Add opt-in strict decoding for unknown keys by lynchsft · Pull Request #171 · SwiftyLab/MetaCodable

lynchsft · 2026-11-11T17:41:01Z

Summary

Add rejectUnknownKeys: Bool = false to @Codable and @ConformDecodable.
Reject unsupported keys across generated root, nested, alias, fallback, enum, and class-inheritance decoding paths with DecodingError.dataCorrupted.
Add the strict-decoding TDD matrix and update documentation and changelog.

Tests

swift test --filter StrictDecodingTests
swift test

Ingest SwiftSyntax 601.0.0-latest

… 601.

Account for failable (optional) TypeSyntax initializer in SwiftSyntax 601.

…a24e1dda24bf1d704c67f45f472a05167b6033

…f1d704c67f45f472a05167b6033 Secure Mirror Auto Update

…54b7d4506d32f58ca260ca6af5475a8a090aa0

…2f58ca260ca6af5475a8a090aa0 Auto update ee54b7d

Add CODEOWNERS

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

…urity-remediation HV29999: Remediate StepSecurity Detected Issues

…4bfeb949c0f31ef80fdc3af8f77c5b35ecaea4

…f31ef80fdc3af8f77c5b35ecaea4 Secure Mirror Auto Update

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

…urity-remediation HV29999: Remediate StepSecurity Detected Issues

…4bef7393fef098ae0b642f8e525c458ede83b2

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

…f098ae0b642f8e525c458ede83b2 Secure Mirror Auto Update

…urity-remediation HV29999: Remediate StepSecurity Detected Issues

…ate_1ae475b0c1ee78035fd0ad157770935476a76eca

…78035fd0ad157770935476a76eca Secure Mirror Auto Update

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Ensure nested direct and keyed properties share strict decoder metadata without container redeclarations. Add regression coverage for delegated nested payload keys.\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Keep Foundation dictionary strategies intact for optional strict payloads and preserve strict metadata when permissive class superclasses decode under strict subclasses.\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Keep nested strict wrappers and deferred validation inside optional/default fallback scopes while preserving delegated payload validation. Add regression coverage for defaults, nulls, optional dictionaries, and permissive superclass metadata.\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Keep mixed direct and keyed decoding scoped across required siblings, descendant containers, and deferred class validation. Add regression coverage for optional, descendant, and inherited mixed payloads.\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Preserve strict decoder observations while moving deferred mixed-container validation after superclass decoding. Add coverage for valid superclass keys in inherited mixed payloads.\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Keep optional mixed-container decoder handles alive across deferred superclass validation and validate them only when their container exists.\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Replace macro-mangled inherited decoder locals with project-standard strictDecoder naming and refresh affected expansion snapshots.\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Adora Lynch and others added 30 commits April 30, 2025 11:53

Ingest SwiftSyntax 601.0.0-latest

015d674

Merge pull request SwiftyLab#1 from euc-eng/lynchal_euc-patch-1

80003a6

Ingest SwiftSyntax 601.0.0-latest

Account for failable (optional) TypeSyntax initializer in SwiftSyntax…

45bc3ab

… 601.

Merge pull request SwiftyLab#2 from euc-eng/lynchal_euc-patch-2

2081735

Account for failable (optional) TypeSyntax initializer in SwiftSyntax 601.

Merge remote-tracking branch 'public_origin/main' into auto_update_75…

002b9d6

…a24e1dda24bf1d704c67f45f472a05167b6033

Merge pull request SwiftyLab#3 from euc-eng/auto_update_75a24e1dda24b…

c8e557d

…f1d704c67f45f472a05167b6033 Secure Mirror Auto Update

Merge remote-tracking branch 'public_origin/main' into auto_update_ee…

5c0499e

…54b7d4506d32f58ca260ca6af5475a8a090aa0

Merge pull request SwiftyLab#5 from euc-eng/auto_update_ee54b7d4506d3…

2015ca8

…2f58ca260ca6af5475a8a090aa0 Auto update ee54b7d

Add CODEOWNERS

bacc1a2

Merge pull request SwiftyLab#9 from euc-eng/add-codeowners

ae49426

Add CODEOWNERS

HV29999: [StepSecurity] Apply security best practices

fae1fb2

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

Merge pull request SwiftyLab#10 from euc-eng/chore/GHA-050205-stepsec…

0376f28

…urity-remediation HV29999: Remediate StepSecurity Detected Issues

Merge remote-tracking branch 'public_origin/main' into auto_update_3d…

15dfbab

…4bfeb949c0f31ef80fdc3af8f77c5b35ecaea4

Merge pull request SwiftyLab#11 from euc-eng/auto_update_3d4bfeb949c0…

533b3a4

…f31ef80fdc3af8f77c5b35ecaea4 Secure Mirror Auto Update

HV29999: [StepSecurity] Apply security best practices

da882ca

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

Merge pull request SwiftyLab#12 from euc-eng/chore/GHA-300342-stepsec…

7118634

…urity-remediation HV29999: Remediate StepSecurity Detected Issues

Merge remote-tracking branch 'public_origin/main' into auto_update_b4…

6b63e59

…4bef7393fef098ae0b642f8e525c458ede83b2

HV29999: [StepSecurity] Apply security best practices

dc61199

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

Merge pull request SwiftyLab#13 from euc-eng/auto_update_b44bef7393fe…

bd7f950

…f098ae0b642f8e525c458ede83b2 Secure Mirror Auto Update

Merge pull request SwiftyLab#14 from euc-eng/chore/GHA-290538-stepsec…

364450a

…urity-remediation HV29999: Remediate StepSecurity Detected Issues

Merge commit '1ae475b0c1ee78035fd0ad157770935476a76eca' into auto_upd…

c8815bc

…ate_1ae475b0c1ee78035fd0ad157770935476a76eca

Merge pull request SwiftyLab#15 from euc-eng/auto_update_1ae475b0c1ee…

e8d6413

…78035fd0ad157770935476a76eca Secure Mirror Auto Update

Add strict decoding for unknown keys

3b084e1

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Fix strict decoding review feedback

80a9bdb

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Refine strict decoding metadata propagation

e94dd5e

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Harden strict decoding validation

af2cca3

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Cover mixed untagged enum decoding

2a19a35

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Fix inherited path and mixed enum validation

5944181

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Cover mixed untagged decoding errors

abc4208

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Preserve strict untagged decoding errors

8592f2a

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Adora Lynch and others added 30 commits November 10, 2026 12:51

Update inherited decoding expansion snapshot

63f183b

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Validate inherited keys for empty strict subclasses

aa21866

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Preserve strict decoder terminal scopes

7726c1a

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Preserve structural validation scopes

05fa179

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Harden strict decoder inheritance scopes

8171cba

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Allow deeper adjacent discriminator paths

57e17a5

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Refresh Copilot review after resolving findings

07ffa6e

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Harden optional and mixed enum payload decoding

5b4079d

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Harden remaining delegated enum cases

c06a9d6

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Finish direct-case capability propagation

ec5045b

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Scope delegated enum validation by container

e3a7f8e

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Refresh Copilot review after final fixes

e1adc2c

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Isolate untagged decoding attempts

8df77ad

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Refresh Copilot review after transactional fix

15a9172

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Validate mixed direct and keyed records

5062bd3

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Refresh Copilot review after final shepherd fixes

387a73c

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Defer mixed validation until pending decoding

6007393

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Refresh Copilot review after resolving final threads

d7f4025

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Preserve metadata for inherited optional payloads

2414fe2

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Refresh Copilot review after metadata fixes

8955150

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Preserve specialized optional decoding strategies

9830a35

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Refresh Copilot review after specialized strategy fix

34bba8a

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Refresh Copilot review after resolving metadata threads

f631ef7

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Fix nested strict mixed decoding

ccb51e4

Ensure nested direct and keyed properties share strict decoder metadata without container redeclarations. Add regression coverage for delegated nested payload keys.\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Preserve optional decoder metadata

e8adff6

Keep Foundation dictionary strategies intact for optional strict payloads and preserve strict metadata when permissive class superclasses decode under strict subclasses.\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Scope deferred strict decoder handles

d19d62f

Keep optional mixed-container decoder handles alive across deferred superclass validation and validate them only when their container exists.\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Use standard strict decoder names

f01ed9c

Replace macro-mangled inherited decoder locals with project-standard strictDecoder naming and refresh affected expansion snapshots.\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Navigation Menu

Repository navigation

Add opt-in strict decoding for unknown keys - #171

Add opt-in strict decoding for unknown keys#171
lynchsft wants to merge 66 commits into
SwiftyLab:mainfrom
lynchsft:lynchal-euc-strict-decoding

lynchsft commented Nov 11, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

lynchsft commented Nov 11, 2026

Summary

Tests

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant