Skip to content

chore(deps): bump fast-xml-builder from 1.1.4 to 1.3.1 - #84

Open
superagent-security[bot] wants to merge 1 commit into
mainfrom
superagent/deps/npm_and_yarn/c5c63103ca7f77d3
Open

superagent-security[bot] wants to merge 1 commit into
mainfrom
superagent/deps/npm_and_yarn/c5c63103ca7f77d3

Conversation

@superagent-security

@superagent-security superagent-security Bot commented Sep 14, 2026 •

Copy link
Copy Markdown

Bumps fast-xml-builder from 1.1.4 to 1.3.1.

Release notes

Sourced from fast-xml-builder's releases.

v1.3.1

What's Changed

New Contributors

Full Changelog: NaturalIntelligence/fast-xml-builder@v1.3.0...v1.3.1

Changelog

Sourced from fast-xml-builder's changelog.

1.3.1 (2026-08-14)

  • fix: preserve negative sign for zero (By rajanpanth)

1.3.0 (2026-07-11)

  • upgrade:
    • xml-naming v0.3.0: cache support
    • PEM v1.6.2: sibling bug fix

1.2.1 (2026-07-03)

  • fix: escape quotes in stopNode attribute values (By greymoth)
  • fix: neutralize double hyphen in multi-key comment object (By spokodev)

1.2.0 (2026-05-08)

  • Add support for sanitizeName option
  • Support xml-naming for validating and sanitizing tag and attribute names

1.1.9 (2026-05-06)

  • fix: format output for preserve order when indent by is set to empty string

1.1.8 (2026-05-05)

  • fix: skip text property for PI tags
  • improve typings

1.1.7 (2026--05-04)

  • fix security issues when attribute value contains quotes

1.1.6 (2026--05-04)

  • fix security issues related to comment
  • skip comment with null value

1.1.5 (2026-04-17)

  • fix security issues related to comment and cdata

1.1.4 (2026-03-16)

  • support maxNestedTags option

1.1.3 (2026-03-13)

  • declare Matcher & Expression as unknown so user is not forced to install path-expression-matcher

1.1.2 (2026-03-11)

  • fix typings

1.1.1 (2026-03-11)

  • upgrade path-expression-matcher to 1.1.3

1.1.0 (2026-03-10)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for fast-xml-builder since your current version.



Superagent evaluated the complete generated dependency delta before opening this pull request.

Nonblocking supply chain signals: @napi-rs/wasm-runtime@1.1.1 has ai_detected_code_anomaly risk; @napi-rs/wasm-runtime@1.1.1 has inherited_dependency_signals risk


Note

Low Risk
Lockfile-only dependency refresh for XML building; behavior changes are limited to fast-xml-builder’s stringify/XML naming fixes unless something relies on the removed tsx lock entries.

Overview
Updates package-lock.json to bump transitive fast-xml-builder from 1.1.4 to 1.3.1 (pulled in via fast-xml-parser), along with its upgraded deps path-expression-matcher (1.1.3 → 1.6.2) and new xml-naming (^0.3.0).

The lockfile also reshuffles unrelated tree entries: bundled optional packages under @tailwindcss/oxide-wasm32-wasi, removal of standalone tsx (and its nested esbuild), and pruning of duplicate esbuild platform entries under vitest. No application source files change.

Reviewed by Cursor Bugbot for commit 2a9b1e0. Configure here.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants