I'm pleased to announce the release of pandoc 2.15, available in the usual places: Binary packages & changelog: https://github.com/jgm/pandoc/releases/tag/2.15 Source & API documentation: http://hackage.haskell.org/package/pandoc-2.15 For a full description of the changes, see the changelog. But here are a few of the more prominent changes: * A new option --sandbox will ensure that pandoc's readers and writers do no IO besides reading from the files specified on the command line and writing the output. This restriction is enforced by the type system. Anyone who uses pandoc to process untrusted data should use this option (keeping in mind especially that some formats, such as RST, Org, and LaTeX, have directives for including files). Note: filters, PDF production, and custom writers are unaffected. If you use these features, you are responsible for considering the security risks. Those who maintain libraries (such as pypandoc) that run pandoc with a system call may want to consider adding --sandbox to the parameters used by default. * Pandoc will now fall back to latin1 encoding for inputs that can’t be read as UTF-8. This is what it did previously for content fetched from the web and not marked as to content type. It makes sense to do the same for local files. In this case a NotUTF8Encoded warning will be issued, indicating that pandoc is interpreting the input as latin1. * SVG images can now be used with docx output. * Support for Powerpoint output is much improved (thanks to the work of Emily Bourke). See the changelog for full details. * The LaTeX writer now uses babel exclusively for multilingual support. (We used to use polyglossia with xelatex.) If you use a custom template, you will probably need to update it to take account of these changes. * The --reference-location option now works with HTML output (thanks to Francesco Mazzoli). * Native output is now formatted using pretty-show, which gives nicer results for tests and debugging (which is the main purpose of native output). * gfm now supports footnotes. * Better performance and error messages in Lua filters, due to Albert Krewinkel. * Code changes have been introduced (by Aner Lucero) which will streamline the addition of a real Figure block element in a future release. API changes: * Text.Pandoc.Logging: add NotUTF8Encoded constructor to LogMessage. * Text.Pandoc.Class: Add readStdinStrict method to PandocMonad. * Text.Pandoc.Class: Generalize type of extractMedia. It was uselessly restricted to PandocIO, instead of any instance of PandocMonad and MonadIO. * Text.Pandoc.Shared: export splitSentences. * Text.Pandoc.Class.PandocIO: derive MonadCatch, MonadThrow, MonadMask. * Add module Text.Pandoc.Class.Sandbox, exporting sandbox via Text.Pandoc.Class. * Text.Pandoc.Filter: Generalize type of applyFilters from PandocIO to any instance of MonadIO and PandocMonad. * Text.Pandoc.PDF: Generalize type of makePDF: instead of PandocIO, it can be used in any instance of PandocMonad, MonadIO, and MonadMask. * Lua subsystem and custom writers: generalize types from PandocIO to any instance of PandocMonad and MonadIO [API change]. The type of runLua is now `(PandocMonad m, MonadIO m) => LuaE PandocError a -> m (Either PandocError a)`. Thanks to everyone who contributed, including new contributors Christophe Dervieux, Ezwal, Francesco Mazzoli, Milan Bracke, Quinn, Samuel Tardieu, Simon Schuster, and hseg; and stalwarts Albert Krewinkel, Aner Lucero, Emily Bourke, Jeroen de Haas, Salim B, William Lupton, and nuew. -- You received this message because you are subscribed to the Google Groups "pandoc-discuss" group. To unsubscribe from this group and stop receiving emails from it, send an email to pandoc-discuss+unsubscribe-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org To view this discussion on the web visit https://groups.google.com/d/msgid/pandoc-discuss/318d793c-7fcd-491f-adf4-3ff0038eb140n%40googlegroups.com.