This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-lang.git
The following commit(s) were added to refs/heads/master by this push:
new 4d6de357b NumberUtils.createNumber(String): Float shortcut can bypass
exact decimal parsing (#1635).
4d6de357b is described below
commit 4d6de357b9ef7bf31f17037f733c4beefa612ec2
Author: Gary Gregory <[email protected]>
AuthorDate: Tue May 5 23:10:27 2026 -0400
NumberUtils.createNumber(String): Float shortcut can bypass exact
decimal parsing (#1635).
---
src/changes/changes.xml | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 3da0f121c..46a6f890c 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -138,6 +138,7 @@ java.lang.NullPointerException: Cannot invoke
<action type="fix" dev="ggregory" due-to="Omkhar
Arasaratnam, Gary Gregory">Fix typo in
SystemProperties.JDK_XML_ENTITY_REPLACEMENT_LIMIT (#1631).</action>
<action type="fix" dev="ggregory" due-to="Omkhar
Arasaratnam, Gary Gregory">Harden Range.readObject() to reject bad cached hash
code (#1633).</action>
<action type="fix" dev="ggregory" due-to="Omkhar
Arasaratnam, Gary Gregory">Harden Fraction.readObject() to reject bad cached
hash code (#1634).</action>
+ <action type="fix" dev="ggregory" due-to="Omkhar
Arasaratnam, Gary Gregory">NumberUtils.createNumber(String): Float shortcut can
bypass exact decimal parsing (#1635).</action>
<!-- ADD -->
<action type="add" dev="ggregory" due-to="Gary
Gregory">Add JavaVersion.JAVA_27.</action>
<action type="add" dev="ggregory" due-to="Gary
Gregory">Add SystemUtils.IS_JAVA_27.</action>
