4.1.0

BREAKING CHANGES

• If you do not provide a custom Loader, Pebble will now use only a ClasspathLoader by default, same as the spring autoconfiguration. Before that, it would have used an instance of the DelegatingLoader which consists of a ClasspathLoader and a FileLoader behind the scenes to find your templates.
• Modify the FileLoader to use a mandatory base directory parameter.

Security

• Fix CVE-2025-1686 (#715)

New Features

• Use a default existing format of yyyy-MM-dd'T'HH:mm:ssZ when using date filter with a string (#677)
• Look for exact method / field match when doing reflection. Look for method get/is/has if none match (#712)
• Support dynamic named arguments (#741)

Bug Fixes

• NaN must return false instead of throwing an exception (#695)

Dependency Upgrades

• Upgrade to SLF4J 2.0.17 (#709)