Skip to content

refactor: Bump fast-xml-builder from 1.1.4 to 1.2.0 - #10457

Merged
mtrezza merged 1 commit into
alphafrom
dependabot/npm_and_yarn/fast-xml-builder-1.2.0
Jul 13, 2026
Merged

mtrezza merged 1 commit into
alphafrom
dependabot/npm_and_yarn/fast-xml-builder-1.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 8, 2026 •

Copy link
Copy Markdown
Contributor

Bumps fast-xml-builder from 1.1.4 to 1.2.0.

Changelog

Sourced from fast-xml-builder's changelog.

1.2.0 (2026-05-08)

  • Add support for sanitizeName option
  • Support xml-naming for validating and sanitizing tag and attribute names

1.1.9 (2026-05-06)

  • fix: format output for preserve order when indent by is set to empty string

1.1.8 (2026-05-05)

  • fix: skip text property for PI tags
  • improve typings

1.1.7 (2026--05-04)

  • fix security issues when attribute value contains quotes

1.1.6 (2026--05-04)

  • fix security issues related to comment
  • skip comment with null value

1.1.5 (2026-04-17)

  • fix security issues related to comment and cdata

1.1.4 (2026-03-16)

  • support maxNestedTags option

1.1.3 (2026-03-13)

  • declare Matcher & Expression as unknown so user is not forced to install path-expression-matcher

1.1.2 (2026-03-11)

  • fix typings

1.1.1 (2026-03-11)

  • upgrade path-expression-matcher to 1.1.3

1.1.0 (2026-03-10)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Summary by CodeRabbit

  • Chores
    • Updated XML processing packages to newer versions.
    • Improved dependency compatibility and package metadata.

@dependabot dependabot Bot added dependencies Bot label; pull requests that updates a dependency file javascript Pull requests that update javascript code labels May 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/fast-xml-builder-1.2.0 branch 2 times, most recently from 8541b4c to 369fead Compare May 18, 2026 15:08
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/fast-xml-builder-1.2.0 branch 3 times, most recently from 08baffd to 07225ec Compare June 3, 2026 14:45
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/fast-xml-builder-1.2.0 branch from 07225ec to 1d026a8 Compare June 4, 2026 00:00
Bumps [fast-xml-builder](https://github.com/NaturalIntelligence/fast-xml-builder) from 1.1.4 to 1.2.0.
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-builder/blob/main/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-builder@v1.1.4...v1.2.0)

---
updated-dependencies:
- dependency-name: fast-xml-builder
  dependency-version: 1.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/fast-xml-builder-1.2.0 branch from 1d026a8 to 3e24de1 Compare June 6, 2026 00:47
@mtrezza

mtrezza commented Jul 13, 2026

Copy link
Copy Markdown
Member

@coderabbitai review

@coderabbitai

coderabbitai Bot commented Jul 13, 2026 •

Copy link
Copy Markdown
✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@coderabbitai

coderabbitai Bot commented Jul 13, 2026 •

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

The lockfile updates fast-xml-builder to 1.2.0, path-expression-matcher to 1.5.0, and adds xml-naming 0.1.0 with corresponding nested and top-level dependency metadata.

Changes

XML dependency refresh

Layer / File(s) Summary
Update XML dependency graph
package-lock.json
The lockfile synchronizes XML package versions, integrity and resolution metadata, updated dependency requirements, funding information, and the new optional xml-naming package entries.

Estimated code review effort: 1 (Trivial) | ~5 minutes


Caution

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

  • Ignore

❌ Failed checks (1 error, 1 warning, 1 inconclusive)

Check name Status Explanation Resolution
Description check ❌ Error The description omits the required Issue, Approach, and Tasks sections from the template. Add the missing sections and briefly describe the issue, the approach, and the completed task checklist items.
Linked Issues check ⚠️ Warning The PR updates fast-xml-builder, but linked issue #5 is about Push Delivery and is not addressed here. Either link a matching issue for this dependency bump or implement the push delivery work described in #5.
Engage In Review Feedback ❓ Inconclusive No review comments or discussion history are present in the checkout; only a Dependabot lockfile bump is visible, so engagement can’t be verified. Provide the PR review thread or linked discussion showing the feedback was discussed and then either implemented in a commit or retracted.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly summarizes the dependency bump and uses an allowed prefix.
Out of Scope Changes check ✅ Passed The changes stay within the dependency upgrade and related lockfile updates.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Security Check ✅ Passed PASS: 1.2.0 is beyond the known fast-xml-builder advisories, and path-expression-matcher 1.5.0 shows no direct issues. citeturn3view0turn3view1turn5view2turn6search0
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/npm_and_yarn/fast-xml-builder-1.2.0

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@mtrezza
mtrezza merged commit 7d4d135 into alpha Jul 13, 2026
21 of 22 checks passed
@mtrezza
mtrezza deleted the dependabot/npm_and_yarn/fast-xml-builder-1.2.0 branch July 13, 2026 12:12
@parseplatformorg

Copy link
Copy Markdown
Contributor

🎉 This change has been released in version 9.10.1-alpha.1

@parseplatformorg parseplatformorg added the state:released-alpha Released as alpha version label Jul 13, 2026
@parseplatformorg

Copy link
Copy Markdown
Contributor

🎉 This change has been released in version 9.10.1

@parseplatformorg parseplatformorg added the state:released Released as stable version label Sep 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Bot label; pull requests that updates a dependency file javascript Pull requests that update javascript code state:released Released as stable version state:released-alpha Released as alpha version

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants