Merge remote-tracking branch 'origin/master'

README.md

@@ -3,6 +3,26 @@
 [![Build Status](https://travis-ci.org/dom4j/dom4j.svg?branch=master)](https://travis-ci.org/dom4j/dom4j)
 [![Javadocs](https://javadoc.io/badge/org.dom4j/dom4j.svg)](https://javadoc.io/doc/org.dom4j/dom4j)
 
-# DOM4J
+# dom4j
 
-DOM4J is an open source framework for processing XML which is integrated with XPath and fully supports DOM, SAX, JAXP and the Java platform such as Java 2 Collections.
+`dom4j` is an open source framework for processing XML which is integrated with XPath and fully supports DOM, SAX, JAXP and the Java platform such as Java 2 Collections.
+
+# News
+
+## Version 2.1.1 released
+Bug fix release.
+
+### Potential breaking changes
+* If you use some optional dependency of dom4j (for example Jaxen, xsdlib etc.), you need to specify an explicit dependency on it in your project. They are no longer marked as a mandatory transitive dependency by dom4j.
+
+### Fixed issues
+* #28 Possible vulnerability of `DocumentHelper.parseText()` to XML injection (reported by @s0m30ne)
+* #34 CVS directories left in the source tree (reported by @ebourg)
+* #38 XMLWriter does not escape supplementary unicode characters correctly (reported by @abenkovskii)
+* #39 writer.writeOpen(x) doesn't write namespaces (reported by @borissmidt)
+* #40 concurrency problem with `QNameCache`  (@jbennett2091)
+* #43 and #46 all dependencies are optional (reported by @Zardoz89 and @vmassol)
+* #44 SAXReader: hardcoded namespace features (reported by @philippeu)
+* #48 validate `QName`s (reported by @mario-areias)
+
+Version 2.0.3 (for Java 5–7) is on the way.