{"full_name":"jqlang/jq","owner":"jqlang","name":"jq","url":"https://github.com/jqlang/jq","description":"Command-line JSON processor","homepage":"https://jqlang.org","topics":[],"language":"C","license":"NOASSERTION","avatar":"https://avatars.githubusercontent.com/u/104800540?v=4","created_at":"2012-07-18T19:57:25Z","pushed_at":"2026-11-02T07:08:10Z","metrics":{"stars":36091,"forks":2339,"watchers":352,"issues":2367,"prs":1280,"releases":16,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":50},"growth":{"day":{"stars":9,"forks":-476,"base_day":"2026-11-09"}},"history":{"dates":["2026-11-09","2026-11-10"],"stars":[36082,36091],"forks":[2815,2339],"watchers":[352,352],"issues_open":[null,null],"prs_open":[null,null]},"boards":{},"same_owner":[],"issues":[{"number":491,"title":"Enhancement request: integrated package manager","comments":106,"created_at":"2014-07-18T06:08:54Z"},{"number":105,"title":"Edit files in place","comments":99,"created_at":"2013-04-22T04:46:25Z"},{"number":2042,"title":"Feature request: Add a new, more sensible alternation operator","comments":67,"created_at":"2020-01-08T07:43:04Z"},{"number":467,"title":"support yaml input/output in addition to json","comments":65,"created_at":"2014-07-07T21:44:23Z"},{"number":1571,"title":"JSON comments-- again","comments":55,"created_at":"2018-01-03T22:30:09Z"},{"number":1066,"title":"jq 1.5 win64 fails on UNC input files / jq 1.6 fails with UNC module paths","comments":47,"created_at":"2016-01-07T16:29:00Z"},{"number":1326,"title":"Documentation/Feature request: Clarify expressions/scope","comments":44,"created_at":"2017-01-27T23:10:28Z"},{"number":147,"title":"\"shell out\" or filter though bash command?","comments":41,"created_at":"2013-06-08T22:12:56Z"}],"discussions":[{"number":3559,"title":"ccline: type plain English instead of figuring out jq syntax — AI at the zsh prompt","comments":0,"category":"Show and tell","created_at":"2026-06-10T08:57:33Z"},{"number":3471,"title":"Module search path broken?","comments":5,"category":"Q&A","created_at":"2026-01-28T15:38:17Z"},{"number":3470,"title":"how to add a item to array","comments":3,"category":"Q&A","created_at":"2026-01-22T15:18:36Z"},{"number":3461,"title":"Finding best strategies for parsing a large JSON set faster","comments":5,"category":"Q&A","created_at":"2026-01-13T09:51:41Z"},{"number":3453,"title":"Converting JSON To JSONL Without Losing Original Object Structure","comments":1,"category":"Q&A","created_at":"2025-12-16T05:12:09Z"},{"number":3452,"title":"JQ - Filtering Out JSON Properties Where Keys Do Not Match Length","comments":1,"category":"Q&A","created_at":"2025-12-16T04:47:17Z"},{"number":3449,"title":"Print line number and/or filename for selected entries","comments":2,"category":"Q&A","created_at":"2025-12-13T10:17:01Z"},{"number":3436,"title":"How to limit results across multiple JSON documents, without reading every document?","comments":1,"category":"Q&A","created_at":"2025-11-17T14:16:42Z"}],"latest_release":{"name":"jq 1.8.2","tag":"jq-1.8.2","published_at":"2026-06-20T14:11:27Z","body":"This is a patch release with security fixes and bug fixes since 1.8.1, along with new builds for Windows arm64 and Docker arm/v7.\r\nFull commit log can be found at <https://github.com/jqlang/jq/compare/jq-1.8.1...jq-1.8.2>.\r\n\r\n## Security fixes\r\n\r\n- CVE-2026-32316: Fix heap buffer overflow in `jvp_string_append` and `jvp_string_copy_replace_bad`. @itchyny e47e56d226519635768e6aab2f38f0ab037c09e5\r\n- CVE-2026-33947: Limit path depth to prevent stack overflow in `jv_setpath`, `jv_getpath`, `jv_delpaths`. @itchyny fb59f1491058d58bdc3e8dd28f1773d1ac690a1f\r\n- CVE-2026-33948: Fix NUL truncation in the JSON parser. @itchyny 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b\r\n- CVE-2026-39956: Fix `_strindices` missing runtime type checks. @tlsbollei fdf8ef0f0810e3d365cdd5160de43db46f57ed03\r\n- CVE-2026-39979: Fix out-of-bounds read in `jv_parse_sized()`. @wader 2f09060afab23fe9390cce7cb860b10416e1bf5f\r\n- CVE-2026-40164: Randomize hash seed to mitigate hash collision DoS attacks. @AsafMeizner @itchyny 0c7d133c3c7e37c00b6d46b658a02244fdd3c784\r\n- CVE-2026-40612: Limit containment check depth to prevent stack overflow in `contains`. @itchyny d1a12569d91641135976a8536776a4a329c02cc2\r\n- CVE-2026-41256: Fix NUL truncation in program files loaded with `-f`. @itchyny 5a015deae35d19e3ebbc65db6c157a80e76df738\r\n- CVE-2026-41257: Fix signed-int overflow in `stack_reallocate`. @itchyny 01b3cded76daacbfddb7f8763700b0803bcb5c6f\r\n- CVE-2026-43894: Reject numeric literals longer than `DEC_MAX_DIGITS` (999999999). @itchyny 9761ceb7d6cc48c16b25f0ab1baaef0e701927e4\r\n- CVE-2026-43895: Reject embedded NUL bytes in module import paths. @itchyny 9d223f153c3632a207fa071caaa6292da33ae361\r\n- CVE-2026-43896: Limit recursive object merge depth to prevent stack overflow. @itchyny 532ccea6080ed6758f39fe9f6208a44b665023d2\r\n- CVE-2026-44777: Detect circular module imports to prevent stack overflow. @itchyny f58787c41835d9b17795730cb04925fdba25c71c\r\n- CVE-2026-47770: Guard deep structural equality and comparison recursion. @fuyu0425 7122866869960b55cea3646bc91334ef55787831\r\n- CVE-2026-49839: Fix heap-buffer-overflow in raw file loading. @itchyny e987df0d463d85fd70825e042a082427e8275b86\r\n- CVE-2026-54679: Tighten string length bounds and propagate invalid jv in implode. @itchyny 46d1da30944ce93dd671ac72b6513fc0eb747837\r\n- GHSA-gf4g-95wj-4q4r: Fix use-after-free in `args2obj()` array argument path. @sseal #3498\r\n- GHSA-hj52-j2c9-r8r4: Fix signed-int overflow in `tokenadd` to prevent buffer overflow. @itchyny 63751f8a9f94dc6d3370084ad0d60826c58b955d\r\n- Limit the number of function parameters and definitions to prevent SEGV. @OwenSanzas #3460\r\n- Pre-allocate `tokenbuf` for string parser to avoid undefined behavior. @fab1ano #3485\r\n- Avoid stack overflow when freeing deeply nested values. @itchyny 33d7bce3218ec718139342e5b48b475c4dea715f\r\n- Fix memory leaks and double frees. @itchyny #3487\r\n\r\n## Releasing\r\n\r\n- Add builds for Windows arm64. @dennisameling #3376\r\n- Support arm/v7 architecture in Docker images. @itchyny #3463\r\n- Update GPG signing key. @itchyny 0ff997f7c4c07660ffc6ad2506d5f56b8136208b\r\n- Add `artifact-metadata` permission for actions/attest. @itchyny #3530\r\n- Upload attestation bundle as a release artifact, allowing unauthenticated verification\r\n   via `gh attestation verify --bundle jq-attestation.json`. @itchyny #3563\r\n\r\n## CLI changes\r\n\r\n- Improve error message truncation with closing delimiters. @itchyny #3478\r\n- Remove extra space from `die` function output. @krtk6160 #3391\r\n- Fix raw input flag not to corrupt multi-byte characters. @itchyny #3421\r\n- Fix crash when importing a module with errors twice. @itchyny #3497\r\n- Increase the maximum printing depth from 256 to 10000. @ishnagy #3414\r\n\r\n## Changes to existing functions\r\n\r\n- Fix `rtrimstr(\"\")` always outputting `\"\"`. @A4-Tacks #3415\r\n- Fix infinite loop and undefined behavior in `del(.[nan])`. @itchyny #3490\r\n- Refactor `@uri` and `@urid` to fix multi-byte UTF-8 corruption. @itchyny #3495\r\n- Fix `tonumber` and `t"},"readme":true,"readme_zh":false,"news":[],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}