Skip to content

Update dependency fast-xml-parser to v5.7.1#511

Merged
renovate[bot] merged 1 commit intomainfrom
renovate/fast-xml-parser-5.x
Apr 25, 2026
Merged

Update dependency fast-xml-parser to v5.7.1#511
renovate[bot] merged 1 commit intomainfrom
renovate/fast-xml-parser-5.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 3, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
fast-xml-parser 5.7.0 → 5.7.1 age confidence

Release Notes

NaturalIntelligence/fast-xml-parser (fast-xml-parser)

v5.7.1: upgrade @​nodable/entities and FXB

Compare Source

  • Use @nodable/entities v2.1.0
    • breaking changes
      • single entity scan. You're not allowed to use entity value to form another entity name.
      • you cant add numeric external entity
      • entity error message when expantion limit is crossed might change
    • typings are updated for new options related to process entity
    • please follow documentation of @nodable/entities for more detail.
    • performance
      • if processEntities is false, then there should not be impact on performance.
      • if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%
      • if processEntities is true, and you pass entity decoder separately
        • if no entity then performance should be same as before
        • if there are entities then performance should be increased from past versions
    • ignoreAttributes is not required to be set to set xml version for NCR entity value
  • update 'fast-xml-builder' to sanitize malicious CDATA and comment's content

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

  • Branch creation
    • "before 8am on Saturday,before 8am on Sunday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot enabled auto-merge (squash) April 3, 2026 17:08
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x branch from 3c213d7 to 937d4da Compare April 3, 2026 17:11
@renovate renovate Bot assigned int128 Apr 3, 2026
@renovate renovate Bot requested a review from int128 April 3, 2026 21:16
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x branch 5 times, most recently from 44a2fc2 to 19be8c1 Compare April 10, 2026 04:33
@renovate renovate Bot changed the title Update dependency fast-xml-parser to v5.5.9 Update dependency fast-xml-parser to v5.5.10 Apr 10, 2026
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x branch 6 times, most recently from 7cf3422 to 63117bf Compare April 15, 2026 18:50
@renovate renovate Bot changed the title Update dependency fast-xml-parser to v5.5.10 Update dependency fast-xml-parser to v5.5.11 Apr 15, 2026
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x branch 5 times, most recently from 03e30e8 to 4af3c2a Compare April 18, 2026 18:46
@int128 int128 requested a review from Copilot April 19, 2026 08:21
Copilot AI reviewed Apr 19, 2026
View reviewed changes
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the GitHub Action’s XML parsing dependency to pick up upstream fixes/performance changes in fast-xml-parser, reflected in both package.json and the pnpm lockfile.

Changes:

  • Bump fast-xml-parser from 5.5.8 to 5.5.11 in package.json.
  • Update pnpm-lock.yaml to resolve the new version and adjust the transitive dependency graph accordingly.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 2 comments.

File Description
package.json Updates the direct dependency version for fast-xml-parser.
pnpm-lock.yaml Updates resolved package versions/integrities; dedupes fast-xml-parser versions across the dependency graph.
Files not reviewed (1)
  • pnpm-lock.yaml: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread pnpm-lock.yaml
Comment on lines 1289 to 1292
'@azure/core-xml@1.5.1':
dependencies:
fast-xml-parser: 5.7.1
fast-xml-parser: 5.5.11
tslib: 2.8.1
Comment thread package.json Outdated
"@octokit/action": "8.0.4",
"@octokit/plugin-retry": "8.1.0",
"fast-xml-parser": "5.5.8",
"fast-xml-parser": "5.5.11",
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x branch from 4af3c2a to de52242 Compare April 20, 2026 06:04
@renovate renovate Bot changed the title Update dependency fast-xml-parser to v5.5.11 Update dependency fast-xml-parser to v5.5.12 Apr 20, 2026
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x branch from de52242 to 0f7134f Compare April 22, 2026 05:40
@renovate renovate Bot changed the title Update dependency fast-xml-parser to v5.5.12 Update dependency fast-xml-parser to v5.6.0 Apr 22, 2026
@renovate renovate Bot changed the title Update dependency fast-xml-parser to v5.6.0 Update dependency fast-xml-parser to v5.6.0 - autoclosed Apr 23, 2026
@renovate renovate Bot closed this Apr 23, 2026
auto-merge was automatically disabled April 23, 2026 05:49

Pull request was closed

@renovate renovate Bot deleted the renovate/fast-xml-parser-5.x branch April 23, 2026 05:49
@renovate renovate Bot changed the title Update dependency fast-xml-parser to v5.6.0 - autoclosed Update dependency fast-xml-parser to v5.7.1 Apr 25, 2026
@renovate renovate Bot reopened this Apr 25, 2026
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x branch 2 times, most recently from 0f7134f to 5072afe Compare April 25, 2026 15:10
@renovate renovate Bot merged commit a3cca2c into main Apr 25, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@int128 int128 Awaiting requested review from int128

Assignees

@int128 int128

Labels

renovate/fast-xml-parser renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@int128