CHANGELOG

Changelog for package urdfdom

5.1.0 (2026-02-06)

  • Support for URDF Specification 1.1
  • Fix multiple format-string vulnerabilities in URDF parser logging (#243) User-controlled URDF content was passed directly to CONSOLE_BRIDGE_logError() at multiple call sites, allowing printf-style format string interpretation. All affected logging paths now use explicit “%s” format specifiers to ensure input is treated as data and to prevent information disclosure or undefined behavior.

  • More logging format string fixes (#244) * Add explicit “%s” format strings when logging * Use %s format string instead of string addition

  • Read cmake version from package.xml (#236) * Use regex to match version string. Based on suggestion from Chris Lalancette. * Require cmake minimum version 3.10 Co-authored-by: Chris Lalancette <clalancette@gmail.com>

  • Contributors: Florencia, Sai Kishor Kothakota, Steve Peters

5.0.4 (2025-12-08)

  • Revert “Quaternion in urdf (PR123 new attempt) (#231)” (#231)

  • Contributors: Steve Peters

5.0.3 (2025-11-28)

  • Quaternion in urdf (PR123 new attempt) (#194)

  • Removed tinyxml2_vendor dependency (#225)

  • Contributors: Alejandro Hernández Cordero, Guillaume Doisy

5.0.2 (2025-07-03)

  • Relax the version compatibility for urdfdom_headers. (#222)

  • Contributors: Chris Lalancette

5.0.1 (2025-07-01)

4.0.3 (2025-06-23)

  • Removed deprecated code (#217)

  • Remove ROS 1 workflows and update ROS 2 (#218)

  • Improvements for the URDF xsd specification (#200)

  • Update ros2.yaml (#214)

  • fix: missing header (#216)

  • Contributors: Alejandro Hernández Cordero, Amin Ya, Pierre Ballif, mosfet80