github.com/hyperjumptech/grule-rule-engine

Add the ability to set a number to a Fact field pointer if the pointer points to a number value.

• Removed the Editor package
• Changed th ioutil to io
• Added NoopLogger to provide the default implementation of logger.
• Added ZeroLog adapter to be used in Grule, Read the FAQ on how to create your own.
• Some small improvement by the contributors

Added some addition from long time Pull Request, But one of the most important one comes from the recent addition by @WilliamDeBruin on PR #484 . The benefit from that is, as mentioned in the PR:

✅ Enable direct field access on interface{} types in rules
✅ Maintain backward compatibility with existing functionality
✅ Simplify rule writing for complex data structures
✅ Natural rule syntax that's intuitive for developers

This is the release I've done after a long time inactivity with this project, Its all due to my health issues.
However, here It comes. This release is an outcome of merging in some mergable PRs, More will be added more
as soon as some conflicts were fixed by the respected authors.

This release is a security fix for a RCE vulnerability in the go-git dependency.

Details: go-git v4 - CVE-2023049569/CWE-22 - Path Traversal

Overview
Affected versions of this package are vulnerable to Path Traversal via malicious server replies. An attacker can create and amend files across the filesystem and potentially achieve remote code execution by sending crafted responses to the client.

Notes
This is only exploitable if the client is using ChrootOS, which is the default for certain functions such as PlainClone.
Applications using BoundOS or in-memory filesystems are not affected by this issue.

Users loading rules from remote Git servers are encouraged to upgrade to v1.15.0 as soon as possible.

• Fixed wrong package name. changed from grule-rule-engine to `github.com/hyperjumptech/grule-rule-engine'
• Fixed wrong test that previously have not catch the return catch. now it catches the return error properly

• Support for evaluating Interface and Pointer inside the context
• Bump up to use go 1.19

• Increased the Go version to version 1.18. If you still wished to use the version that uses 1.16, please use Grule version v1.11.0.
• FIX #339 Remove the snapshot comparison from every creation of new instance, new test created.
• FIX #334 Functions defined within Interface which added into DataContext can now be invoked from GRL.
• FIX #328 When the engine try to access slice element with out of bound index, it will now emit the error instead of just panicking.