You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.
Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion
5.10.1 / 2026-07-17
fix: multiple DOCTYPE declarations.
deps: @nodable/entities for treeshaking
5.10.0 / 2026-07-11
upgrade:
xml-naming v0.3.0: cache support
PEM v1.6.2: sibling bug fix
is-unsafe v2.0.0: tree shaking
*5.9.3 / 2026-06-19
update strnum
*5.9.2 / 2026-06-17
dummy release to test changes in github action
*5.9.1 / 2026-06-17
dummy release to test release from github action
*5.9.0 / 2026-06-15
update strnum to 2.3.0
you can set hex, binary, enotation, infinity, unicode
validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library.
User can override rules by overriding EntityDecoder.
*5.8.0 / 2026-05-12
integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)
This will consider xml-version as well. '1.0' is default
update strnum to 2.3.0
You can set octal and binary parsing which is bydeault off
update fast-xml-builder to 1.2.0
can sanitize tag names if found invalid
fix format output
5.7.3 / 2006-05-05
fix: alwaysCreateTextNode should create text node when attributes are present for self closing node
fix stop node expression when ns prefix is removed (found by iruizsalinas)
update XML Builder to 1.1.7
mark addEntity deprecated
5.7.2 / 2026-04-25
allow numerical external entity for backward compatibility
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.
✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 63.09%. Comparing base (4b03e68) to head (cf93f70). ⚠️ Report is 3 commits behind head on main.
NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer TIP This summary will be updated as you push new changes.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code
0 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 2 updates in the / directory: fast-xml-parser and fast-uri.
Updates
fast-xml-parserfrom 5.10.0 to 5.10.1Release notes
Sourced from fast-xml-parser's releases.
Changelog
Sourced from fast-xml-parser's changelog.
... (truncated)
Commits
2ce71915.10.14e1bb01update for releaseffd1269deps:@nodable/entitiesfor treeshaking4e546e0fix: multiple DOCTYPE are not allowedUpdates
fast-urifrom 3.1.3 to 3.1.5Release notes
Sourced from fast-uri's releases.
Commits
5e179cbBumped v3.1.52cad02dMerge commit from fork6aeece6Bumped v3.1.42d50fbafix: reject literal backslash in URI authorityDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.