More updates to ChangeLog for a 0.19 release

AUTHORS

@@ -1,5 +1,6 @@
 Alan Coopersmith <alan.coopersmith@oracle.com>
 Alan Urmancheev <108410815+alurm@users.noreply.github.com>
+Alb3e3 <74142887+Alb3e3@users.noreply.github.com>
 Alexander Dahl <post@lespocky.de>
 Alexandru Ardelean <ardeleanalex@gmail.com>
 An7ar35 <eadavison@protonmail.com>
@@ -10,7 +11,7 @@ Awildidiot <69577313+0xfadead@users.noreply.github.com>
 Björn Esser <besser82@fedoraproject.org>
 BonsaY <bonsay@posteo.de>
 Bruno Haible <bruno@clisp.org>
-Cameron Armstrong <cameronscottarmstrong@gmail.com>
+Cameron Armstrong (Nightfox) <cameronscottarmstrong@gmail.com>
 Careles <zhancheng1996@gmail.com>
 changyong guo <guo1487@163.com>
 chenguoping <chenguopingdota@163.com>
@@ -24,6 +25,7 @@ David McCann <mccannd@uk.ibm.com>
 DeX77 <dex@dragonslave.de>
 Dimitri Papadopoulos <3234522+DimitriPapadopoulos@users.noreply.github.com>
 dota17 <chenguopingdota@163.com>
+dxbjavid <dxbjavid@gmail.com>
 Eric Haszlakiewicz <erh+git@nimenees.com>
 Eric Hawicz <erh+git@nimenees.com>
 Evan Si <evsi@amazon.com>
@@ -40,6 +42,7 @@ hofnarr <hofnarr@hofnarr.fi>
 ihsinme <61293369+ihsinme@users.noreply.github.com>
 Ivan Romanov <drizt@land.ru>
 Jaap Keuter <jaap.keuter@xs4all.nl>
+JaisonZheng <1254186821@qq.com>
 Jakov Smolic <jakov.smolic@sartura.hr>
 janczer <menshikov.ivn@gmail.com>
 Ján Tomko <jtomko@redhat.com>
@@ -56,6 +59,7 @@ Kizuna-Meraki <z9@kizunameraki.de>
 Lakshmi-Surekha <Lakshmi.Kovvuri@ibm.com>
 Leon Gross <leon.gross@rub.de>
 Liang, Gao <liang.gao@intel.com>
+lone <lonechan314@qq.com>
 Luca Mannella <luca.mannella@studenti.polito.it>
 Marc <34656315+MarcT512@users.noreply.github.com>
 Matthias Gatto <matthias.gatto@protonmail.com>
@@ -63,6 +67,7 @@ max <mpano91@gmail.com>
 Micah Snyder <micasnyd@cisco.com>
 Michael Clark <michael@metaparadigm.com>
 Michele Locati <michele@locati.it>
+Milan Broz <gmazyland@gmail.com>
 myd7349 <myd7349@gmail.com>
 Pascal Cuoq <cuoq@trust-in-soft.com>
 Pavel Zwerschke <pavelzw@gmail.com>

ChangeLog

@@ -1,5 +1,5 @@
 
-0.19 (up to commit 8948568, 2026-01-18)
+0.19 (up to commit 3c1cf2b, 2026-06-27)
 ========================================
 
 Deprecated and removed features:
@@ -32,6 +32,14 @@ Significant changes and bug fixes
 * Fix bug involving supplemental code points that look like high surrogates
 * Fix runtime issue with test_util_file.c in Windows (add O_BINARY)
 * Fix macro WIN32_LEAN_AND_MEAN redefined
+* Issue #914: Fix Memory usage regression due to newlocale() on macOS
+* Issue #916: Fix OOM via large array index in json_pointer_set
+* Issue #923: Avoid stack recursion in json_object_put()
+* Issue #927: CVE-2026-9146 - update json_object_iterator documentation
+* Issue #929: CVE-2026-11322 - fix information disclosure bug in apps/json_parse (not installed by default)
+* Issue #930: fix locale-dependent strtod in json_object_get_double
+* Issue #931: deep copy values in json_patch copy op to avoid aliasing and cycles
+
 
 0.18 (up to commit 6bfab90, 2024-09-15)
 ========================================

issues_closed_for_0.19.md

@@ -2,54 +2,13 @@ This list was created with:
 
 ```
 PREV=2024-09-15
-NOW=2026-01-19
+NOW=2026-06-27
 curl "https://api.github.com/search/issues?q=repo%3Ajson-c%2Fjson-c+closed%3A>${PREV}+created%3A<${NOW}&sort=created&order=asc&per_page=100&page=1" > issues1.out
 jq -r '.items[] | "[" + .title + "](" + .url + ")" | tostring' issues?.out > issues.md
 sed -e's,^\[ *\(.*\)\](https://api.github.com/.*/\([0-9].*\)),* [Issue #\2](https://github.com/json-c/json-c/issues/\2) - \1,' -i issues.md
 cat issues.md >> issues_closed_for_0.19.md
 ```
 
-* [Issue #826](https://github.com/json-c/json-c/issues/826) - CMake: remove needless policy setting
-* [Issue #827](https://github.com/json-c/json-c/issues/827) - Resolve build issue in tokener_parse_ex_fuzzer.c
-* [Issue #828](https://github.com/json-c/json-c/issues/828) - Put arc4random check under DISABLE_EXTRA_LIBS=OFF in CMakeLists.txt.
-* [Issue #829](https://github.com/json-c/json-c/issues/829) - Cannot build with clang-cl
-* [Issue #830](https://github.com/json-c/json-c/issues/830) - I am looking whether this CVE - CVE-2021-32292 is impacted by json-c version v0.13.1or not ?
-* [Issue #831](https://github.com/json-c/json-c/issues/831) - rename WIN32 to _WIN32
-* [Issue #833](https://github.com/json-c/json-c/issues/833) - memory leak issue in 0.13
-* [Issue #834](https://github.com/json-c/json-c/issues/834) - fix error des of 'error_memory'
-* [Issue #835](https://github.com/json-c/json-c/issues/835) - fix error des of 'error_memory'
-* [Issue #836](https://github.com/json-c/json-c/issues/836) - Null pointer dereference in tokener_parse_ex_fuzzer.cc
-* [Issue #837](https://github.com/json-c/json-c/issues/837) - Add type checking for parsed objects in tokener_parse_ex_fuzzer
-* [Issue #838](https://github.com/json-c/json-c/issues/838) - Cannot link properly using cmake
-* [Issue #839](https://github.com/json-c/json-c/issues/839) - json_pointer.c: initialize idx
-* [Issue #840](https://github.com/json-c/json-c/issues/840) - Memory leak when enable HAVE_SETLOCALE and HAVE_USELOCALE
-* [Issue #841](https://github.com/json-c/json-c/issues/841) - Random crash in json_tokener_parse
-* [Issue #842](https://github.com/json-c/json-c/issues/842) - Assignment bug in json_pointer.c
-* [Issue #843](https://github.com/json-c/json-c/issues/843) - _WIN32 should be used, not WIN32 in source code ifdefs.
-* [Issue #844](https://github.com/json-c/json-c/issues/844) - Doxygen: mis-wording in `json_object_put`
-* [Issue #845](https://github.com/json-c/json-c/issues/845) - [CMP0153](https://cmake.org/cmake/help/latest/policy/CMP0153.html)
-* [Issue #846](https://github.com/json-c/json-c/issues/846) - CMP0153
-* [Issue #848](https://github.com/json-c/json-c/issues/848) - json_object_from_file caused calloc SIGSEGV
-* [Issue #849](https://github.com/json-c/json-c/issues/849) - random_seed.c: add a Coverity Scan suppression
-* [Issue #850](https://github.com/json-c/json-c/issues/850) - Missing return description
-* [Issue #851](https://github.com/json-c/json-c/issues/851) - Allow NULL in json_object_new_string() and json_object_new_string_len()
-* [Issue #852](https://github.com/json-c/json-c/issues/852) - docs: micro typo in json_object_put doc
-* [Issue #853](https://github.com/json-c/json-c/issues/853) - json_tokener_parse_verbose does not set the error indicator when it fails to allocate the tokener
-* [Issue #854](https://github.com/json-c/json-c/issues/854) - json_tokener_parse_verbose sets the error indicator to a wrong value when there is a memory allocation failure
-* [Issue #856](https://github.com/json-c/json-c/issues/856) - Using libjson-c.so or compiling from source seg faults on json_tokener_parse_ex in alpine docker container
-* [Issue #857](https://github.com/json-c/json-c/issues/857) - json_tokener_parse_verbose sets the error indicator to a wrong value when there is a memory allocation failure
-* [Issue #858](https://github.com/json-c/json-c/issues/858) - json_tokener.h: json_tokener_parse_verbose: fix typo
-* [Issue #859](https://github.com/json-c/json-c/issues/859) - Develop
-* [Issue #860](https://github.com/json-c/json-c/issues/860) - Develop
-* [Issue #861](https://github.com/json-c/json-c/issues/861) - Handle yet another out-of-memory condition.
-* [Issue #862](https://github.com/json-c/json-c/issues/862) - Missing `json-c-targets.cmake` during build cmake build step
-* [Issue #863](https://github.com/json-c/json-c/issues/863) - build ios simulator error
-* [Issue #864](https://github.com/json-c/json-c/issues/864) - Build pkg-config for msvc as well
-* [Issue #865](https://github.com/json-c/json-c/issues/865) - Assertion usage
-* [Issue #866](https://github.com/json-c/json-c/issues/866) - Added github actions
-* [Issue #868](https://github.com/json-c/json-c/issues/868) - I meet compile error in harmony  
-* [Issue #869](https://github.com/json-c/json-c/issues/869) - At a high level how are jsons parses? Are they terminated by the new line?
-* [Issue #870](https://github.com/json-c/json-c/issues/870) - Non-Compliant features should be optional (and disabled)
 * [Issue #825](https://github.com/json-c/json-c/issues/825) - Add support for WASI
 * [Issue #847](https://github.com/json-c/json-c/issues/847) - Add support for Commodore Amiga
 * [Issue #867](https://github.com/json-c/json-c/issues/867) - Parsing of control characters
@@ -66,6 +25,7 @@ cat issues.md >> issues_closed_for_0.19.md
 * [Issue #882](https://github.com/json-c/json-c/issues/882) - Explicitly handle NaN values when converting to integer
 * [Issue #883](https://github.com/json-c/json-c/issues/883) - Add fuzz tests for json_object/point/array apis
 * [Issue #884](https://github.com/json-c/json-c/issues/884) - fix macro WIN32_LEAN_AND_MEAN redefined
+* [Issue #885](https://github.com/json-c/json-c/issues/885) - A core dump occurs when executing json_object_put.
 * [Issue #886](https://github.com/json-c/json-c/issues/886) - Linking to json-c using cmake's find_package error
 * [Issue #887](https://github.com/json-c/json-c/issues/887) - Can json-c accept invalid JSON strings?
 * [Issue #888](https://github.com/json-c/json-c/issues/888) - Allow build with cmake 4.0.0
@@ -79,6 +39,8 @@ cat issues.md >> issues_closed_for_0.19.md
 * [Issue #899](https://github.com/json-c/json-c/issues/899) - Meson support
 * [Issue #900](https://github.com/json-c/json-c/issues/900) - meson cleanups
 * [Issue #901](https://github.com/json-c/json-c/issues/901) - miscellanious gitignore updates
+* [Issue #902](https://github.com/json-c/json-c/issues/902) - json_object_get_int() doesn't support INT32_MIN or INT32_MAX.
+* [Issue #903](https://github.com/json-c/json-c/issues/903) - meson: use override_dependency
 * [Issue #904](https://github.com/json-c/json-c/issues/904) - Include getopt.h header file if the platform is not AIX.
 * [Issue #905](https://github.com/json-c/json-c/issues/905) - Fix typo
 * [Issue #906](https://github.com/json-c/json-c/issues/906) - json-c: fix calloc argument order to avoid GCC14 -Wcalloc-transposed-args in arraylist.c and json_object.c
@@ -89,3 +51,19 @@ cat issues.md >> issues_closed_for_0.19.md
 * [Issue #911](https://github.com/json-c/json-c/issues/911) - Building libjson-c DLL for Windows under Cygwin: why it's named cygjson-c?
 * [Issue #912](https://github.com/json-c/json-c/issues/912) - libjson-c.dll is missing VERSIONINFO
 * [Issue #913](https://github.com/json-c/json-c/issues/913) - Add VERSIONINFO to libjson-c.dll
+* [Issue #914](https://github.com/json-c/json-c/issues/914) - Memory usage regression due to newlocale() on macOS
+* [Issue #915](https://github.com/json-c/json-c/issues/915) - Fix memory leak on macOS by auto-enabling NEWLOCALE_NEEDS_FREELOCALE
+* [Issue #916](https://github.com/json-c/json-c/issues/916) - OOM via large array index in json_pointer_set
+* [Issue #917](https://github.com/json-c/json-c/issues/917) - Fix: OOM vulnerability cause by is_valid_index
+* [Issue #918](https://github.com/json-c/json-c/issues/918) - Assertion failed has occurred in function json_object_object_add_ex at json_object.c
+* [Issue #919](https://github.com/json-c/json-c/issues/919) - Compiling json-c in Windows for a non x86 target fails
+* [Issue #920](https://github.com/json-c/json-c/issues/920) - Broken link at wiki/List-of-json-c-tutorials
+* [Issue #922](https://github.com/json-c/json-c/issues/922) - ninja install target does not install all headers needed
+* [Issue #923](https://github.com/json-c/json-c/issues/923) - json-c seems to be stack recursive, which can cause stack overflows
+* [Issue #924](https://github.com/json-c/json-c/issues/924) - avoid recursion during json_object_put
+* [Issue #925](https://github.com/json-c/json-c/issues/925) - Fix build with clang-21
+* [Issue #927](https://github.com/json-c/json-c/issues/927) - Coordinated Vulnerability Disclosure - json-c 0.18.99 Use-After-Free via json_object_iterator Concurrent Modification
+* [Issue #928](https://github.com/json-c/json-c/issues/928) - Build error from current top of tree: d1018cf
+* [Issue #929](https://github.com/json-c/json-c/issues/929) - Coordinated Vulnerability Disclosure - json-c 0.18.99
+* [Issue #930](https://github.com/json-c/json-c/issues/930) - fix locale-dependent strtod in json_object_get_double
+* [Issue #931](https://github.com/json-c/json-c/issues/931) - deep copy values in json_patch copy op to avoid aliasing and cycles