GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — Bump fast-xml-parser from 5.11.2 to 5.12.0 by dependabot[bot] · Pull Request #1385 · actions/setup-python

Conversation

dependabot Bot commented on behalf of github Nov 12, 2026

Copy link

Copy Markdown

Contributor

Bumps fast-xml-parser from 5.11.2 to 5.12.0.

Release notes

Sourced from fast-xml-parser's releases.

v5.12.0

What's Changed

fix: add endIndex to the CommonJS XMLMetaData declaration by @dualfroz in NaturalIntelligence/fast-xml-parser#896

Bump zizmorcore/zizmor-action from 0.6.1 to 0.8.0 by @dependabot[bot] in NaturalIntelligence/fast-xml-parser#906

Bump actions/setup-node from 7.0.0 to 7.1.0 by @dependabot[bot] in NaturalIntelligence/fast-xml-parser#904

fix: preserve original metadata offsets for CRLF input by @Sskift in NaturalIntelligence/fast-xml-parser#911

docs: update NASA link in users list by @CodeVertex55 in NaturalIntelligence/fast-xml-parser#885

README.md: fix documentation links by @maxlath in NaturalIntelligence/fast-xml-parser#872

test: drop shadowed ignoreAttributes option by @rajanpanth in NaturalIntelligence/fast-xml-parser#863

New Contributors

@dualfroz made their first contribution in NaturalIntelligence/fast-xml-parser#896

@Sskift made their first contribution in NaturalIntelligence/fast-xml-parser#911

@CodeVertex55 made their first contribution in NaturalIntelligence/fast-xml-parser#885

@maxlath made their first contribution in NaturalIntelligence/fast-xml-parser#872

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.11.2...v5.12.0

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.12.0 / 2026-11-03

perf improvement for stop node: After the first failure in a given stop node, the function stops using readTagExp and switches to a cheap fallback.

devdep:jasmine 7.0

deps:

@nodable/entities v3.1.0

fast-xml-builder v1.3.1

is-unsafe v2.0.3

strnum v2.5.1

fix cjs typing

fix: preserve original metadata offsets for CRLF input (#911) (By sskift)

5.11.2 / 2026-09-29

fix (#875): decode Uint8Array XML input as UTF-8 (By emme1t)

fix (#880) :type EntityDecoderOptions.setXmlVersion's version as a number (By Yevhenii Kotyrlo)

5.11.1 / 2026-08-27

fix: validator; Replace regex with a single-pass scanner for attribute tokens, eliminating quadratic behavior on long whitespace runs.

5.11.0 / 2026-08-16

feat: support for endIndex in node metadata (#850) [By Pavel Dranichnikov]

fix: don't crash on a closing tag with no matching opening tag (#861) [By Haïm Dimer]

fix: DOCTYPE to read SYSTEM/PUBLIC

deps: strnum v2.4.2

5.10.1 / 2026-07-17

fix: multiple DOCTYPE declarations.

deps: @nodable/entities for treeshaking

5.10.0 / 2026-07-11

upgrade:

xml-naming v0.3.0: cache support

PEM v1.6.2: sibling bug fix

is-unsafe v2.0.0: tree shaking

*5.9.3 / 2026-06-19

update strnum

*5.9.2 / 2026-06-17

dummy release to test changes in github action

*5.9.1 / 2026-06-17

dummy release to test release from github action

*5.9.0 / 2026-06-15

update strnum to 2.3.0

... (truncated)

Commits

976470f 5.12.0
e6703ce update changelog
cad3004 update browser bundle
404b15e deps update
1792392 devdep: jasmine 7
edea043 specs: No duplicate suit or test name
0c36593 perf: stopnode
5680565 test: drop shadowed ignoreAttributes option (#863)
6b855c2 README.md: fix documentation links (#872)
4ad1388 docs: update NASA link in users list (#885)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions


          Bump fast-xml-parser from 5.11.2 to 5.12.0

5eecc65

Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.11.2 to 5.12.0.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.11.2...v5.12.0)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.12.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot requested a review from a team as a code owner

November 12, 2026 05:22

dependabot Bot added dependencies

Pull requests that update a dependency file

javascript Pull requests that update Javascript code labels

Nov 12, 2026

This branch has not been deployed

No deployments

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

dependencies

Pull requests that update a dependency file

javascript

Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

0 participants

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.