Skip to content

fix(deps): bump @xmldom/xmldom from 0.8.10 to 0.8.12#1557

Merged
ayushmanchhabra merged 1 commit intomainfrom
dependabot/npm_and_yarn/xmldom/xmldom-0.8.12
Apr 14, 2026
Merged

fix(deps): bump @xmldom/xmldom from 0.8.10 to 0.8.12#1557
ayushmanchhabra merged 1 commit intomainfrom
dependabot/npm_and_yarn/xmldom/xmldom-0.8.12

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Bumps @xmldom/xmldom from 0.8.10 to 0.8.12.

Release notes

Sourced from @​xmldom/xmldom's releases.

0.8.12

Commits

Fixed

Code that passes a string containing "]]>" to createCDATASection and relied on the previously unsafe behavior will now receive InvalidCharacterError. Use a mutation method such as appendData if you intentionally need "]]>" in a CDATASection node's data.

Thank you, @​thesmartshadow, @​stevenobiajulu, for your contributions

xmldom/xmldom#357

0.8.11

0.8.11

Fixed

Thank you, @​shunkica, for your contributions

Changelog

Sourced from @​xmldom/xmldom's changelog.

0.8.12

Fixed

Code that passes a string containing "]]>" to createCDATASection and relied on the previously unsafe behavior will now receive InvalidCharacterError. Use a mutation method such as appendData if you intentionally need "]]>" in a CDATASection node's data.

Thank you, @​thesmartshadow, @​stevenobiajulu, for your contributions

0.8.11

Fixed

Thank you, @​shunkica, for your contributions

0.9.8

Fixed

Chore

Thank you, @​kboshold, @​Ponynjaa, for your contributions.

0.9.7

Added

Fixed

... (truncated)

Commits
  • 189cb78 0.8.12
  • ed08df7 fix: XML injection via unsafe CDATA serialization (GHSA-wh4c-j3r5-mjhp) (#968)
  • a5b929b chore: clean up generated test artefacts before running ci-local
  • 4e37a20 ci: run format:check in lint job
  • ac0ac77 chore: ignore generated files when checking formatting
  • 968c893 chore: add local CI script and format:check script
  • ac40424 fix: preserve trailing whitespace in ProcessingInstruction data (#962)
  • cece752 chore: add .nvmrc pointing to node version 18
  • cbf44d9 docs: improve links to changes in most recent release
  • c0f1401 0.8.11
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by karfau, a new releaser for @​xmldom/xmldom since your current version.


@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 1, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 1, 2026

Coverage Report for Vitest Coverage (ubuntu-24.04)

Status Category Percentage Covered / Total
🔵 Lines 20.75% 110 / 530
🔵 Statements 20.71% 110 / 531
🔵 Functions 28.94% 11 / 38
🔵 Branches 24.1% 134 / 556
File CoverageNo changed files found.
Generated in workflow #994 for commit 7423cfd by the Vitest Coverage Report Action

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 1, 2026

Coverage Report for Vitest Coverage (windows-2025)

Status Category Percentage Covered / Total
🔵 Lines 19.62% 104 / 530
🔵 Statements 19.58% 104 / 531
🔵 Functions 28.94% 11 / 38
🔵 Branches 21.94% 122 / 556
File CoverageNo changed files found.
Generated in workflow #994 for commit 7423cfd by the Vitest Coverage Report Action

@ayushmanchhabra
Copy link
Copy Markdown
Collaborator

@dependabot recreate

Bumps [@xmldom/xmldom](https://github.com/xmldom/xmldom) from 0.8.10 to 0.8.12.
- [Release notes](https://github.com/xmldom/xmldom/releases)
- [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md)
- [Commits](xmldom/xmldom@0.8.10...0.8.12)

---
updated-dependencies:
- dependency-name: "@xmldom/xmldom"
  dependency-version: 0.8.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/xmldom/xmldom-0.8.12 branch from 1b0a439 to 7423cfd Compare April 14, 2026 02:26
@github-actions
Copy link
Copy Markdown
Contributor

Coverage Report for Vitest Coverage (macos-15)

Status Category Percentage Covered / Total
🔵 Lines 28.67% 152 / 530
🔵 Statements 28.62% 152 / 531
🔵 Functions 42.1% 16 / 38
🔵 Branches 21.04% 117 / 556
File CoverageNo changed files found.
Generated in workflow #994 for commit 7423cfd by the Vitest Coverage Report Action

@ayushmanchhabra ayushmanchhabra changed the title chore(deps): bump @xmldom/xmldom from 0.8.10 to 0.8.12 fix(deps): bump @xmldom/xmldom from 0.8.10 to 0.8.12 Apr 14, 2026
@ayushmanchhabra ayushmanchhabra merged commit cd02e4e into main Apr 14, 2026
4 checks passed
@ayushmanchhabra ayushmanchhabra deleted the dependabot/npm_and_yarn/xmldom/xmldom-0.8.12 branch April 14, 2026 02:28
ayushmanchhabra pushed a commit that referenced this pull request Apr 14, 2026
🤖 I have created a release *beep* *boop*
---


##
[4.17.7](v4.17.6...v4.17.7)
(2026-04-14)


### Bug Fixes

* **deps-dev:** bump axios from 1.13.6 to 1.15.0
([#1563](#1563))
([ee48cb9](ee48cb9))
* **deps-dev:** bump flatted from 3.3.3 to 3.4.2
([#1550](#1550))
([da72d3e](da72d3e))
* **deps-dev:** bump follow-redirects from 1.15.11 to 1.16.0
([#1569](#1569))
([5dfea88](5dfea88))
* **deps:** bump @xmldom/xmldom from 0.8.10 to 0.8.12
([#1557](#1557))
([cd02e4e](cd02e4e))
* **deps:** bump brace-expansion from 2.0.2 to 2.1.0
([#1565](#1565))
([9c83fc0](9c83fc0))
* **deps:** bump lodash from 4.17.23 to 4.18.1
([#1561](#1561))
([f842b9b](f842b9b))


### Chores

* **deps:** bump the gha group across 1 directory with 4 updates
([#1568](#1568))
([356389f](356389f))
* **deps:** bump the npm group across 1 directory with 9 updates
([#1566](#1566))
([78dc27b](78dc27b))
* **test:** skip run test
([47860f8](47860f8))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant