Sourced from fast-xml-parser's releases.
fix entity expansion and incorrect replacement and performance
Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.5...v5.5.6
support onDangerousProperty
Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.3...v5.5.5
update dependecies to fix typings
Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.1...v5.5.2
integrate path-expression-matcher
- support path-expression-matcher
- fix: stopNode should not be parsed
- performance improvement for stopNode checking
Sourced from fast-xml-parser's changelog.
Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.
Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion
4.5.5 / 2026-03-22
apply fixes from v5 (legacy maintenance branch v4-maintenance)
- support maxEntityCount
- support onDangerousProperty
- support maxNestedTags
- handle prototype pollution
- fix incorrect entity name replacement
- fix incorrect condition for entity expansion
5.5.8 / 2026-03-20
- pass read only matcher in callback
5.5.7 / 2026-03-19
- fix: entity expansion limits
- update strnum package to 2.2.0
5.5.6 / 2026-03-16
- update builder dependency
- fix incorrect regex to replace . in entity name
- fix check for entitiy expansion for lastEntities and html entities too
5.5.5 / 2026-03-13
- sanitize dangerous tag or attribute name
- error on critical property name
- support onDangerousProperty option
5.5.4 / 2026-03-13
- declare Matcher & Expression as unknown so user is not forced to install path-expression-matcher
5.5.3 / 2026-03-11
- upgrade builder
5.5.2 / 2026-03-11
- update dependency to fix typings
5.5.1 / 2026-03-10
- fix dependency
5.5.0 / 2026-03-10
- support path-expression-matcher
- fix: stopNode should not be parsed
- performance improvement for stopNode checking
... (truncated)
a92a665
pass read only matcher in call backa21c441
update package detail239b64a
check for min value for entity exapantion options61cb666
restrict more properties to be unsafe41abd66
performance improvement of reading DOCTYPE3dfcd20
refactor: performance improvement870043e
update release info6df401e
update builder dependencybd26122
check for entitiy expansion for lastEntities and html entities too7e70dd8
fix incorrect regex to replace . in entity nameSourced from picomatch's releases.
2.3.2
This is a security release fixing several security relevant issues.
What's Changed
- fix: exception when glob pattern contains constructor by
@Jason3Sin micromatch/picomatch#144- Fix for CVE-2026-33671
- Fix for CVE-2026-33672
Full Changelog: https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2
Sourced from picomatch's changelog.
Release history
All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
- Changelogs are for humans, not machines.
- There should be an entry for every single version.
- The same types of changes should be grouped.
- Versions and sections should be linkable.
- The latest version comes first.
- The release date of each versions is displayed.
- Mention whether you follow Semantic Versioning.
Changelog entries are classified using the following labels (from keep-a-changelog):
Addedfor new features.Changedfor changes in existing functionality.Deprecatedfor soon-to-be removed features.Removedfor now removed features.Fixedfor any bug fixes.Securityin case of vulnerabilities.4.0.0 (2024-02-07)
Fixes
- Fix bad text values in parse #126, thanks to
@connor4312Changed
- Remove process global to work outside of node #129, thanks to
@styfle- Add sideEffects to package.json #128, thanks to
@frandiox- Removed
os, make compatible browser environment. See #124, thanks to@gwsbhqt3.0.1
Fixes
... (truncated)