From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.text.pandoc/32981 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: John MacFarlane Newsgroups: gmane.text.pandoc Subject: ANN: pandoc 3.1.6 Date: Fri, 21 Jul 2023 08:40:31 -0700 Message-ID: <4132D474-75DB-4CBD-B95C-284D153BD056@gmail.com> Reply-To: pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.3\)) Content-Type: text/plain; charset="UTF-8" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="22538"; mail-complaints-to="usenet@ciao.gmane.io" To: pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org, pandoc-announce-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org Original-X-From: pandoc-discuss+bncBDW7ZIEHTIIBB4WN5KSQMGQE3LQQRFA-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org Fri Jul 21 17:40:38 2023 Return-path: Envelope-to: gtp-pandoc-discuss@m.gmane-mx.org Original-Received: from mail-oo1-f59.google.com ([209.85.161.59]) by ciao.gmane.io with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1qMsFB-0005eI-UN for gtp-pandoc-discuss@m.gmane-mx.org; Fri, 21 Jul 2023 17:40:37 +0200 Original-Received: by mail-oo1-f59.google.com with SMTP id 006d021491bc7-5662b3313e0sf3809930eaf.3 for ; Fri, 21 Jul 2023 08:40:37 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1689954037; cv=pass; d=google.com; s=arc-20160816; b=O72jee5RJAdL/DltUjnr506emcYS6yOEBJLxjO7yi/0ZCfx+DXelDI/1dhZz7WR68I DbxRghPSO8cGWUQXrjxU7Sm1HecCF/g/puFTX7KhA/WMPC5gAnaLgf4qF98GnjNg+nah nZnHKGCk4eFCIqBraUQdleDfpCdZNqaRbvZpIIchhxPVGAEOAYyeWqdiQj0MKwExQZ6s WlkNhzBXq1vN69Vlcra+HS2PO/RUImxknTEL3YoTZ24xY7AEEwnOxEqIlebA9XqvTU9O I3iqnJ6DYSe1RmfbvMPQG2z3waTqG7n2Jgn/p6FLkIe2q4u6y+v+U5v2IQJwQ3rhmtNb OhXg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:to:date:message-id:subject :mime-version:from:sender:dkim-signature:dkim-signature; bh=Ul6F3Dm+DcaxQD9n0VJKvGIl8/djQ/ucqVHKoXqtzoY=; fh=Q6bEAjwuXe565B+w0OD657iyfyU2U+7oDq2QyvFwKuc=; b=p87E0+jmpMTVUV0aJzmMK7mnIHX+Vz4salDzR4uN1YuB195oAhYb4fLox4WdPt4fv6 mxwQ698EV8oiDe6SXNi5VFt26vf3H76Cky8hoGrr4tql5ZVSwEHENiZdDFLyfqisygI7 LuAhiCilZ0XusA5FB5wcJRSXTpFWauovqClpf8zuc5pjOVR6/j8VBzjGwlWTt/opEiCY H6wRz5x/F9FH/aqxj+DFQ7P99sjiq2xenB7DcMGpA1l69V0NMV8apoX7xzLHcAt7vBsr M6DrfpBmHF3faLRxT1W9nE5y29B/XC6ovecomyENop06IpdNYRj7s/vVzP0XIV5rq55a eZNA== ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@gmail.com header.s=20221208 header.b=I4dZqibo; spf=pass (google.com: domain of fiddlosopher-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org designates 2607:f8b0:4864:20::435 as permitted sender) smtp.mailfrom=fiddlosopher-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20221208; t=1689954037; x=1690558837; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:to:date :message-id:subject:mime-version:from:sender:from:to:cc:subject:date :message-id:reply-to; bh=Ul6F3Dm+DcaxQD9n0VJKvGIl8/djQ/ucqVHKoXqtzoY=; b=qgbwDpcOmMlLWP12n+oUOFgkCLMj+wpMTlj0pRCX6CIVwbIsY4ecPxWiipljBHNeky byFJFopWf1ZskXSTnNghLAUZ2CW51MFXoeQ55qQstLMiOCG9dxTflg+2gVd2v7GjON/4 gsJfQuTlEcfuWCPGU5x7injnNtarF7bBH6rQjp7anLR6Z3Xgk7uPEZgn+OqPvAPiFH9W iQmjNeK9H5MI093m/RQxsEIGS4s+6c6T/qQ7TRQOOhiHjV+sOVjDHY2h/3YheHh6Amaq HH4s9tq9qOEle8i8q0Cs1QXLq4ui+sGUbyj9tyfXhNqqKGmZxHc8/ozpPvZvOMBo1WuE tBZA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1689954037; x=1690558837; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:to:date :message-id:subject:mime-version:from:from:to:cc:subject:date :message-id:reply-to; bh=Ul6F3Dm+DcaxQD9n0VJKvGIl8/djQ/ucqVHKoXqtzoY=; b=AjZuE1jpXm6hhqzArIoAuEJJ5eGSPTYa6g3FBgTdxy5imk9jhv4coTkdpU2hmvJ0O4 ZSlp1TPksBbRIQGMLtOHjJ7XXm28RZrEIfeNM3Bop+jI859CgTqXDWsncKcqYyoaL6dO gCYz9rZlN+5Wvd+zvTeyYfmiD6EoyZGvN9a6rda/Dame/Y4Mv0Lt6uVtUt4S6TjqX2O5 aLsngipCO6LECPE+4yXtdvJzdjIImiiUdt1OczKkbELWiCEIVzHX72ZlojXG25BwPRzw 9VtEtX2I3Vm4Wms0okiiZD5JV7sau/ghsDF5YVxFLZjgLADrNNGsJUclAQH7tmuFAxma M1og== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1689954037; x=1690558837; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:to:date :message-id:subject:mime-version:from:x-beenthere:x-gm-message-state :sender:from:to:cc:subject:date:message-id:reply-to; bh=Ul6F3Dm+DcaxQD9n0VJKvGIl8/djQ/ucqVHKoXqtzoY=; b=Gv3t3v315iwCm16YpYwc45XFIoYy23gVM5ItiAnhgZqzHm7ckGTfqLY7WRssI1EWVH gHJBJXKE+QtD8nlRbgR3RqwO/XCi1IVjYIHGguxh3GbneaBakZKKJjuvOlkvm/1SlORv SUcfDboqleCXQ5Sg4Qes714gAkAOdtaR5X5vFDwghJpreXwGx2gssUkILpb0SZNVXq9t BJW8Y+N7O22qiNYslaX7D0hUTn1ZSTuzp8a8lnZm27zXT0rICDdrEEa8kyK34n6D4JHd dsROjjdDiUKJWguc4U1J+GASuDeIabspbV3XPo5 Original-Sender: pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org X-Gm-Message-State: ABy/qLaMRJHy2ye0Jwbi6oOy05qvKYDqLBqwNfn3P2Vk7VC7WhRnRwEu PShjtBAsXSYLPKR5QAYVvRQ= X-Google-Smtp-Source: APBJJlHq0CMTepBiGPiJ8mhi8jrdYiaQxLJWPvSRoNKafJq72LILC1yyulUNepQ5h/YMj12Pgstkuw== X-Received: by 2002:a05:6870:9706:b0:1b7:5f27:5c52 with SMTP id n6-20020a056870970600b001b75f275c52mr2752517oaq.2.1689954036751; Fri, 21 Jul 2023 08:40:36 -0700 (PDT) X-BeenThere: pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org Original-Received: by 2002:a05:6870:eca8:b0:1b0:3eff:f4f4 with SMTP id eo40-20020a056870eca800b001b03efff4f4ls624387oab.0.-pod-prod-07-us; Fri, 21 Jul 2023 08:40:34 -0700 (PDT) X-Received: by 2002:a9d:480e:0:b0:6b9:1917:b2f3 with SMTP id c14-20020a9d480e000000b006b91917b2f3mr381188otf.33.1689954034214; Fri, 21 Jul 2023 08:40:34 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1689954034; cv=none; d=google.com; s=arc-20160816; b=x4Z73pK6QO2qNYstDf+IDZ4HcTtf0wDdiIbLpz3acXUhS6Cot3JJnbSvCpLFHtRDNF ZKW51Vm0s9paUOgzpZhTzUnLmZkGl8n9XbsUMz8HZwmA0fb1ovYlpffIf3xMgFjboPGE t5BxiLdzn/gcPdoxA5CYekXhnqHSP6yz3RJ9qr27ywfqlipoegikNml3qnSg69QKANXk /rReJvSK4D4DT8u3liYKtzBu12rE4PiPihW35mXWt7lm3XkYb9ICeOGjvGIxBRihOX39 YAJCEcs9zDGP5k4Xy3P5uU37v93nUmOvusRcgMsMM7tZJ8hvbZYLwtwtRKpyOf2cIF9v fy2Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=to:date:message-id:subject:mime-version:content-transfer-encoding :from:dkim-signature; bh=3D6BnPVPTiWzD09aOdNXwYMeLXm8Domq8EuB5R+dyuc=; fh=Q6bEAjwuXe565B+w0OD657iyfyU2U+7oDq2QyvFwKuc=; b=S8MF+KrHtrwWM9raXSm1JF+2PO7VGURxW8OZU6jGbW5lw2eag24HSXDTz5GB54WGIh ywG+jy2emtOc5scZKS0k/wfj/r8J3EEo2j1PmU3OVHM0kj6pllGPjRrgVTbQKuHQEZzU MK1cU/kYvI/MmvdzHyYafVSBS3KOH37Qymhrcx9pVgdxGerUY9CPfVfL4WVpJqhZyVQx tfClebLMNe2Qn9b/8V/pSLCqLKHTvCMX1BfYOje+RjfZpkQB4cPSmBZDANrP9C7WK6Po ul7cLI+oRpiRTiBDEKgZ7AQKjaSEGr9MszXou7505/msZAKo16LBm7Ezott/BIATZXHg qGOA== ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@gmail.com header.s=20221208 header.b=I4dZqibo; spf=pass (google.com: domain of fiddlosopher-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org designates 2607:f8b0:4864:20::435 as permitted sender) smtp.mailfrom=fiddlosopher-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Original-Received: from mail-pf1-x435.google.com (mail-pf1-x435.google.com. [2607:f8b0:4864:20::435]) by gmr-mx.google.com with ESMTPS id cd28-20020a056830621c00b006b8bf761730si300107otb.3.2023.07.21.08.40.34 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 21 Jul 2023 08:40:34 -0700 (PDT) Received-SPF: pass (google.com: domain of fiddlosopher-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org designates 2607:f8b0:4864:20::435 as permitted sender) client-ip=2607:f8b0:4864:20::435; Original-Received: by mail-pf1-x435.google.com with SMTP id d2e1a72fcca58-666e6ecb52dso1402741b3a.2; Fri, 21 Jul 2023 08:40:34 -0700 (PDT) X-Received: by 2002:a05:6a21:3806:b0:131:4808:d5a1 with SMTP id yi6-20020a056a21380600b001314808d5a1mr1751198pzb.28.1689954033024; Fri, 21 Jul 2023 08:40:33 -0700 (PDT) Original-Received: from smtpclient.apple ([2601:644:4701:23f0:994c:620d:522a:3dfa]) by smtp.gmail.com with ESMTPSA id bn9-20020a056a00324900b00678afd48250sm3099386pfb.218.2023.07.21.08.40.32 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Jul 2023 08:40:32 -0700 (PDT) X-Mailer: Apple Mail (2.3696.120.41.1.3) X-Original-Sender: fiddlosopher-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@gmail.com header.s=20221208 header.b=I4dZqibo; spf=pass (google.com: domain of fiddlosopher-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org designates 2607:f8b0:4864:20::435 as permitted sender) smtp.mailfrom=fiddlosopher-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Precedence: list Mailing-list: list pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org; contact pandoc-discuss+owners-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org List-ID: X-Google-Group-Id: 1007024079513 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , Xref: news.gmane.io gmane.text.pandoc:32981 Archived-At: I'm pleased to announce the release of pandoc 3.1.6, available in the usual places: Binary packages & changelog: https://github.com/jgm/pandoc/releases/tag/3.1.6 Source & API documentation: http://hackage.haskell.org/package/pandoc-3.1.6 Changes of note: This release fixes a new variant of the vulnerability described in CVE-2023-35936. Guilhem Moulin noticed that the fix in 3.1.4 to CVE-2023-35936 was incomplete. An attacker could get around it by double-encoding the malicious extension to create or override arbitrary files. A regression on short boolean arguments has also been fixed. In 3.1.5 boolean arguments were allowed an optional argument (`true|false`). This broke the ability to used fused short arguments, e.g. '-somyfile.html' == '-s -o myfile.html'. This commit restores that while keeping support for optional boolean arguments. --embed-resources now uses inline SVG instead of data URIs for SVG images in HTML5. The docx reader will now use the SVG version of an image if present rather than the PNG fallback. The typst reader fixes a regression in recognition of display math and has many bug fixes from improvements in typst-hs. Release binaries are now compiled on ghc 9.2, since compiling on 9.4 led to "illegal instruction" errors on some older hardware. (The cause of this is still not clear, but the change seems to have fixed the problem.) See the changelog for other changes and fuller details.