Upgrade: [dependabot] - bump fast-xml-parser and @aws-sdk/xml-builder

[dependabot]

Bumps fast-xml-parser and @aws-sdk/xml-builder. These dependencies needed to be updated together.
Updates fast-xml-parser from 5.5.6 to 5.5.8

Release notes

Sourced from fast-xml-parser's releases.

fix bugs of entity parsing and value parsing

fix: entity expansion limits update strnum package to 2.2.0

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.5.11 / 2026-04-08

• Performance Improvement
  • integrate ExpressionSet for stopNodes

5.5.10 / 2026-04-03

• increase default entity explansion limit as many projects demand for that
• performance improvement
  • reduce calls to toString
  • early return when entities are not present
  • prepare rawAttrsForMatcher only if user sets jPath: false

5.5.9 / 2026-03-23

• combine typing files

4.5.5 / 2026-03-22

apply fixes from v5 (legacy maintenance branch v4-maintenance)

• support maxEntityCount
• support onDangerousProperty
• support maxNestedTags
• handle prototype pollution
• fix incorrect entity name replacement
• fix incorrect condition for entity expansion

5.5.8 / 2026-03-20

• pass read only matcher in callback

5.5.7 / 2026-03-19

• fix: entity expansion limits
• update strnum package to 2.2.0

5.5.6 / 2026-03-16

• update builder dependency
• fix incorrect regex to replace . in entity name
• fix check for entitiy expansion for lastEntities and html entities too

5.5.5 / 2026-03-13

• sanitize dangerous tag or attribute name
• error on critical property name
• support onDangerousProperty option

5.5.4 / 2026-03-13

• declare Matcher & Expression as unknown so user is not forced to install path-expression-matcher

... (truncated)

Commits

• a92a665 pass read only matcher in call back
• a21c441 update package detail
• 239b64a check for min value for entity exapantion options
• 61cb666 restrict more properties to be unsafe
• 41abd66 performance improvement of reading DOCTYPE
• 3dfcd20 refactor: performance improvement
• See full diff in compare view

Updates @aws-sdk/xml-builder from 3.972.13 to 3.972.17

Changelog

Sourced from @​aws-sdk/xml-builder's changelog.

3.972.17 (2026-04-07)

Chores

• codegen: update for sparse types and retry 2.1 updates (#7916) (b19357a)

3.972.16 (2026-03-25)

Docs

• packages-internal: readme updates for internal packages (#7885) (2da8b4c)

3.972.15 (2026-03-20)

Chores

• xml-builder: bump fast-xml-parser to 5.5.8 (#7876) (80ef601)

3.972.14 (2026-03-18)

Bug Fixes

• xml-builder: configure maxTotalExpansions on fast-xml-parser (#7868) (2ad1477)

Chores

• xml-builder: single-pass XML escape for escapeElement and escapeAttribute (#7833) (97de564)

3.972.12 (2026-03-18)

Chores

• bump fast-xml-parser to 5.5.6 (#7862) (5e8d73b)

3.972.11 (2026-03-13)

Chores

• codegen: sync for retry strategy lifecycle fix (#7842) (7bf8888)

3.972.10 (2026-03-04)

Chores

• set downlevel types to be used in typescript@'<4.5' (#7817) (03dad66)

3.972.9 (2026-02-28)

Chores

• deps: bump fast-xml-parser from 5.3.6 to 5.4.1 (#7796) (c0dac29)

... (truncated)

Commits

• See full diff in compare view

[github-actions]

This PR is raised by Dependabot to update a dependency.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud