This is an automated email from the ASF dual-hosted git repository. colegreer pushed a commit to branch 3.6-dev in repository https://gitbox.apache.org/repos/asf/tinkerpop.git
commit 1f99a0a7de4fa708602771420e6acc1dccb3afc7 Merge: 167e86d63b 08559317c7 Author: Cole-Greer <cole.gr...@improving.com> AuthorDate: Mon Jul 17 14:51:34 2023 -0700 Merge branch '3.5-dev' into 3.6-dev CHANGELOG.asciidoc | 2 + docs/src/upgrade/release-3.5.x.asciidoc | 14 ++++ .../structure/io/graphson/GraphSONMapper.java | 25 +++++- .../io/graphson/GraphSONStreamConstraintsTest.java | 93 ++++++++++++++++++++++ .../ser/AbstractGraphSONMessageSerializerV1d0.java | 16 ++++ .../ser/AbstractGraphSONMessageSerializerV2d0.java | 16 ++++ .../gremlin/driver/ClusterConfigTest.java | 72 +++++++++++++++++ .../AbstractGraphSONMessageSerializerV1d0Test.java | 53 ++++++++++++ .../AbstractGraphSONMessageSerializerV2d0Test.java | 53 ++++++++++++ gremlin-shaded/pom.xml | 2 +- pom.xml | 5 +- 11 files changed, 348 insertions(+), 3 deletions(-) diff --cc CHANGELOG.asciidoc index 33032653ff,bd05427e69..c19b3ea958 --- a/CHANGELOG.asciidoc +++ b/CHANGELOG.asciidoc @@@ -362,7 -23,9 +362,9 @@@ image::https://raw.githubusercontent.co [[release-3-5-7]] === TinkerPop 3.5.7 (Release Date: NOT OFFICIALLY RELEASED YET) + * Bumped `jackson-databind` to 2.15.2 to fix security vulnerability. + * Introduced `maxNumberLength`, `maxStringLength`, and `maxNestingDepth` configs for `GraphSON` serializers. -* Fixed a memory leak in the Gremlin.Net driver that only occurred if a CancellationToken was provided. +* Fixed a memory leak in the Gremlin.Net driver that only occurred if a `CancellationToken` was provided. * Fixed gremlin-python `Client` problem where calling `submit()` after` `close()` would hang the system. * Added `gremlin.spark.dontDeleteNonEmptyOutput` to stop deleting the output folder if it is not empty in `spark-gremlin`. * Fixed a bug in `SubgraphStrategy` where the vertex property filter produced errors if a `Vertex` was missing the key provided to `by()` as a token.