This PR contains the following updates:
Package Updates Summary
| Type | Count |
|---|---|
| 📦 NPM Packages | 3 |
| Total | 3 |
📦 npm Dependencies
3 packages will be updated
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| fast-xml-parser (source) | 5.5.3 -> 5.7.2 | ||||
| sax (source) | 1.5.0 -> 1.6.0 | ||||
| @types/bun (source) | 1.3.10 -> 1.3.13 |
Release Notes
NaturalIntelligence/fast-xml-parser (fast-xml-parser)
5.5.3 -> 5.7.2
v5.7.2
- allow numerical external entity for backward compatibility
- fix
#705: attributesGroupName working with preserveOrder - fix
#817: stackoverflow when tag expression is very long
Released by amitguptagwl on 4/24/2026
v5.7.1
- Use
@nodable/entitiesv2.1.0- breaking changes
- single entity scan. You're not allowed to use entity value to form another entity name.
- you cant add numeric external entity
- entity error message when expantion limit is crossed might change
- typings are updated for new options related to process entity
- please follow documentation of
@nodable/entitiesfor more detail. - performance
- if processEntities is false, then there should not be impact on performance.
- if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%
- if processEntities is true, and you pass entity decoder separately
- if no entity then performance should be same as before
- if there are entities then performance should be increased from past versions
- ignoreAttributes is not required to be set to set xml version for NCR entity value
- breaking changes
- update 'fast-xml-builder' to sanitize malicious CDATA and comment'...
[View full release notes]
Released by amitguptagwl on 4/17/2026
v5.6.0
- No API change
- No change in performance for basic usage
- No typing change
- No config change
- new dependency
- breaking: error messages for entities might have been changed.
Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.12...v5.6.0
Released by amitguptagwl on 4/15/2026
isaacs/sax-js (sax)
1.5.0 -> 1.6.0
An evented streaming XML parser in JavaScript
📊 Package Statistics
- fast-xml-parser: 75,416,006 weekly downloads
- sax: 72,423,205 weekly downloads
- @types/bun: 6,002,267 weekly downloads
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Buddy 🤖