Skip to content

chore(deps): update dependency fast-xml-parser to v5.7.2#833

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/fast-xml-parser-5.x-lockfile
Open

chore(deps): update dependency fast-xml-parser to v5.7.2#833
renovate[bot] wants to merge 1 commit intomainfrom
renovate/fast-xml-parser-5.x-lockfile

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Feb 1, 2026

This PR contains the following updates:

Package Change Age Confidence
fast-xml-parser 5.3.35.7.2 age confidence

Release Notes

NaturalIntelligence/fast-xml-parser (fast-xml-parser)

v5.7.2: backward compatibility for numerical external entity, fix #​705, #​817

Compare Source

  • allow numerical external entity for backward compatibility
  • fix #​705: attributesGroupName working with preserveOrder
  • fix #​817: stackoverflow when tag expression is very long

v5.7.1: upgrade @​nodable/entities and FXB

Compare Source

  • Use @nodable/entities v2.1.0
    • breaking changes
      • single entity scan. You're not allowed to use entity value to form another entity name.
      • you cant add numeric external entity
      • entity error message when expantion limit is crossed might change
    • typings are updated for new options related to process entity
    • please follow documentation of @nodable/entities for more detail.
    • performance
      • if processEntities is false, then there should not be impact on performance.
      • if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%
      • if processEntities is true, and you pass entity decoder separately
        • if no entity then performance should be same as before
        • if there are entities then performance should be increased from past versions
    • ignoreAttributes is not required to be set to set xml version for NCR entity value
  • update 'fast-xml-builder' to sanitize malicious CDATA and comment's content

v5.7.0

Compare Source

v5.6.0

Compare Source

v5.5.12

Compare Source

v5.5.11

Compare Source

v5.5.10: performance improvment, increase entity expansion default limit

Compare Source

  • increase default entity explansion limit as many projects demand for that
maxEntitySize: 10000,
maxExpansionDepth: 10000,
maxTotalExpansions: Infinity,
maxExpandedLength: 100000,
maxEntityCount: 1000,
  • performance improvement
    • reduce calls to toString
    • early return when entities are not present
    • prepare rawAttrsForMatcher only if user sets jPath: false

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.5.9...v5.5.10

v5.5.9: fix typins and matcher instance in callbacks

Compare Source

combine typings file to avoid configuration changes
pass readonly instance of matcher to the call backs to avoid accidental push/pop call

v5.5.8

Compare Source

v5.5.7

Compare Source

v5.5.6: fix entity expansion and incorrect replacement and performance

Compare Source

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.5.5...v5.5.6

v5.5.5

Compare Source

v5.5.4

Compare Source

v5.5.3

Compare Source

v5.5.2

Compare Source

v5.5.1: integrate path-expression-matcher

Compare Source

  • support path-expression-matcher
  • fix: stopNode should not be parsed
  • performance improvement for stopNode checking

v5.5.0

Compare Source

v5.4.2

Compare Source

v5.4.1

Compare Source

v5.4.0: Separate Builder

Compare Source

XML Builder was the part of fast-xml-parser for years. But considering that any bug in builder may false-alarm the users who are only using parser and vice-versa, we have decided to split it into a separate package.

Migration

To migrate to fast-xml-builder;

From

import { XMLBuilder } from "fast-xml-parser";

To

import  XMLBuilder  from "fast-xml-builder";

XMLBuilder will be removed from current package in any next major version of this library. So better to migrate.

v5.3.9: support strictReservedNames

Compare Source

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.9...v5.3.9

v5.3.8: handle non-array input for XML builder && support maxNestedTags

Compare Source

v5.3.7: CJS typing fix

Compare Source

What's Changed

New Contributors

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.6...v5.3.7

v5.3.6: Entity security and performance

Compare Source

  • Improve security and performance of entity processing
    • new options maxEntitySize, maxExpansionDepth, maxTotalExpansions, maxExpandedLength, allowedTags,tagFilter
    • fast return when no edtity is present
    • improvement replacement logic to reduce number of calls

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.5...v5.3.6

v5.3.5

Compare Source

v5.3.4: fix: handle HTML numeric and hex entities when out of range

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Feb 1, 2026

📦 Next.js Bundle Analysis for junat.live

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

@codecov
Copy link
Copy Markdown

codecov Bot commented Feb 1, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 62.14%. Comparing base (001772b) to head (71dee22).

❌ Your project check has failed because the head coverage (62.14%) is below the target coverage (70.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #833      +/-   ##
==========================================
+ Coverage   61.48%   62.14%   +0.65%     
==========================================
  Files         123      123              
  Lines        2002     1997       -5     
  Branches      526      526              
==========================================
+ Hits         1231     1241      +10     
+ Misses        771      756      -15     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x-lockfile branch from a26a909 to 1cd7165 Compare February 1, 2026 21:21
@renovate renovate Bot changed the title chore(deps): update dependency fast-xml-parser to v5.3.4 chore(deps): update dependency fast-xml-parser to v5.3.6 Feb 15, 2026
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x-lockfile branch from 1cd7165 to afc0435 Compare February 15, 2026 11:11
@renovate renovate Bot changed the title chore(deps): update dependency fast-xml-parser to v5.3.6 chore(deps): update dependency fast-xml-parser to v5.4.1 Mar 1, 2026
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x-lockfile branch 2 times, most recently from e68b4c6 to 28f3d01 Compare March 1, 2026 21:26
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x-lockfile branch from 28f3d01 to 33109d9 Compare March 14, 2026 23:48
@renovate renovate Bot changed the title chore(deps): update dependency fast-xml-parser to v5.4.1 chore(deps): update dependency fast-xml-parser to v5.5.5 Mar 14, 2026
@renovate renovate Bot changed the title chore(deps): update dependency fast-xml-parser to v5.5.5 chore(deps): update dependency fast-xml-parser to v5.6.0 Apr 16, 2026
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x-lockfile branch 8 times, most recently from c35ba60 to 5ea4a90 Compare April 17, 2026 14:23
@renovate renovate Bot changed the title chore(deps): update dependency fast-xml-parser to v5.6.0 chore(deps): update dependency fast-xml-parser to v5.7.0 Apr 17, 2026
@renovate renovate Bot changed the title chore(deps): update dependency fast-xml-parser to v5.7.0 chore(deps): update dependency fast-xml-parser to v5.7.1 Apr 18, 2026
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x-lockfile branch from 5ea4a90 to 66de301 Compare April 18, 2026 00:31
@renovate renovate Bot changed the title chore(deps): update dependency fast-xml-parser to v5.7.1 chore(deps): update dependency fast-xml-parser to v5.7.2 Apr 25, 2026
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x-lockfile branch from 66de301 to bf3fb1f Compare April 25, 2026 02:02
@renovate renovate Bot force-pushed the renovate/fast-xml-parser-5.x-lockfile branch from bf3fb1f to 71dee22 Compare April 29, 2026 10:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants