From: Mike Dalessio <mike.dalessio@...>
Date: 2012-06-12T00:10:32+09:00
Subject: [ANN] nokogiri 1.5.4 Released

--e89a8f2351b52be1b304c233c03f
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

nokogiri version 1.5.4 has been released!

* <http://nokogiri.org>
* <http://github.com/tenderlove/nokogiri/wikis>
* <http://github.com/tenderlove/nokogiri/tree/master>
* <http://groups.google.com/group/nokogiri-talk>
* <http://github.com/tenderlove/nokogiri/issues>

Nokogiri (=E9=8B=B8) is an HTML, XML, SAX, and Reader parser.  Among Nokogi=
ri's
many features is the ability to search documents via XPath or CSS3
selectors.

XML is like violence - if it doesn=E2=80=99t solve your problems, you are n=
ot using
enough of it.

Changes:

## 1.5.4 / unreleased

* Features

  * The "nokogiri" script now has more verbose output when passed the
`--rng` option. #675 (Thanks, Dan Radez!)
  * Build support on hardened Debian systems that use
`-Werror=3Dformat-security`. #680.
  * Better build support for systems with pkg-config. #584
  * Better build support for systems with multiple iconv installations.

* Bugfixes

  * Segmentation fault when creating a comment node for a DocumentFragment.
#677, #678.
  * Treat '.' as xpath in at() and search(). #690

  * [MRI, Security] Default parse options for XML documents were
    changed to not make network connections during document parsing,
    to avoid XXE vulnerability. #693

    To re-enable this behavior, the configuration method `nononet` may
    be called, like this:

    Nokogiri::XML::Document.parse(xml) { |config| config.nononet }

    Insert your own joke about double-negatives here.

--e89a8f2351b52be1b304c233c03f
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div>nokogiri version 1.5.4 has been released!</div><div><br></div><div>* &=
lt;<a href=3D"http://nokogiri.org">http://nokogiri.org</a>&gt;</div><div>* =
&lt;<a href=3D"http://github.com/tenderlove/nokogiri/wikis">http://github.c=
om/tenderlove/nokogiri/wikis</a>&gt;</div>
<div>* &lt;<a href=3D"http://github.com/tenderlove/nokogiri/tree/master">ht=
tp://github.com/tenderlove/nokogiri/tree/master</a>&gt;</div><div>* &lt;<a =
href=3D"http://groups.google.com/group/nokogiri-talk">http://groups.google.=
com/group/nokogiri-talk</a>&gt;</div>
<div>* &lt;<a href=3D"http://github.com/tenderlove/nokogiri/issues">http://=
github.com/tenderlove/nokogiri/issues</a>&gt;</div><div><br></div><div>Noko=
giri (=E9=8B=B8) is an HTML, XML, SAX, and Reader parser. =C2=A0Among Nokog=
iri&#39;s</div>
<div>many features is the ability to search documents via XPath or CSS3 sel=
ectors.</div><div><br></div><div>XML is like violence - if it doesn=E2=80=
=99t solve your problems, you are not using</div><div>enough of it.</div><d=
iv><br>
</div><div>Changes:</div><div><br></div><div>## 1.5.4 / unreleased</div><di=
v><br></div><div>* Features</div><div><br></div><div>=C2=A0 * The &quot;nok=
ogiri&quot; script now has more verbose output when passed the `--rng` opti=
on. #675 (Thanks, Dan Radez!)</div>
<div>=C2=A0 * Build support on hardened Debian systems that use `-Werror=3D=
format-security`. #680.</div><div>=C2=A0 * Better build support for systems=
 with pkg-config. #584</div><div>=C2=A0 * Better build support for systems =
with multiple iconv installations.</div>
<div><br></div><div>* Bugfixes</div><div><br></div><div>=C2=A0 * Segmentati=
on fault when creating a comment node for a DocumentFragment. #677, #678.</=
div><div>=C2=A0 * Treat &#39;.&#39; as xpath in at() and search(). #690</di=
v><div>
<br></div><div>=C2=A0 * [MRI, Security] Default parse options for XML docum=
ents were</div><div>=C2=A0 =C2=A0 changed to not make network connections d=
uring document parsing,</div><div>=C2=A0 =C2=A0 to avoid XXE vulnerability.=
 #693</div><div><br></div>
<div>=C2=A0 =C2=A0 To re-enable this behavior, the configuration method `no=
nonet` may</div><div>=C2=A0 =C2=A0 be called, like this:</div><div><br></di=
v><div>=C2=A0 =C2=A0 Nokogiri::XML::Document.parse(xml) { |config| config.n=
ononet }</div><div>=C2=A0 =C2=A0=C2=A0</div>
<div>=C2=A0 =C2=A0 Insert your own joke about double-negatives here.</div><=
div><br></div>

--e89a8f2351b52be1b304c233c03f--