From 0974bf7e1bbd076c44d4430eb534eeb2eee9acf2 Mon Sep 17 00:00:00 2001 From: Wei Wang Date: Sun, 11 Oct 2026 19:58:10 -0400 Subject: [PATCH] Bump to 1.36.4: a file's bytes no longer hold the thread in a backtracking regex, and a struct type named toString is one Four patterns that a file's own bytes reach were quadratic or cubic on a backtracking engine: the interface-dictionary tag scan (code-scanning alert 2), a decimal's digits in parseComplexNum and NUMERIC_RE, and the cdata `.0` drop. Each now runs in linear time with the same results (#74). A modeled data type named after an Object.prototype member, such as toString or constructor, is classified as what it is, and a new entry's uuid comes from crypto.getRandomValues in the same shape as before (#73). CI's token is read-only, and source-map-js is locked at 1.2.2 (#72). --- package-lock.json | 4 ++-- package.json | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index e0f7aa25..ff99b1d3 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "data-explorer-core", - "version": "1.36.3", + "version": "1.36.4", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "data-explorer-core", - "version": "1.36.3", + "version": "1.36.4", "license": "BSD-3-Clause", "dependencies": { "fast-xml-parser": "^5.8.0", diff --git a/package.json b/package.json index 0ee985a5..73f9e4db 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "data-explorer-core", - "version": "1.36.3", + "version": "1.36.4", "description": "Parser, data model, and node schema for Simulink data-dictionary, model, MAT-file, and project files. Presentation-independent; embeddable in-process.", "license": "BSD-3-Clause", "type": "module",