Skip to content

Bump fast-xml-parser from 5.6.0 to 5.7.0 in /specifyweb/frontend/js_src - #8362

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/specifyweb/frontend/js_src/fast-xml-parser-5.7.0
Closed

Bump fast-xml-parser from 5.6.0 to 5.7.0 in /specifyweb/frontend/js_src#8362
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/specifyweb/frontend/js_src/fast-xml-parser-5.7.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps fast-xml-parser from 5.6.0 to 5.7.0.

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.11.1 / 2026-08-27

  • fix: validator; Replace regex with a single-pass scanner for attribute tokens, eliminating quadratic behavior on long whitespace runs.

5.11.0 / 2026-08-16

  • feat: support for endIndex in node metadata (#850) [By Pavel Dranichnikov]
  • fix: don't crash on a closing tag with no matching opening tag (#861) [By Haïm Dimer]
  • fix: DOCTYPE to read SYSTEM/PUBLIC
  • deps: strnum v2.4.2

5.10.1 / 2026-07-17

  • fix: multiple DOCTYPE declarations.
  • deps: @nodable/entities for treeshaking

5.10.0 / 2026-07-11

  • upgrade:
    • xml-naming v0.3.0: cache support
    • PEM v1.6.2: sibling bug fix
    • is-unsafe v2.0.0: tree shaking

*5.9.3 / 2026-06-19

  • update strnum

*5.9.2 / 2026-06-17

  • dummy release to test changes in github action

*5.9.1 / 2026-06-17

  • dummy release to test release from github action

*5.9.0 / 2026-06-15

  • update strnum to 2.3.0
    • you can set hex, binary, enotation, infinity, unicode
  • validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.

*5.8.0 / 2026-05-12

  • integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)
    • This will consider xml-version as well. '1.0' is default
  • update strnum to 2.3.0
    • You can set octal and binary parsing which is bydeault off
  • update fast-xml-builder to 1.2.0
    • can sanitize tag names if found invalid
    • fix format output

5.7.3 / 2006-05-05

  • fix: alwaysCreateTextNode should create text node when attributes are present for self closing node

... (truncated)

Commits
  • f529642 update to release v5.7.0
  • 52a8583 Revert "improve performance of attributes reading"
  • 8d187f9 update builder
  • e174168 improve performance of attributes reading
  • 79a8dde update docs
  • f5cd5a5 set xml version to decoder even if attributes are ignored
  • f44b923 remove unwanted tests
  • 869ec8b Use @​nodable/entities v2.1.0
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 28, 2026
@github-project-automation github-project-automation Bot moved this to 📋Back Log in General Tester Board Jul 28, 2026
@github-actions

github-actions Bot commented Jul 28, 2026

Copy link
Copy Markdown

Warning

One or more dependencies are approaching or past End-of-Life.
Please plan upgrades accordingly.

STATUS=WARNING
NODE_VERSION=20
NODE_CYCLE=20
EOL_DATE=2026-04-30
DAYS_REMAINING=-117

--- Node.js ---
Version: 20
EOL: 2026-04-30
Status: WARNING

STATUS=OK
PYTHON_VERSION=3.12
PYTHON_CYCLE=3.12
EOL_DATE=2028-10-31
DAYS_REMAINING=798

--- Python ---
Version: 3.12
EOL: 2028-10-31
Status: OK

STATUS=WARNING
DJANGO_VERSION=4.2
DJANGO_CYCLE=4.2
EOL_DATE=2026-04-07
DAYS_REMAINING=-140

--- Django ---
Version: 4.2
EOL: 2026-04-07
Status: WARNING


@dependabot dependabot Bot changed the title Bump fast-xml-parser from 5.6.0 to 5.7.0 in /specifyweb/frontend/js_src chore(deps-dev): bump fast-xml-parser from 5.6.0 to 5.7.0 in /specifyweb/frontend/js_src Aug 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/specifyweb/frontend/js_src/fast-xml-parser-5.7.0 branch from 8c8fc46 to 2c62512 Compare August 25, 2026 18:08
@g1rly-c0d3r

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.6.0 to 5.7.0.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.6.0...v5.7.0)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.7.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump fast-xml-parser from 5.6.0 to 5.7.0 in /specifyweb/frontend/js_src Bump fast-xml-parser from 5.6.0 to 5.7.0 in /specifyweb/frontend/js_src Sep 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/specifyweb/frontend/js_src/fast-xml-parser-5.7.0 branch from 2c62512 to 71b1ac1 Compare September 11, 2026 14:08
@coderabbitai

coderabbitai Bot commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 06ec7ef8-b9d2-400a-888b-d22fe1ab8eaf

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@g1rly-c0d3r g1rly-c0d3r left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Frontend tests pass locally, see #8483 (review).

@g1rly-c0d3r
g1rly-c0d3r requested review from CarolineDenis and removed request for CarolineDenis September 11, 2026 15:17
@g1rly-c0d3r

Copy link
Copy Markdown
Contributor

#8443 will make this PR obsolete.

@github-project-automation github-project-automation Bot moved this from 📋Back Log to ✅Done in General Tester Board Sep 11, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/specifyweb/frontend/js_src/fast-xml-parser-5.7.0 branch September 11, 2026 16:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

Status: ✅Done

Development

Successfully merging this pull request may close these issues.

1 participant