Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade fast-xml-parser from 3.17.6 to 4.0.7 #70

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

ffMathy
Copy link
Contributor

@ffMathy ffMathy commented Jun 2, 2022

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade fast-xml-parser from 3.17.6 to 4.0.7.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 22 versions ahead of your current version.
  • The recommended version was released 2 months ago, on 2022-03-18.
Release notes
Package name: fast-xml-parser
  • 4.0.7 - 2022-03-18

    support cdata,comment by xmlBuilder for unordered tags

  • 4.0.6 - 2022-03-08

    fix builder for repeated tagValueProcessing

  • 4.0.5 - 2022-03-06

    fix #437

  • 4.0.4 - 2022-03-03

    …pnodes

  • 4.0.3 - 2022-02-15

    use let in for loop

  • 4.0.2 - 2022-02-04

    minor features and fixes

  • 4.0.1 - 2022-01-08

    fix builder for pi tags

  • 4.0.0 - 2022-01-06
    • Generating different combined, parser only, builder only, validator only browser bundles
    • Keeping cjs modules as they can be imported in cjs and esm modules both. Otherwise refer esm branch.

    4.0.0-beta.8 / 2021-12-13

    • call tagValueProcessor for stop nodes

    4.0.0-beta.7 / 2021-12-09

    • fix Validator bug when an attribute has no value but '=' only
    • XML Builder should suppress unpaired tags by default.
    • documents update for missing features
    • refactoring to use Object.assign
    • refactoring to remove repeated code

    4.0.0-beta.6 / 2021-12-05

    • Support PI Tags processing
    • Support suppressBooleanAttributes by XML Builder for attributes with value true.

    4.0.0-beta.5 / 2021-12-04

    • fix: when a tag with name "attributes"

    4.0.0-beta.4 / 2021-12-02

    • Support HTML document parsing
    • skip stop nodes parsing when building the XML from JS object
    • Support external entites without DOCTYPE
    • update dev dependency: strnum v1.0.5 to fix long number issue

    4.0.0-beta.3 / 2021-11-30

    • support global stopNodes expression like "*.stop"
    • support self-closing and paired unpaired tags
    • fix: CDATA should not be parsed.
    • Fix typings for XMLBuilder (#396)(By Anders Emil Salvesen)
    • supports XML entities, HTML entities, DOCTYPE entities

    ⚠️ 4.0.0-beta.2 / 2021-11-19

    • rename attrMap to attibutes in parser output when preserveOrder:true
    • supports unpairedTags

    ⚠️ 4.0.0-beta.1 / 2021-11-18

    • Parser returns an array now
      • to make the structure common
      • and to return root level detail
    • renamed cdataTagName to cdataPropName
    • Added commentPropName
    • fix typings

    ⚠️ 4.0.0-beta.0 / 2021-11-16

    • Name change of many configuration properties.
      • attrNodeName to attributesGroupName
      • attrValueProcessor to attributeValueProcessor
      • parseNodeValue to parseTagValue
      • ignoreNameSpace to removeNSPrefix
      • numParseOptions to numberParseOptions
      • spelling correction for suppressEmptyNode
    • Name change of cli and browser bundle to fxparser
    • isArray option is added to parse a tag into array
    • preserveOrder option is added to render XML in such a way that the result js Object maintains the order of properties same as in XML.
    • Processing behaviour of tagValueProcessor and attributeValueProcessor are changes with extra input parameters
    • j2xparser is renamed to XMLBuilder.
    • You need to build XML parser instance for given options first before parsing XML.
    • fix #327, #336: throw error when extra text after XML content
    • fix #330: attribute value can have '\n',
    • fix #350: attributes can be separated by '\n' from tagname
  • 4.0.0-beta.8 - 2021-12-13

    call tagValueProcessor for stop nodes

  • 4.0.0-beta.7 - 2021-12-09

    Validator bug fix and refactoring

  • 4.0.0-beta.6 - 2021-12-05
  • 4.0.0-beta.5 - 2021-12-04
  • 4.0.0-beta.4 - 2021-12-04
  • 4.0.0-beta.3 - 2021-11-30
  • 4.0.0-beta.2 - 2021-11-19
  • 4.0.0-beta.0 - 2021-11-17
  • 3.21.1 - 2021-10-31
  • 3.21.0 - 2021-10-25
  • 3.20.3 - 2021-09-25
  • 3.20.0 - 2021-09-10
  • 3.19.0 - 2021-03-14
  • 3.18.0 - 2021-02-05
  • 3.17.6 - 2020-12-27
from fast-xml-parser GitHub release notes
Commit messages
Package name: fast-xml-parser
  • f929430 update package for release
  • 1f5b0a7 fix #446: XMLbuilder should not indent XML declaration
  • ec91735 support commentPropName when order is not given
  • 0ee2a31 feat: support CDATA even if tag order is nor preserved
  • 6d47e58 update package detail
  • 07f081b fix: use right variable
  • 7c98488 fix: call tagValueProcessor once for array
  • ddb279b update package detail
  • 51e33e3 fix #437: call tagValueProcessor from XML builder
  • 4b5d1af update package detail and bundles
  • 83fef6d fix #435: should skip unpaired and self-closing nodes
  • 7788846 Update USERs.md (#436)
  • 95f0aaa update package detail and bundle
  • c794f32 Bump follow-redirects from 1.14.7 to 1.14.8 (#432)
  • 68ccca0 fix: ReferenceError when Bundled with Strict (#431)
  • f5c856b update package for new changes
  • 263141b builder: supports decoding & to &
  • da13b31 allow to suppressUnpairedNode
  • 9ff2040 fix when comment has '-->'
  • 76a3b36 ignore XML declration and pi tag if set
  • b0ea635 * Second tagValueProcessor is not needed, double encodes (#426)
  • 7ab5891 Update 5.Entities.md
  • bf5d224 update publish detail
  • 0ea75cb fix builder: pi closing tags when sequence is not preserved

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants