FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Bump fast-xml-parser from 5.5.6 to 5.5.7 by dependabot[bot] · Pull Request #3587 · github/codeql-action · GitHub

/ codeql-action Public

Bump fast-xml-parser from 5.5.6 to 5.5.7 - #3587

Merged
henrymercer merged 2 commits into
mainfrom
dependabot/npm_and_yarn/fast-xml-parser-5.5.7
Mar 23, 2026
ConversationCommits (2)ChecksFiles changed
Merged

Bump fast-xml-parser from 5.5.6 to 5.5.7#3587
henrymercer merged 2 commits into
mainfrom
dependabot/npm_and_yarn/fast-xml-parser-5.5.7

Conversation

dependabot Bot commented on behalf of github Mar 20, 2026

Copy link
Copy Markdown
Contributor

Bumps fast-xml-parser from 5.5.6 to 5.5.7.

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.5.7 / 2026-03-19

  • fix: entity expansion limits
  • update strnum package to 2.2.0

5.5.6 / 2026-03-16

  • update builder dependency
  • fix incorrect regex to replace . in entity name
  • fix check for entitiy expansion for lastEntities and html entities too

5.5.5 / 2026-03-13

  • sanitize dangerous tag or attribute name
  • error on critical property name
  • support onDangerousProperty option

5.5.4 / 2026-03-13

  • declare Matcher & Expression as unknown so user is not forced to install path-expression-matcher

5.5.3 / 2026-03-11

  • upgrade builder

5.5.2 / 2026-03-11

  • update dependency to fix typings

5.5.1 / 2026-03-10

  • fix dependency

5.5.0 / 2026-03-10

  • support path-expression-matcher
  • fix: stopNode should not be parsed
  • performance improvement for stopNode checking

5.4.2 / 2026-03-03

  • support maxEntityCount option

5.4.1 / 2026-02-25

  • fix (#785) unpairedTag node should not have tag content

5.4.0 / 2026-02-25

  • migrate to fast-xml-builder

5.3.9 / 2026-02-25

  • support strictReservedNames

5.3.8 / 2026-02-25

  • support maxNestedTags

... (truncated)

Commits
  • a21c441 update package detail
  • 239b64a check for min value for entity exapantion options
  • 61cb666 restrict more properties to be unsafe
  • 41abd66 performance improvement of reading DOCTYPE
  • 3dfcd20 refactor: performance improvement
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bump fast-xml-parser from 5.5.6 to 5.5.7
1a45a9b 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.5.6 to 5.5.7.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.5.6...v5.5.7)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.5.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label Mar 20, 2026
dependabot Bot requested a review from a team as a code owner March 20, 2026 01:38
dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label Mar 20, 2026
github-actions Bot added size/XS Should be very easy to review and removed Rebuild Re-transpile JS & re-generate workflows labels Mar 20, 2026

github-actions Bot commented Mar 20, 2026

Copy link
Copy Markdown
Contributor

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

github-actions Bot marked this pull request as draft March 20, 2026 01:40
henrymercer marked this pull request as ready for review March 23, 2026 14:02
Copilot AI review requested due to automatic review settings March 23, 2026 14:02
henrymercer enabled auto-merge March 23, 2026 14:02
Copilot AI reviewed Mar 23, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Pull request overview

Updates the pinned dependency tree to pick up fast-xml-parser@5.5.7 (and its updated strnum dependency), bringing in upstream fixes around entity expansion limits.

Changes:

  • Bump fast-xml-parser from 5.5.6 to 5.5.7 in package-lock.json.
  • Update the lockfile’s resolved strnum version to 2.2.1 (with fast-xml-parser now depending on ^2.2.0).
  • Regenerate compiled lib/ bundles to reflect the updated dependency tree.

Reviewed changes

Copilot reviewed 12 out of 13 changed files in this pull request and generated no comments.

Show a summary per file
File Description
package-lock.json Updates resolved versions/integrity for fast-xml-parser@5.5.7 and strnum.
lib/upload-sarif-action.js Generated output updated due to dependency bump (not reviewed).
lib/upload-sarif-action-post.js Generated output updated due to dependency bump (not reviewed).
lib/upload-lib.js Generated output updated due to dependency bump (not reviewed).
lib/start-proxy-action.js Generated output updated due to dependency bump (not reviewed).
lib/start-proxy-action-post.js Generated output updated due to dependency bump (not reviewed).
lib/setup-codeql-action.js Generated output updated due to dependency bump (not reviewed).
lib/resolve-environment-action.js Generated output updated due to dependency bump (not reviewed).
lib/init-action.js Generated output updated due to dependency bump (not reviewed).
lib/init-action-post.js Generated output updated due to dependency bump (not reviewed).
lib/autobuild-action.js Generated output updated due to dependency bump (not reviewed).
lib/analyze-action.js Generated output updated due to dependency bump (not reviewed).
lib/analyze-action-post.js Generated output updated due to dependency bump (not reviewed).

henrymercer added this pull request to the merge queue Mar 23, 2026
Merged via the queue into main with commit 72c0b0e Mar 23, 2026
221 checks passed
henrymercer deleted the dependabot/npm_and_yarn/fast-xml-parser-5.5.7 branch March 23, 2026 14:44
This was referenced Mar 27, 2026
Closed
Merged
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
henrymercer henrymercer approved these changes

Assignees

No one assigned

Labels

size/XS Should be very easy to review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

Back | FazBrowse Home | New Git URL