• Fix CVE-2026-40489 by @j-p-007
• Bump minimum CMake version to 3.18.4 (#140)
• Turn on warning as error only for Debug builds (#144)
• Fix strncpy buffer truncation warning in ini.c (#148) by @liweiganga
• Fix gcc 15.2 compile error (#150) by @qunying
• Point installation instructions to GitHub releases instead of SourceForge (#141)
• CI fixes.

• Make path splitting algorithm UNC-aware (#135) by @csware
• Update utarray.h to 2.3.0 (#137) by @csware
• Miscellaneous fixes.

What's Changed

• Fix VS warnings C4701 and C4703; potentially uninitialized local (variable|pointer) used by @csware in #113

What's Changed

• Clarify the steps of building from source. by @xuhdev in #107
• lib/ec_glob: plug leak of nums utarray by @chergert in #109
• Bump CMake requirement to 3.16.3 by @xuhdev in #110

New Contributors

• @chergert made their first contribution in #109

Full Changelog: v0.12.7...v0.12.8

• Fix pointer overflow in STRING_CAT.
• Fix a few more stack buffer overflows.
• Add license for FindPcre2 from LuaDist.
• Document and CI fixes.

• Fix potential buffer overflow in ec_glob (#87)
• Add simple installation steps for Fedora (#79)
• Update property key, value length limits per spec change (16d1d92)

• Fix memory leak in editorconfig_parse() which would occur if no .editorconfig files were found in the file's ancestry or if an error occurred while ingesting values. #76

• Fix two OOM issues.
• Fix one buffer overflow issue.
• Fix one memory allocation error caused by strdup.
• Upgrade CMake minimum to 3.5.1.
• Other misc fixes.

• Bump required minimum cmake version to 2.8.12.
• Support pcre2 and drop support for pcre.

• Add support for pkgconfig.
• Memory leaks and crash fixes.
• Improve error messages.
• Add CI on AppVeyor.

Known issue:

• Test utf_8_char on AppVeyor won't pass.