in #13
• build(deps-dev): bump org.sonatype.central:central-publishing-maven-plugin from 0.9.0 to 0.10.0 by @dependabot[bot] in #14
• build(deps-dev): bump org.codehaus.mojo:flatten-maven-plugin from 1.7.0 to 1.7.3 by @dependabot[bot] in #15
• Prepare release 0.1.0 by @ppkarwasz in #16
• Fix release artifacts for Maven Central by @ppkarwasz in #17
• Fix malformed paragraph tag in schema factory Javadoc by @ppkarwasz in #18
• Skip the inherited source-release assembly by @ppkarwasz in #19

New Contributors

• @ppkarwasz made their first contribution in #1
• @dependabot[bot] made their first contribution in #13

Full Changelog: https://github.com/copernik-eu/copernik-xml-factory/commits/v0.1.0