summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
9 daysBump actions/setup-java from 5 to 6dependabot/github_actions/actions/setup-java-6dependabot[bot]3-3/+3
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5 to 6. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2026-08-24Bump com.google.guava:guava from 33.6.0-android to 33.7.1-android (#2135)dependabot[bot]1-1/+1
Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.6.0-android to 33.7.1-android. - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) --- updated-dependencies: - dependency-name: com.google.guava:guava dependency-version: 33.7.1-android dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-24Bump spring.version from 7.0.7 to 7.0.9 (#2136)dependabot[bot]1-1/+1
Bumps `spring.version` from 7.0.7 to 7.0.9. Updates `org.springframework:spring-test` from 7.0.7 to 7.0.9 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.7...v7.0.9) Updates `org.springframework:spring-web` from 7.0.7 to 7.0.9 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.7...v7.0.9) --- updated-dependencies: - dependency-name: org.springframework:spring-test dependency-version: 7.0.9 dependency-type: direct:development update-type: version-update:semver-patch - dependency-name: org.springframework:spring-web dependency-version: 7.0.9 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-28Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 (#2127)dependabot[bot]1-1/+1
Bumps [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) from 3.5.0 to 3.5.1. - [Release notes](https://github.com/apache/maven-jar-plugin/releases) - [Commits](https://github.com/apache/maven-jar-plugin/compare/maven-jar-plugin-3.5.0...maven-jar-plugin-3.5.1) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-jar-plugin dependency-version: 3.5.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-28Fix PDF infinite loop (#2128)Sean Owen1-1/+2
Port of https://github.com/zxing-cpp/zxing-cpp/pull/320
2026-07-18fix: upgrade http:// to https:// in README.md (#2119)MOHAMMED HANAN M T P1-2/+2
2026-07-12reject bit matrix not matching layer count in aztec extractBits (#2117)jmestwa-coder2-2/+24
2026-07-09Address Issue #2115, Aztec grid (#2116)Sean Owen2-1/+31
2026-07-07reject non-positive datablock count in aztec correctBits (#2114)jmestwa-coder2-1/+20
2026-06-26reject negative and overflowing crop in core LuminanceSource classes (#2112)jmestwa-coder4-2/+24
the crop constructors in PlanarYUVLuminanceSource and GrayscaleLuminanceSource did not reject negative offsets or sizes and overflowed when checking left+width and top+height, letting an out-of-bounds crop reach getRow and getMatrix; validate the rectangle the same way as BufferedImageLuminanceSource.
2026-06-26reject negative and overflowing crop in BufferedImageLuminanceSource (#2111)jmestwa-coder2-1/+30
2026-06-24fix quadratic backtracking in URIResultParser isPossiblyMaliciousURI (#2110)jmestwa-coder2-2/+57
2026-06-23use anchored matching in URIResultParser.isBasicallyValidURI (#2109)jmestwa-coder2-5/+15
2026-06-22Clear padding bits in BitMatrix.flip() so they are not read as set (#2108)Vasiliy Mikhailov2-0/+43
BitMatrix.flip() inverted every int in bits[], including the unused padding bits beyond the logical width in each rows last int. Methods that scan the raw bits (getTopLeftOnBit/getBottomRightOnBit/getEnclosingRectangle/equals) then treated those stray bits as part of the matrix, e.g. getBottomRightOnBit() returning (31,4) instead of (4,4) on a 5x5 matrix. Mask off the padding after flipping. Adds a regression test.
2026-06-22Validate crop rectangle for TYPE_BYTE_GRAY images in ↵Vasiliy Mikhailov2-5/+75
BufferedImageLuminanceSource (#2107) The crop-bounds check was only in the else branch, so TYPE_BYTE_GRAY images skipped it and an out-of-bounds crop was accepted, failing later with an ArrayIndexOutOfBoundsException instead of IllegalArgumentException. Hoist the check above the image-type branch so it applies to all images. Adds a test.
2026-06-22guard truncated structured carrier message in maxicode decode (#2106)jmestwa-coder2-0/+25
2026-06-22Bump actions/checkout from 6 to 7 (#2101)dependabot[bot]4-4/+4
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-22wrap invalid base64 as IOException in readDataURIImage (#2105)jmestwa-coder2-2/+13
2026-06-21format decoded digits locale-independently in maxicode/pdf417/aztec (#2100)jmestwa-coder5-5/+52
2026-06-21fix catastrophic backtracking in email domain regex (#2099)jmestwa-coder2-1/+12
2026-06-20reject wrong-size bit matrix in maxicode BitMatrixParser (#2098)jmestwa-coder2-1/+69
2026-06-20reject non-square bit matrix in qrcode BitMatrixParser (#2096)jmestwa-coder1-2/+2
2026-06-20reject oversized received array in pdf417 ErrorCorrection.decode (#2097)jmestwa-coder2-0/+21
2026-06-16guard empty symbol in code39 check digit handling (#2092)jmestwa-coder2-0/+22
2026-06-15avoid NegativeArraySizeException in aztec getEncodedData (#2091)jmestwa-coder2-1/+8
2026-06-13guard truncated symbol in rss expanded AI01AndOtherAIs decoder (#2089)jmestwa-coder2-0/+41
2026-06-12guard unterminated AI in ExpandedProductResultParser (#2088)jmestwa-coder2-1/+12
2026-06-05guard trailing shift char in code39 decodeExtended (#2086)jmestwa-coder2-0/+23
2026-06-05avoid out-of-bounds reads after control codewords in pdf417 parser (#2085)jmestwa-coder2-3/+50
2026-06-03guard base256 length read in datamatrix decodeBase256Segment (#2084)jmestwa-coder2-0/+12
2026-06-03avoid out-of-bounds read in pdf417 decodeMacroBlock (#2083)jmestwa-coder1-4/+8
* avoid out-of-bounds read in pdf417 decodeMacroBlock * use maxLength local for codewords[0] in decodeMacroBlock
2026-05-30avoid out-of-bounds read for NS sequence in maxicode getMessage (#2079)jmestwa-coder1-1/+4
2026-05-27Avoid charset provider lookups for UTF-8 QR encoding (#2077)Mygod3-21/+103
* Avoid charset provider lookups for UTF-8 QR encoding * Simplify charset lookup handling
2026-05-01Add reader initialization support for Data Matrix and PDF417 (#2069)Daniel Gredler15-16/+45
2026-05-01Add Code 128 reader initialization support (#2068)Daniel Gredler7-5/+13
2026-04-30Bump com.google.guava:guava from 33.5.0-android to 33.6.0-android (#2063)dependabot[bot]1-1/+1
Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.5.0-android to 33.6.0-android. - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) --- updated-dependencies: - dependency-name: com.google.guava:guava dependency-version: 33.6.0-android dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-30Bump spring.version from 7.0.6 to 7.0.7 (#2064)dependabot[bot]1-1/+1
Bumps `spring.version` from 7.0.6 to 7.0.7. Updates `org.springframework:spring-test` from 7.0.6 to 7.0.7 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.6...v7.0.7) Updates `org.springframework:spring-web` from 7.0.6 to 7.0.7 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.6...v7.0.7) --- updated-dependencies: - dependency-name: org.springframework:spring-test dependency-version: 7.0.7 dependency-type: direct:development update-type: version-update:semver-patch - dependency-name: org.springframework:spring-web dependency-version: 7.0.7 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-30Fix filling in of stack traces during testing (#2067)Daniel Gredler1-2/+5
2026-04-30Add Aztec reader initialization support (#2066)Daniel Gredler13-7/+78
2026-04-08Bump org.apache.maven.plugins:maven-resources-plugin from 3.3.1 to 3.5.0 (#2055)dependabot[bot]1-1/+1
Bumps [org.apache.maven.plugins:maven-resources-plugin](https://github.com/apache/maven-resources-plugin) from 3.3.1 to 3.5.0. - [Release notes](https://github.com/apache/maven-resources-plugin/releases) - [Commits](https://github.com/apache/maven-resources-plugin/compare/maven-resources-plugin-3.3.1...maven-resources-plugin-3.5.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-resources-plugin dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08Bump org.apache.maven.plugins:maven-dependency-plugin (#2057)dependabot[bot]1-1/+1
Bumps [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.9.0 to 3.10.0. - [Release notes](https://github.com/apache/maven-dependency-plugin/releases) - [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.9.0...maven-dependency-plugin-3.10.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-dependency-plugin dependency-version: 3.10.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08Fix QR decode failure for small/native-size images (#2061)Andrew Szeto4-3/+132
* Fix QR decode failure for small/native-size images (#1976) QRCodeWriter.encode(..., 0, 0) produces a 33x33 native-size QR that ZXing cannot decode. The CENTER_QUORUM filter in selectBestPatterns() (added in 110ef9e to fix #1567) removes finder patterns with count < 2. For small images, the row-skip interval (iSkip=3, MIN_SKIP) means the scanner only crosses the top two finder pattern centers on a single row each, giving them count=1. The bottom-left pattern gets count=2 because it's scanned after iSkip drops to 2. The filter then removes the two count=1 patterns, leaving 1 of the 3 needed, and throws NotFoundException. The fix: only apply the CENTER_QUORUM filter when either (a) at least 3 confirmed patterns would survive, or (b) the total candidate list exceeds a size threshold. This preserves #1567 protection while allowing small images through. Why a size threshold: the filter was added to prevent O(n^3) blowup in the triangle-selection loop when noisy images produce thousands of spurious candidates. When the candidate list is small (<= 25 entries, yielding <= ~2300 loop iterations), the cubic cost is negligible regardless of whether the patterns are real or spurious. A clean single-QR image produces ~3 candidates; even a noisy image below the threshold is computationally trivial. Above the threshold, the filter applies unconditionally, matching today's behavior. Alternatives considered: - Removing the filter entirely: all 561 existing tests pass, but re-opens #1567 for pathological images with thousands of spurious count=1 candidates. - Reducing MIN_SKIP from 3 to 1 for small images: addresses the symptom (more scan rows = higher counts) but doesn't fix the fundamental interaction between iSkip and the quorum filter, and changes scan behavior for all small images. - Fallback (try with filter, retry without on failure): re-opens #1567 whenever fewer than 3 confirmed patterns exist, which is exactly the scenario that produces thousands of unconfirmed candidates in noisy images. * Increase noisy-image test timeout from 5s to 30s GitHub shared runners timed out at 5s. Local measurement shows ~1.2s, implying at least 4x slowdown on CI. 30s gives a comfortable margin while still catching the O(n^3) regression from #1567.
2026-04-03Bump org.apache.maven.plugins:maven-release-plugin from 3.2.0 to 3.3.1 (#2050)dependabot[bot]1-1/+1
Bumps [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release) from 3.2.0 to 3.3.1. - [Release notes](https://github.com/apache/maven-release/releases) - [Commits](https://github.com/apache/maven-release/compare/maven-release-3.2.0...maven-release-3.3.1) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-release-plugin dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-03Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5 (#2048)dependabot[bot]1-1/+1
Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.5.4 to 3.5.5. - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.4...surefire-3.5.5) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.5.5 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-03Bump org.apache.maven.plugins:maven-compiler-plugin (#2047)dependabot[bot]1-1/+1
Bumps [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) from 3.14.1 to 3.15.0. - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](https://github.com/apache/maven-compiler-plugin/compare/maven-compiler-plugin-3.14.1...maven-compiler-plugin-3.15.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.15.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-03Bump spring.version from 6.2.12 to 7.0.6 (#2046)dependabot[bot]1-1/+1
Bumps `spring.version` from 6.2.12 to 7.0.6. Updates `org.springframework:spring-test` from 6.2.12 to 7.0.6 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.12...v7.0.6) Updates `org.springframework:spring-web` from 6.2.12 to 7.0.6 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.12...v7.0.6) --- updated-dependencies: - dependency-name: org.springframework:spring-test dependency-version: 7.0.6 dependency-type: direct:development update-type: version-update:semver-major - dependency-name: org.springframework:spring-web dependency-version: 7.0.6 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-04Add ERRORS_CORRECTED metadata to QRCodeMultiReader (#2044)Miztan1-0/+1
2025-11-24Bump org.apache.maven.plugins:maven-release-plugin from 3.1.1 to 3.2.0 (#2018)dependabot[bot]1-1/+1
Bumps [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release) from 3.1.1 to 3.2.0. - [Release notes](https://github.com/apache/maven-release/releases) - [Commits](https://github.com/apache/maven-release/compare/maven-release-3.1.1...maven-release-3.2.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-release-plugin dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24Bump actions/checkout from 5 to 6 (#2022)dependabot[bot]4-4/+4
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.2 to 3.5.0 (#2019)dependabot[bot]1-1/+1
Bumps [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) from 3.4.2 to 3.5.0. - [Release notes](https://github.com/apache/maven-jar-plugin/releases) - [Commits](https://github.com/apache/maven-jar-plugin/compare/maven-jar-plugin-3.4.2...maven-jar-plugin-3.5.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-jar-plugin dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
generated by cgit v1.2.3 (git 2.39.0) at 2026-09-09 00:13:26 +0300