v4.0.5

• Bump snakeyaml from 1.28 to 1.31 to resolve CVE-2022-25857 by chadlwilson · Pull Request #574 · ruby/psych
• Dump Date/DateTime as proleptic Gregorian date as well as Time by nobu · Pull Request #573 · ruby/psych

v4.0.4

• tr is typically 4 to 5 times faster than gsub · ruby/psych@8533be8
• Remove alias of load to unsafe_load · ruby/psych@39e23cc
• Don't require `strscan` unnecessarily · ruby/psych@3911356
• Add strict_integer option to parse numbers with commas as strings · ruby/psych@75bebb3

v4.0.3

What's Changed

• Add stringio as a dependency. by @simi in #525
• Prefer require_relative for internal requires by @deivid-rodriguez in #522
• s/RubyVM::JIT/RubyVM::MJIT/g by @k0kubun in #528
• psych depends stringio only CRuby by @hsbt in #529

New Contributors

• @simi made their first contribution in #525

Full Changelog: v4.0.2...v4.0.3

v4.0.2

What's Changed

• Add a CI configuration with libyaml 0.1.7 by @mame in #506
• require 'delegate' explicitly by @ahorek in #507
• Use git repository link for LibYAML in docs by @rhysforyou in #510
• Update ubuntu-jruby.yml by @jory-graham in #513
• fix parsing integer values with '_' at the end by @OpakAlex in #473
• Improve float scalar scanner by @tbrisker in #460
• Add quotes to the strings "y" and "n" by @tenderlove in #515
• Update ScalarScanner#tokenize pattern for unicode on master by @jory-graham in #516
• Tweak actions by @hsbt in #518

New Contributors

• @ahorek made their first contribution in #507
• @rhysforyou made their first contribution in #510
• @OpakAlex made their first contribution in #473

Full Changelog: v4.0.1...v4.0.2

v4.0.1

What's Changed

• Some tests fail with libyaml 0.1.7 by @mame in #491
• Make YAML.load_file use YAML.load instead of safe_load by @mame in #493
• Implement YAML.safe_dump to make safe_load more usable. by @casperisfine in #495
• JRuby updates and fixes by @headius in #481

Full Changelog: v4.0.0...v4.0.1

v4.0.0

What's Changed

• Use Psych.safe_load by default by @tenderlove in #487

Full Changelog: v3.3.2...v4.0.0

v3.3.2

What's Changed

• Fix some typos [ci skip] by @kamipo in #484
• Use test-unit instead of minitest by @hsbt in #485
• CI - YAML: Avoid 3.0 -> "3" conversion by @olleolleolle in #486
• Fix symbolize_name with non-string keys by @casperisfine in #480
• feat: allow scalars and sequences to be styled when dumped by @whitehat101 in #475
• Introduce Psych.unsafe_load by @tenderlove in #488

New Contributors

• @kamipo made their first contribution in #484
• @whitehat101 made their first contribution in #475

Full Changelog: v3.3.1...v3.3.2

v3.3.1

What's Changed

• Avoid repeated access to Ractor.current by @casperisfine in #474
• docs: fix simple typo, expessed -> expressed by @timgates42 in #470
• Fix custom marshalization with symbolize_names: true by @casperisfine in #476

New Contributors

• @timgates42 made their first contribution in #470

Full Changelog: v3.3.0...v3.3.1

v3.3.0

What's Changed

• Ractor support by @hsbt in #471

Full Changelog: v3.2.1...v3.3.0

v3.2.1

What's Changed

• Forward keyword arguments in load_file and load_stream by @casperisfine in #463
• Add Psych.safe_load_file. Tweak doc to provide safe_ examples. by @marcandre in #469
• Remove unneeded assignment and condition by @tbrisker in #459

New Contributors

• @marcandre made their first contribution in #469

Full Changelog: v3.2.0...v3.2.1