Changes for version 0.06 - 2026-09-30
- Security
- Reading a Makefile.PL with many unclosed dependency blocks (PREREQ_PM, prereqs, recommends and the other META spec 1.x keys) took time proportional to the square of its size: 50,000 unclosed recommends blocks took over a minute on Perl 5.26. Dependency blocks are now found by matching braces in one pass, so reading takes time in proportion to the size of the file
- Documentation
- The documentation now states that reading is linear in the size of the input, and that an unmatched brace inside a string or comment within a dependency list can hide its entries. The limitation on lists nested more than four braces deep is gone: lists are read at any depth
- Enhancements
- Minimum Perl is now 5.26, set by the test dependencies: Test::Permissions needs Params::Validate::Strict (5.26), and Test::Mockingbird needs 5.16.3. The code itself still needs only 5.14, but the 5.14 declared in 0.05 was already wrong: its test dependencies could not be installed on 5.14 New test dependency: Test::Permissions, replacing the private copy in t/lib The core modules Carp, Fcntl and Getopt::Long are now declared as dependencies
- Testing
- Permission tests probe the directory that holds their fixtures, and their skip messages say why chmod cannot revoke access (for example root, Windows, or a filesystem that ignores permissions) Files and directories are locked with Test::Permissions' with_revoked, which restores the mode even if a check dies; three tests used to leave a mode-0 file behind Tests that dependency lists are read at every nesting depth, and timing tests for more shapes of unclosed dependency blocks CI: the minimum-version job runs Perl 5.26 instead of 5.14, in its own workflow (u26.yml)
Modules
Convert Makefile.PL to a cpanfile automatically