crystal-lang/crystal 1.20.3

on GitHub

Bugfixes

stdlib

• (serialization) [security] add max_nesting to YAML::PullParser (#17107, thanks @ysbaddaden)
• (serialization) [security] add alias vs anchor ratio check to YAML::PullParser (#17109, thanks @ysbaddaden)

Refactor

stdlib

• (serialization) YAML::PullParser: memoize anchor name (#17108, thanks @ysbaddaden)

Infrastructure

• Add changelog for 1.20.3 (#17110, thanks @ysbaddaden)