Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ For more information please visit the [website](https://pebbletemplates.io).

- If you do not provide a custom Loader, Pebble will now use only a `ClasspathLoader` by default, same as the spring autoconfiguration.
Before that, it would have used an instance of the `DelegatingLoader` which consists of a `ClasspathLoader` and a `FileLoader` behind the scenes to find your templates.
- Modify the `FileLoader` to use a mandatory sandboxed base directory parameter.
- Modify the `FileLoader` to use a mandatory base directory parameter.

# Breaking changes in version 4.0.x

Expand Down
15 changes: 10 additions & 5 deletions docs/src/orchid/resources/changelog/v4_1_0.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,15 +3,20 @@ version: '4.1.0'
---

# BREAKING CHANGES
- Modify the `FileLoader` to use a mandatory sandboxed base directory parameter. (#715)
- If you do not provide a custom Loader, Pebble will now use only a `ClasspathLoader` by default, same as the spring autoconfiguration. (#715)
- If you do not provide a custom Loader, Pebble will now use only a `ClasspathLoader` by default, same as the spring autoconfiguration.
Before that, it would have used an instance of the `DelegatingLoader` which consists of a `ClasspathLoader` and a `FileLoader` behind the scenes to find your templates.
- Modify the `FileLoader` to use a mandatory base directory parameter.

# Security
- Fix [CVE-2025-1686](https://nvd.nist.gov/vuln/detail/CVE-2025-1686) (#715)

# New Features
- Use a default existing format of `yyyy-MM-dd'T'HH:mm:ssZ` when using date filter with a string (#677)
- Look for exact method / field match when doing reflection. Look for method get/is/has if none match
- Update some dependencies (#709)
- Look for exact method / field match when doing reflection. Look for method get/is/has if none match (#712)
- Support dynamic named arguments (#741)

# Bug Fixes
- NaN must return false instead of throwing an exception (#695)
- [CVE-2025-1686](https://nvd.nist.gov/vuln/detail/CVE-2025-1686).

# Dependency Upgrades
- Upgrade to SLF4J 2.0.17 (#709)