diff --git a/README.md b/README.md index ade292403..5af9d8d18 100644 --- a/README.md +++ b/README.md @@ -10,7 +10,7 @@ For more information please visit the [website](https://pebbletemplates.io). - If you do not provide a custom Loader, Pebble will now use only a `ClasspathLoader` by default, same as the spring autoconfiguration. Before that, it would have used an instance of the `DelegatingLoader` which consists of a `ClasspathLoader` and a `FileLoader` behind the scenes to find your templates. -- Modify the `FileLoader` to use a mandatory sandboxed base directory parameter. +- Modify the `FileLoader` to use a mandatory base directory parameter. # Breaking changes in version 4.0.x diff --git a/docs/src/orchid/resources/changelog/v4_1_0.md b/docs/src/orchid/resources/changelog/v4_1_0.md index 4d168c1a2..4f9856218 100644 --- a/docs/src/orchid/resources/changelog/v4_1_0.md +++ b/docs/src/orchid/resources/changelog/v4_1_0.md @@ -3,15 +3,20 @@ version: '4.1.0' --- # BREAKING CHANGES -- Modify the `FileLoader` to use a mandatory sandboxed base directory parameter. (#715) -- If you do not provide a custom Loader, Pebble will now use only a `ClasspathLoader` by default, same as the spring autoconfiguration. (#715) +- If you do not provide a custom Loader, Pebble will now use only a `ClasspathLoader` by default, same as the spring autoconfiguration. Before that, it would have used an instance of the `DelegatingLoader` which consists of a `ClasspathLoader` and a `FileLoader` behind the scenes to find your templates. +- Modify the `FileLoader` to use a mandatory base directory parameter. + +# Security +- Fix [CVE-2025-1686](https://nvd.nist.gov/vuln/detail/CVE-2025-1686) (#715) # New Features - Use a default existing format of `yyyy-MM-dd'T'HH:mm:ssZ` when using date filter with a string (#677) -- Look for exact method / field match when doing reflection. Look for method get/is/has if none match -- Update some dependencies (#709) +- Look for exact method / field match when doing reflection. Look for method get/is/has if none match (#712) +- Support dynamic named arguments (#741) # Bug Fixes - NaN must return false instead of throwing an exception (#695) -- [CVE-2025-1686](https://nvd.nist.gov/vuln/detail/CVE-2025-1686). + +# Dependency Upgrades +- Upgrade to SLF4J 2.0.17 (#709)