Skip to content

chore(deps): bump fast-xml-parser and edgedriver#3064

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-967a3c02b3
Open

chore(deps): bump fast-xml-parser and edgedriver#3064
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-967a3c02b3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 23, 2026

Bumps fast-xml-parser and edgedriver. These dependencies needed to be updated together.
Updates fast-xml-parser from 4.5.3 to 5.8.0

Release notes

Sourced from fast-xml-parser's releases.

update strnum, FXB. Use xml-naming for DOCTYPE

  • integrate xml-naming to validate DOCTYPE entity name and notation name (using qname because of backward compatibility)
    • This will consider xml-version as well. '1.0' is default
  • update strnum to 2.3.0
    • You can set octal and binary parsing which is by deault off
  • update fast-xml-builder to 1.2.0
    • can sanitize tag names if found invalid
    • fix format output

fix minor old bugs and update builder

  • fix: alwaysCreateTextNode should create text node when attributes are present for self closing node
  • fix stop node expression when ns prefix is removed (found by iruizsalinas)
  • update XML Builder to 1.1.7
  • mark addEntity deprecated

backward compatibility for numerical external entity, fix #705, #817

  • allow numerical external entity for backward compatibility
  • fix #705: attributesGroupName working with preserveOrder
  • fix #817: stackoverflow when tag expression is very long

upgrade @​nodable/entities and FXB

  • Use @nodable/entities v2.1.0
    • breaking changes
      • single entity scan. You're not allowed to use entity value to form another entity name.
      • you cant add numeric external entity
      • entity error message when expantion limit is crossed might change
    • typings are updated for new options related to process entity
    • please follow documentation of @nodable/entities for more detail.
    • performance
      • if processEntities is false, then there should not be impact on performance.
      • if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%
      • if processEntities is true, and you pass entity decoder separately
        • if no entity then performance should be same as before
        • if there are entities then performance should be increased from past versions
    • ignoreAttributes is not required to be set to set xml version for NCR entity value
  • update 'fast-xml-builder' to sanitize malicious CDATA and comment's content

use @​nodable/entities to replace entities

  • No API change
  • No change in performance for basic usage
  • No typing change
  • No config change
  • new dependency
  • breaking: error messages for entities might have been changed.

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.5.12...v5.6.0

performance improvment, increase entity expansion default limit

  • increase default entity explansion limit as many projects demand for that
</tr></table> 

... (truncated)

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

*5.8.0 / 2026-05-12

  • integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)
    • This will consider xml-version as well. '1.0' is default
  • update strnum to 2.3.0
    • You can set octal and binary parsing which is bydeault off
  • update fast-xml-builder to 1.2.0
    • can sanitize tag names if found invalid
    • fix format output

5.7.3 / 2006-05-05

  • fix: alwaysCreateTextNode should create text node when attributes are present for self closing node
  • fix stop node expression when ns prefix is removed (found by iruizsalinas)
  • update XML Builder to 1.1.7
  • mark addEntity deprecated

5.7.2 / 2026-04-25

  • allow numerical external entity for backward compatibility
  • fix #705: attributesGroupName working with preserveOrder
  • fix #817: stackoverflow when tag expression is very long

5.7.1 / 2026-04-20

  • fix typo in CJS typing file

5.7.0 / 2026-04-17

  • Use @nodable/entities v2.1.0
    • breaking changes
      • single entity scan. You're not allowed to user entity value to form another entity name.
      • you cant add numeric external entity
      • entity error message when expantion limit is crossed might change
    • typings are updated for new options related to process entity
    • please follow documentation of @nodable/entities for more detail.
    • performance
      • if processEntities is false, then there should not be impact on performance.
      • if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%
      • if processEntities is true, and you pass entity decoder separately
        • if no entity then performance should be same as before
        • if there are entities then performance should be increased from past versions
    • ignoreAttributes is not required to be set to set xml version for NCR entity value
  • update 'fast-xml-builder' to sanitize malicious CDATA and comment's content

5.6.0 / 2026-04-15

  • fix: entity replacement for numeric entities
  • use @​nodable/entities to replace entities
    • this may change some error messages related to entities expansion limit or inavlid use
    • post check would be exposed in future version

... (truncated)

Commits

Updates edgedriver from 6.1.1 to 6.3.0

Release notes

Sourced from edgedriver's releases.

Release 6.3.0

  • feat: support custom CDN URL with Basic Auth credentials (#282) (#534) (d38915d)

Release 6.2.1

  • fix: CI macos runner (131bf3d)
  • fix: unable to locate ms edge binary on arch linux (#530) (8db7463)
  • chore: update deps (d138576)
  • chore: update CI pipeline (d96c64e)
  • chore(deps-dev): bump the patch-deps-updates-main group with 2 updates (#526) (7ac02cf)

Release 6.2.0

  • chore: update deps (8144db9)
  • chore(deps): bump lewagon/wait-on-check-action (#515) (8c453a2)
  • chore(deps-dev): bump @​types/node from 24.2.1 to 24.5.2 (#519) (d4fda1f)
  • chore(deps): bump the patch-deps-updates-main group with 2 updates (#516) (3b61b70)
  • chore(deps-dev): bump eslint from 9.33.0 to 9.36.0 (#517) (78398c3)
  • chore(dev): bump @​wdio/eslint and fix lint issues from new rules (#507) (af4ed92)
  • refactor!: remove node-fetch; require Node.js >=20 (#505) (83abae8)
  • chore: update prepare script for Husky 9 compatibility (#506) (e26dd84)
  • chore(deps): bump @​zip.js/zip.js in the patch-deps-updates-main group (#504) (c61a2c6)
  • chore(deps-dev): bump the major-deps-updates-main group with 3 updates (#503) (7cfa767)

Release 6.1.2

  • fix: update CDN url (#501) (b5a8608)
  • chore(deps): bump lewagon/wait-on-check-action (#499) (813ff05)
  • chore(deps): bump dependabot/fetch-metadata (#495) (7bf92a9)
  • chore(deps-dev): bump the patch-deps-updates-main group with 2 updates (#494) (984300a)
  • chore(deps): bump the patch-deps-updates-main group with 3 updates (#492) (02653f0)
  • chore(deps-dev): bump the patch-deps-updates-main group with 2 updates (#490) (fbae701)
  • chore(deps-dev): bump eslint in the minor-deps-updates-main group (#489) (91e2a8f)
  • chore(deps-dev): bump webdriverio in the minor-deps-updates-main group (#488) (8f7aea6)
  • chore(deps): bump the patch-deps-updates-main group with 3 updates (#487) (b5557c3)
  • chore(deps-dev): bump the patch-deps-updates-main group with 3 updates (#485) (6b5a694)
  • chore(deps-dev): bump the minor-deps-updates-main group with 3 updates (#486) (aeb4bd2)
  • chore(deps): bump fast-xml-parser in the major-deps-updates-main group (#484) (fc88b3b)
  • chore(deps-dev): bump the minor-deps-updates-main group with 2 updates (#483) (2f85f9f)
  • chore(deps-dev): bump the patch-deps-updates-main group with 3 updates (#482) (bae6026)
  • chore(deps-dev): bump the minor-deps-updates-main group with 2 updates (#481) (dfe00c9)
  • chore(deps-dev): bump @​types/node in the patch-deps-updates-main group (#480) (d918ffc)
  • chore(deps): bump the patch-deps-updates-main group across 1 directory with 4 updates (#479) (51c710b)
  • chore(deps-dev): bump @​types/node in the minor-deps-updates-main group (#478) (574f563)
  • chore(deps-dev): bump the minor-deps-updates-main group with 2 updates (#476) (02ebc15)
  • chore(deps-dev): bump the patch-deps-updates-main group with 4 updates (#475) (c6899ac)
  • chore(deps): bump dependabot/fetch-metadata from 2.2.0 to 2.3.0 in the minor-deps-updates group (#474) (739c30f)
  • chore(deps-dev): bump the major-deps-updates-main group with 2 updates (#473) (77bc7c7)
  • chore(deps-dev): bump @​types/node in the patch-deps-updates-main group (#472) (e498f2c)
  • chore(deps-dev): bump the patch-deps-updates-main group with 3 updates (#470) (80cd1d4)
  • chore(deps-dev): bump the minor-deps-updates-main group with 2 updates (#471) (dbe3431)
  • chore(deps-dev): bump release-it in the major-deps-updates-main group (#469) (b94395b)
  • chore(deps-dev): bump the patch-deps-updates-main group with 2 updates (#468) (8a663a7)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for edgedriver since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 23, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented Apr 23, 2026

⚠️ No Changeset found

Latest commit: 141a220

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@web-padawan
Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [edgedriver](https://github.com/webdriverio-community/node-edgedriver). These dependencies needed to be updated together.

Updates `fast-xml-parser` from 4.5.3 to 5.8.0
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v4.5.3...v5.8.0)

Updates `edgedriver` from 6.1.1 to 6.3.0
- [Release notes](https://github.com/webdriverio-community/node-edgedriver/releases)
- [Commits](webdriverio-community/node-edgedriver@6.1.1...6.3.0)

---
updated-dependencies:
- dependency-name: edgedriver
  dependency-version: 6.3.0
  dependency-type: indirect
- dependency-name: fast-xml-parser
  dependency-version: 5.7.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-967a3c02b3 branch from a84e83a to 141a220 Compare May 23, 2026 08:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant