Skip to content

Commit 9c3e290

Browse files
antonisclaude
andcommitted
chore(deps): bump fast-xml-parser to ^5.7.0
Fixes Dependabot alert for XML Comment and CDATA injection via unescaped delimiters in XMLBuilder. Dev-only dependency. https://github.com/getsentry/sentry-react-native/security/dependabot/510 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent ab73a74 commit 9c3e290

2 files changed

Lines changed: 32 additions & 17 deletions

File tree

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -99,7 +99,7 @@
9999
"webdriverio@npm:8.40.5/minimatch": "^9.0.7",
100100
"glob@npm:13.0.0/minimatch": "^10.2.3",
101101
"axios": "^1.15.0",
102-
"fast-xml-parser": "^5.5.7",
102+
"fast-xml-parser": "^5.7.0",
103103
"form-data": "4.0.5",
104104
"qs": "^6.14.2",
105105
"lodash": "^4.18.1",

yarn.lock

Lines changed: 31 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -6793,6 +6793,13 @@ __metadata:
67936793
languageName: node
67946794
linkType: hard
67956795

6796+
"@nodable/entities@npm:^2.1.0":
6797+
version: 2.1.0
6798+
resolution: "@nodable/entities@npm:2.1.0"
6799+
checksum: ae5a432a665d210bb28b3a9dbe8caf49f46be65fdc626bd14febe8f150b735182efb6967fe12f8c8f39d22e572b8b9361b4915aec094f8cea5e01f683191cf80
6800+
languageName: node
6801+
linkType: hard
6802+
67966803
"@nodelib/fs.scandir@npm:2.1.5":
67976804
version: 2.1.5
67986805
resolution: "@nodelib/fs.scandir@npm:2.1.5"
@@ -18317,25 +18324,26 @@ __metadata:
1831718324
languageName: node
1831818325
linkType: hard
1831918326

18320-
"fast-xml-builder@npm:^1.1.4":
18321-
version: 1.1.4
18322-
resolution: "fast-xml-builder@npm:1.1.4"
18327+
"fast-xml-builder@npm:^1.1.5":
18328+
version: 1.1.5
18329+
resolution: "fast-xml-builder@npm:1.1.5"
1832318330
dependencies:
1832418331
path-expression-matcher: ^1.1.3
18325-
checksum: 90b019ed6f52cb30342a58d4bf8726a7723b4110cb9c0fd3fa2031e87506e8b18740fd349472926c9e2925d22ca6637b6d46a20eda537473cf63366970db4d7b
18332+
checksum: 02ea4ea959ed985033895a2000555c22f91f93e30376f7e11ee384f3839f5af3c97a8a646e4d6ba585a9b42e949b13ec89ce8bda061ee48b32a1b49f1c713372
1832618333
languageName: node
1832718334
linkType: hard
1832818335

18329-
"fast-xml-parser@npm:^5.5.7":
18330-
version: 5.5.8
18331-
resolution: "fast-xml-parser@npm:5.5.8"
18336+
"fast-xml-parser@npm:^5.7.0":
18337+
version: 5.7.1
18338+
resolution: "fast-xml-parser@npm:5.7.1"
1833218339
dependencies:
18333-
fast-xml-builder: ^1.1.4
18334-
path-expression-matcher: ^1.2.0
18335-
strnum: ^2.2.0
18340+
"@nodable/entities": ^2.1.0
18341+
fast-xml-builder: ^1.1.5
18342+
path-expression-matcher: ^1.5.0
18343+
strnum: ^2.2.3
1833618344
bin:
1833718345
fxparser: src/cli/cli.js
18338-
checksum: 58261aaaeb355a325dc1b27ae28e6f8da55e9f8e0560dd752c8a39a4adbaebe560cbbfe924efb44ebf991dbdff76ae6f80a4900d1d03fd720509cb323263bf13
18346+
checksum: 863ed69cf556a895231a80ed0091e12671f0d45af336169db55b7cc81c15cd767324469f392df68c5242e80bc416a69394fe69e6287bcb4ef1507875c7b0df84
1833918347
languageName: node
1834018348
linkType: hard
1834118349

@@ -27107,13 +27115,20 @@ __metadata:
2710727115
languageName: node
2710827116
linkType: hard
2710927117

27110-
"path-expression-matcher@npm:^1.1.3, path-expression-matcher@npm:^1.2.0":
27118+
"path-expression-matcher@npm:^1.1.3":
2711127119
version: 1.2.0
2711227120
resolution: "path-expression-matcher@npm:1.2.0"
2711327121
checksum: 2811aab3269c288893aef09e5127124d3c434bfc7e1352fea6b7dd81ed20260001b072ff60bdcaaa393d50a4333725290dbad47bb612d95f5448e499b4ac887f
2711427122
languageName: node
2711527123
linkType: hard
2711627124

27125+
"path-expression-matcher@npm:^1.5.0":
27126+
version: 1.5.0
27127+
resolution: "path-expression-matcher@npm:1.5.0"
27128+
checksum: 52f0491a88f728f2eefb83a5c4f84f1185a8572e34ba41a72f88e270d5796c966ec1fe78e978599c490ccac0656a4cc55d75485538393873d32a4ef096a8dda6
27129+
languageName: node
27130+
linkType: hard
27131+
2711727132
"path-is-absolute@npm:^1.0.0":
2711827133
version: 1.0.1
2711927134
resolution: "path-is-absolute@npm:1.0.1"
@@ -31415,10 +31430,10 @@ __metadata:
3141531430
languageName: node
3141631431
linkType: hard
3141731432

31418-
"strnum@npm:^2.2.0":
31419-
version: 2.2.1
31420-
resolution: "strnum@npm:2.2.1"
31421-
checksum: 23173b1b849859b9aca0288dde36d16095b07d81995de2e2fe29ae070f2e7b4933049f2e211ba03e48152a9281108ba7d4db826a3878f099bff52a3b81f5e273
31433+
"strnum@npm:^2.2.3":
31434+
version: 2.2.3
31435+
resolution: "strnum@npm:2.2.3"
31436+
checksum: e8deb0dd6f40e4a878bdd4404bdfdd47922665fcaaf27f2b345013b30d45d86f4b93d99cbc005bfb7c96edef6173369bd76a9df40bb7758850b7864075a28156
3142231437
languageName: node
3142331438
linkType: hard
3142431439

0 commit comments

Comments
 (0)