Release v2.2.10

Release v2.2.10

Changes

• Merge pull request #172 from txjmb/claude/dependabot-security-quality-f4s8uj (d1a9574)
• docs: Add 2.2.10 changelog entries (3c06abc)
• Merge pull request #171 from txjmb/claude/dependabot-security-quality-f4s8uj (a4c672b)
• ci: Move CodeQL to default setup; keep the rest of Security Scanning (519c07b)
• docs: Trim security policy to supported versions and reporting (aa5769c)
• docs: Add security policy (56fe0df)
• ci: Exclude target/ from CodeQL Rust extraction (7df5176)
• Merge pull request #170 from txjmb/claude/dependabot-security-quality-f4s8uj (eb9a6bb)
• ci: Stop masking CodeQL analysis failures (912366c)
• fix(quality): Resolve all 18 open CodeQL code-scanning alerts (a469c1a)
• fix(deps): Resolve dependency security alerts and audit uv.lock in CI (9f41c52)
• Merge pull request #169 from txjmb/dependabot/cargo/rust-dependencies-722c7a5dc4 (ba5b4ea)
• chore(deps): Bump clap in the rust-dependencies group (0d19def)
• Merge pull request #168 from txjmb/dependabot/cargo/rust-dependencies-9a04a1746e (09c352f)
• chore(deps): Bump indexmap (f4cd294)
• Update README.md (a590d71)
• Update jsonata-core version to 2.2.9 (da7e15f)
• Merge pull request #166 from txjmb/dependabot/github_actions/github/codeql-action-4.37.9 (2438fb8)
• Merge pull request #167 from Tangerinedream13/maria-branch (1e94f10)
• docs: add CONTRIBUTORS.md (f1fe7f7)
• chore(deps): Bump github/codeql-action from 4.37.3 to 4.37.9 (45e3ad3)
• Update README with performance chart and upgrade info (8238588)
• Merge pull request #165 from txjmb/claude/lectrec-closure-issue-n2ti8v (37b7df2)
• fix(benchmarks): explain the two silent fallbacks in the chart generator's version lookup (04bc0bc)
• Merge pull request #163 from txjmb/dependabot/cargo/rust-dependencies-b616352f5e (74a79e7)
• docs(readme): add an auto-generated performance chart from the realistic-workload benchmarks (8ca8d97)
• Merge pull request #164 from txjmb/claude/lectrec-closure-issue-n2ti8v (54511e8)
• fix(docs): publish the released docs line with its own benchmark numbers, and allow refreshing it without a release (4ca3cfc)
• Refine wording and clarity in README (5fdc03f)
• docs(benchmarks): update performance.md (manual run, 7b823c5) (46ab68e)
• Merge pull request #162 from txjmb/claude/lectrec-closure-issue-n2ti8v (7b823c5)
• chore(deps): Bump simd-json in the rust-dependencies group (35412e1)
• Merge main: v2.2.9-regenerated performance.md, relabels re-applied (0ecc740)
• feat(benchmarks): per-row pure-Rust jsonata-core column; relabel the misleading 'rust' column (729acd4)
• docs(benchmarks): update performance.md for v2.2.9 (08374a2)

Test Suite Compatibility

See the README for the current
reference-suite pass count -- this changelog no longer hardcodes a number here, since a
stale hardcoded count is exactly the kind of bug this project has previously shipped
and had to correct.

Installation

pip install jsonatapy==2.2.10

Verification

import jsonatapy
print(jsonatapy.__version__)  # Should print: 2.2.10