-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This release may require you to adjust you configuration when comparing files that use DTDs. When XMLUnit 2.6.0 has been release it was intended to disallow DTD parsing by default, but due to a bug still allowed it. This has now been fixed.
Full list of changes: * bumped xmlunit-assertj3's dependency on assert to 3.27.7. This is to make people aware of https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r XMLUnit itself does not use the affected code in AssertJ so the upgrade is not strictly necessary - and this is why the xmlunit-assertj module is not updated. In fact the assertions provided by xmlunit-assertj3 are the recommended upgrade path for users of AssertJ 3.x+. PRs #320 and #321 * actually made `withDTDParsingDisabled` do what it says. This is a bugfix and in a way it is backwards incompatible as it changes default behavior in a way that I intended to do with XMLUnit 2.6.0 eight years ago. `DocumentBuilderFactoryConfigurer.DefaultWithDTDParsing` provides the behavior of XMLUnit 2.6.0 to 2.11.0. PRs #326 by @jmestwa-coder and #328 Stefan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAmocDRIACgkQohFa4V9ri3Ig8ACg1iFNWKNFAVnEZe8R2SO+spPK gnMAoKh0496BnOtMeQ6kz0csH359qhKM =cZUQ -----END PGP SIGNATURE----- _______________________________________________ Xmlunit-general mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/xmlunit-general
