Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update quick-xml requirement from 0.26.0 to 0.27.1 #51

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Dec 29, 2022

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Updates the requirements on quick-xml to permit the latest version.

Release notes

Sourced from quick-xml's releases.

Fix an infinite loop in some circumstates

What's Changed

Bug Fixes

  • #530: Fix an infinite loop leading to unbounded memory consumption that occurs when skipping events on malformed XML with the overlapped-lists feature active.
  • #530: Fix an error in the Deserializer::read_to_end when overlapped-lists feature is active and malformed XML is parsed

#530: tafia/quick-xml#530

Full Changelog: tafia/quick-xml@v0.27.0...v0.27.1

Changelog

Sourced from quick-xml's changelog.

0.27.1 -- 2022-12-28

Bug Fixes

  • #530: Fix an infinite loop leading to unbounded memory consumption that occurs when skipping events on malformed XML with the overlapped-lists feature active.
  • #530: Fix an error in the Deserializer::read_to_end when overlapped-lists feature is active and malformed XML is parsed

#530: tafia/quick-xml#530

0.27.0 -- 2022-12-25

New Features

  • #521: Implement Clone for all error types. This required changing Error::Io to contain Arc<std::io::Error> instead of std::io::Error since std::io::Error does not implement Clone.

Bug Fixes

  • #490: Ensure that serialization of map keys always produces valid XML names. In particular, that means that maps with numeric and numeric-like keys (for example, "42") no longer can be serialized because [XML name] cannot start from a digit
  • #500: Fix deserialization of top-level sequences of enums, like
    <?xml version="1.0" encoding="UTF-8"?>
    <!-- list of enum Enum { A, B, С } -->
    <A/>
    <B/>
    <C/>
  • #514: Fix wrong reporting Error::EndEventMismatch after disabling and enabling .check_end_names
  • #517: Fix swapped codes for \r and \n characters when escaping them
  • #523: Fix incorrect skipping text and CDATA content before any map-like structures in serde deserializer, like
    unwanted text<struct>...</struct>
  • #523: Fix incorrect handling of xs:lists with encoded spaces: they still act as delimiters, which is confirmed also by mature XmlBeans Java library
  • #473: Fix a hidden requirement to enable serde's derive feature to get quick-xml's serialize feature for edition = 2021 or resolver = 2 crates

Misc Changes

  • #490: Removed $unflatten= special prefix for fields for serde (de)serializer, because:
    • it is useless for deserializer

... (truncated)

Commits
  • 89fa620 Release 0.27.1 - fix for #530
  • b99adec Remove excess test. That test is duplicated by read_to_end::complex
  • 88455b4 Fix an error in the Deserializer::read_to_end when feature "overlapped-list...
  • 75ae6c7 Add test for reading invalid XML to the end
  • 85eeb2e Fix infinity loop in skip when parsing malformed XML
  • f63910d Release 0.27.0
  • d1908e6 Merge pull request #528 from Mingun/doc
  • 66275cc Add an example for deserializing wrapped lists
  • c521a2f Add documentation for mapping from XML to Rust used by deserializer
  • 44a4c69 Merge pull request #524 from Mingun/serde
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [quick-xml](https://github.com/tafia/quick-xml) to permit the latest version.
- [Release notes](https://github.com/tafia/quick-xml/releases)
- [Changelog](https://github.com/tafia/quick-xml/blob/master/Changelog.md)
- [Commits](tafia/quick-xml@v0.26.0...v0.27.1)

---
updated-dependencies:
- dependency-name: quick-xml
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Dec 29, 2022

The following labels could not be found: auto-dependencies.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants