Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jun 26, 2025

Bumps fast-xml-parser to 4.4.1 and updates ancestor dependency @aws-sdk/client-dynamodb. These dependencies need to be updated together.

Updates fast-xml-parser from 3.19.0 to 4.4.1

Release notes

Sourced from fast-xml-parser's releases.

Summary update on all the previous releases from v4.2.4

  • Multiple minor fixes provided in the validator and parser
  • v6 is added for experimental use.
  • ignoreAttributes support function, and array of string or regex
  • Add support for parsing HTML numeric entities
  • v5 of the application is ESM module now. However, JS is also supported

Note: Release section in not updated frequently. Please check CHANGELOG or Tags for latest release information.

Security Fix

Update to this release if you use entity parsing in Fast XML Parser.

v4

  • Generating different combined, parser only, builder only, validator only browser bundles
  • Keeping cjs modules as they can be imported in cjs and esm modules both. Otherwise refer esm branch.

4.0.0-beta.8 / 2021-12-13

  • call tagValueProcessor for stop nodes

4.0.0-beta.7 / 2021-12-09

  • fix Validator bug when an attribute has no value but '=' only
  • XML Builder should suppress unpaired tags by default.
  • documents update for missing features
  • refactoring to use Object.assign
  • refactoring to remove repeated code

4.0.0-beta.6 / 2021-12-05

  • Support PI Tags processing
  • Support suppressBooleanAttributes by XML Builder for attributes with value true.

4.0.0-beta.5 / 2021-12-04

  • fix: when a tag with name "attributes"

4.0.0-beta.4 / 2021-12-02

  • Support HTML document parsing
  • skip stop nodes parsing when building the XML from JS object
  • Support external entites without DOCTYPE
  • update dev dependency: strnum v1.0.5 to fix long number issue

4.0.0-beta.3 / 2021-11-30

  • support global stopNodes expression like "*.stop"
  • support self-closing and paired unpaired tags
  • fix: CDATA should not be parsed.
  • Fix typings for XMLBuilder (#396)(By Anders Emil Salvesen)
  • supports XML entities, HTML entities, DOCTYPE entities

⚠️ 4.0.0-beta.2 / 2021-11-19

  • rename attrMap to attibutes in parser output when preserveOrder:true
  • supports unpairedTags

... (truncated)

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

5.2.5 / 2025-06-08

  • Inform user to use fxp-cli instead of in-built CLI feature
  • Export typings for direct use

5.2.4 / 2025-06-06

  • fix (#747): fix EMPTY and ANY with ELEMENT in DOCTYPE

5.2.3 / 2025-05-11

  • fix (#747): support EMPTY and ANY with ELEMENT in DOCTYPE

5.2.2 / 2025-05-05

  • fix (#746): update strnum to fix parsing issues related to enotations

5.2.1 / 2025-04-22

  • fix: read DOCTYPE entity value correctly
  • read DOCTYPE NOTATION, ELEMENT exp but not using read values

5.2.0 / 2025-04-03

5.1.0 / 2025-04-02

  • feat: declare package as side-effect free (#738) (By Thomas Bouffard)
  • fix cjs build mode
  • fix builder return type to string

5.0.9 / 2025-03-14

  • fix: support numeric entities with values over 0xFFFF (#726) (By Marc Durdin)
  • fix: update strnum to fix parsing 0 if skiplike option is used

5.0.8 / 2025-02-27

  • fix parsing 0 if skiplike option is used.
    • updating strnum dependency

5.0.7 / 2025-02-25

  • fix (#724) typings for cjs.

5.0.6 / 2025-02-20

5.0.5 / 2025-02-20

  • fix parsing of string starting with 'e' or 'E' by updating strnum

5.0.4 / 2025-02-20

  • fix CLI to support all the versions of node js when displaying library version.
  • fix CJS import in v5

... (truncated)

Commits
  • d40e29c update package detail and browser bundles
  • d0bfe8a fix maxlength for currency value
  • 2c14fcf Update bug-report-or-unexpected-output.md
  • acf610f fix #634: build attributes with oneListGroup and attributesGroupName (#653)
  • 931e910 fix: get oneListGroup to work as expected for array of strings (#662)
  • b8e40c8 Update ISSUE_TEMPLATE.md
  • a6265ba chore: add trend image (#658)
  • db1c548 redesign README.md
  • 338a2c6 Rename 1.Getting Started.md to 1.GettingStarted.md
  • c762537 Rename v5 docs filenames (#659)
  • Additional commits viewable in compare view

Updates @aws-sdk/client-dynamodb from 3.154.0 to 3.835.0

Release notes

Sourced from @​aws-sdk/client-dynamodb's releases.

v3.835.0

3.835.0(2025-06-23)

Chores
New Features
  • clients: update client endpoints as of 2025-06-23 (34c34cad)
  • client-glue: AWS Glue now supports sort and z-order strategy for managed automated compaction for Iceberg tables in addition to binpack. (19aaef44)
  • client-s3tables: S3 Tables now supports sort and z-order compaction strategies for Iceberg tables in addition to binpack. (abce1d6c)
  • client-workspaces-instances: Added support for Amazon WorkSpaces Instances API (add0ab29)

For list of updated packages, view updated-packages.md in assets-3.835.0.zip

v3.834.0

3.834.0(2025-06-20)

Documentation Changes
  • update parallel-workloads-node-js.md for deadlock information (#7140) (68d363b4)
New Features
  • clients: update client endpoints as of 2025-06-20 (ed3e3fb2)
  • client-mediaconvert: This release adds a new SPECIFIED_OPTIMAL option for handling DDS when using DVB-Sub with high resolution video. (fed23d70)
  • client-geo-places: Geocode, ReverseGeocode, and GetPlace APIs added Intersections and SecondaryAddresses. To use, add to the AdditionalFeatures list in your request. This provides info about nearby intersections and secondary addresses that are associated with a main address. Also added MainAddress and ParsedQuery. (03a7a09d)
  • client-glue: AWS Glue Data Quality now provides aggregated metrics in evaluation results when publishAggregatedMetrics with row-level results are enabled. These metrics include summary statistics showing total counts of processed, passed, and failed rows and rules in a single view. (b18e5aad)
  • client-bedrock: Add support for tiers in Content Filters and Denied Topics for Amazon Bedrock Guardrails. (b57c4acd)
  • client-ecs: Add ECS support for Windows Server 2025 (c382ce6d)
Bug Fixes
  • docs: update broken link for NodeProviderChain (#7138) (3cb0a721)

For list of updated packages, view updated-packages.md in assets-3.834.0.zip

v3.833.0

3.833.0(2025-06-19)

Chores

... (truncated)

Changelog

Sourced from @​aws-sdk/client-dynamodb's changelog.

3.835.0 (2025-06-23)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.830.0 (2025-06-16)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.828.0 (2025-06-11)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.826.0 (2025-06-06)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.825.0 (2025-06-05)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.823.0 (2025-06-03)

Note: Version bump only for package @​aws-sdk/client-dynamodb

3.821.0 (2025-05-30)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 26, 2025
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) to 4.4.1 and updates ancestor dependency [@aws-sdk/client-dynamodb](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-dynamodb). These dependencies need to be updated together.


Updates `fast-xml-parser` from 3.19.0 to 4.4.1
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@3.19.0...v4.4.1)

Updates `@aws-sdk/client-dynamodb` from 3.154.0 to 3.835.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-dynamodb/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.835.0/clients/client-dynamodb)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 4.4.1
  dependency-type: indirect
- dependency-name: "@aws-sdk/client-dynamodb"
  dependency-version: 3.835.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/multi-aad8f7e8a4 branch from e8d7d28 to 1e6f6c7 Compare June 26, 2025 22:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Development

Successfully merging this pull request may close these issues.

1 participant