- From: dependabot[bot] via GitHub <sysbot+gh@w3.org>
- Date: Tue, 11 Oct 2022 23:19:26 +0000
- To: public-shex-dev@w3.org
dependabot[bot] has just labeled a pull request from dependabot[bot] for https://github.com/shexSpec/shexTest as "dependencies": == Bump @xmldom/xmldom from 0.8.2 to 0.8.3 == Bumps [@xmldom/xmldom](https://github.com/xmldom/xmldom) from 0.8.2 to 0.8.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/xmldom/xmldom/releases"><code>@xmldom/xmldom</code>'s releases</a>.</em></p> <blockquote> <h2>0.8.3</h2> <p><a href="https://github.com/xmldom/xmldom/compare/0.8.3...0.8.2">Commits</a></p> <h3>Fixed</h3> <ul> <li>Avoid iterating over prototype properties <a href="https://github-redirect.dependabot.com/xmldom/xmldom/pull/437"><code>[#437](https://github.com/xmldom/xmldom/issues/437)</code></a> / <a href="https://github-redirect.dependabot.com/xmldom/xmldom/issues/436"><code>[#436](https://github.com/xmldom/xmldom/issues/436)</code></a></li> </ul> <p>Thank you, <a href="https://github.com/Supraja9726"><code>@Supraja9726</code></a> for your contributions</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md"><code>@xmldom/xmldom</code>'s changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>This project adheres to <a href="https://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p> <h2><a href="https://github.com/xmldom/xmldom/compare/0.8.3...0.8.2">0.8.3</a></h2> <h3>Fixed</h3> <ul> <li>Avoid iterating over prototype properties <a href="https://github-redirect.dependabot.com/xmldom/xmldom/pull/437"><code>[#437](https://github.com/xmldom/xmldom/issues/437)</code></a> / <a href="https://github-redirect.dependabot.com/xmldom/xmldom/issues/436"><code>[#436](https://github.com/xmldom/xmldom/issues/436)</code></a></li> </ul> <p>Thank you, <a href="https://github.com/Supraja9726"><code>@Supraja9726</code></a> for your contributions</p> <h2><a href="https://github.com/xmldom/xmldom/compare/0.9.0-beta.1...0.9.0-beta.2">0.9.0-beta.2</a></h2> <h3>Fixed</h3> <ul> <li>Avoid iterating over prototype properties <a href="https://github-redirect.dependabot.com/xmldom/xmldom/pull/437"><code>[#437](https://github.com/xmldom/xmldom/issues/437)</code></a> / <a href="https://github-redirect.dependabot.com/xmldom/xmldom/issues/436"><code>[#436](https://github.com/xmldom/xmldom/issues/436)</code></a></li> </ul> <p>Thank you, <a href="https://github.com/Supraja9726"><code>@Supraja9726</code></a> for your contributions</p> <h2><a href="https://github.com/xmldom/xmldom/compare/0.8.3...0.8.2">0.8.3</a></h2> <h3>Fixed</h3> <ul> <li>Avoid iterating over prototype properties <a href="https://github-redirect.dependabot.com/xmldom/xmldom/pull/437"><code>[#437](https://github.com/xmldom/xmldom/issues/437)</code></a> / <a href="https://github-redirect.dependabot.com/xmldom/xmldom/issues/436"><code>[#436](https://github.com/xmldom/xmldom/issues/436)</code></a></li> </ul> <p>Thank you, <a href="https://github.com/Supraja9726"><code>@Supraja9726</code></a> for your contributions</p> <h2><a href="https://github.com/xmldom/xmldom/compare/0.8.2...0.9.0-beta.1">0.9.0-beta.1</a></h2> <h3>Fixed</h3> <p><strong>Only use HTML rules if mimeType matches</strong> <a href="https://github-redirect.dependabot.com/xmldom/xmldom/pull/338"><code>[#338](https://github.com/xmldom/xmldom/issues/338)</code></a>, fixes <a href="https://github-redirect.dependabot.com/xmldom/xmldom/issues/203"><code>[#203](https://github.com/xmldom/xmldom/issues/203)</code></a></p> <p>In the living specs for parsing XML and HTML, that this library is trying to implement, there is a distinction between the different types of documents being parsed: There are quite some rules that are different for parsing, constructing and serializing XML vs HTML documents.</p> <p>So far xmldom was always "detecting" whether "the HTML rules should be applied" by looking at the current namespace. So from the first time an the HTML default namespace (<code>http://www.w3.org/1999/xhtml</code>) was found, every node was treated as being part of an HTML document. This misconception is the root cause for quite some reported bugs.</p> <p>BREAKING CHANGE: HTML rules are no longer applied just because of the namespace, but require the <code>mimeType</code> argument passed to <code>DOMParser.parseFromString(source, mimeType)</code> to match <code>'text/html'</code>. Doing so implies all rules for handling casing for tag and attribute names when parsing, creation of nodes and searching nodes.</p> <p>BREAKING CHANGE: Correct the return type of <code>DOMParser.parseFromString</code> to <code>Document | undefined</code>. In case of parsing errors it was always possible that "the returned <code>Document</code>" has not been created. In case you are using Typescript you now need to handle those cases.</p> <p>BREAKING CHANGE: The instance property <code>DOMParser.options</code> is no longer available, instead use the individual <code>readonly</code> property per option (<code>assign</code>, <code>domHandler</code>, <code>errorHandler</code>, <code>normalizeLineEndings</code>, <code>locator</code>, <code>xmlns</code>). Those also provides the default value if the option was not passed. The 'locator' option is now just a boolean (default remains <code>true</code>).</p> <p>BREAKING CHANGE: The following methods no longer allow a (non spec compliant) boolean argument to toggle "HTML rules":</p> <ul> <li><code>XMLSerializer.serializeToString</code></li> <li><code>Node.toString</code></li> <li><code>Document.toString</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/xmldom/xmldom/commit/c9df7a299aa2862780c7b6e308f0f0dbcffd0a8c"><code>c9df7a2</code></a> 0.8.3</li> <li><a href="https://github.com/xmldom/xmldom/commit/1c57b5ea3b27eb8c65b51ec900689fae8c1fa74d"><code>1c57b5e</code></a> docs: Prepare CHANGELOG for 0.8.3</li> <li><a href="https://github.com/xmldom/xmldom/commit/7c0d4b7fbf74079060a2f135a369adeeccaf4b18"><code>7c0d4b7</code></a> fix: Avoid iterating over prototype properties</li> <li><a href="https://github.com/xmldom/xmldom/commit/a701915e70e568d116334a79dd5eda591eeb0d8f"><code>a701915</code></a> chore(deps): update dependency eslint to v8.25.0 (<a href="https://github-redirect.dependabot.com/xmldom/xmldom/issues/433">#433</a>)</li> <li><a href="https://github.com/xmldom/xmldom/commit/2aef5ef532bbb708c0211da8929e3a7681bd475c"><code>2aef5ef</code></a> chore(deps): update actions/setup-node action to v3 (<a href="https://github-redirect.dependabot.com/xmldom/xmldom/issues/431">#431</a>)</li> <li><a href="https://github.com/xmldom/xmldom/commit/0842586aa79c8a35d847e9a66816430ca3314a95"><code>0842586</code></a> chore(deps): update dependency eslint-plugin-prettier to v4.2.1 (<a href="https://github-redirect.dependabot.com/xmldom/xmldom/issues/418">#418</a>)</li> <li><a href="https://github.com/xmldom/xmldom/commit/8f1ee5e9609742035df17809313c1a48a55c1d3d"><code>8f1ee5e</code></a> chore(deps): update dependency eslint to v8.24.0 (<a href="https://github-redirect.dependabot.com/xmldom/xmldom/issues/430">#430</a>)</li> <li><a href="https://github.com/xmldom/xmldom/commit/8a34f293b5a693b5a6987f493e0339e494ce7889"><code>8a34f29</code></a> chore(deps): update dependency nodemon to v2.0.20 (<a href="https://github-redirect.dependabot.com/xmldom/xmldom/issues/429">#429</a>)</li> <li><a href="https://github.com/xmldom/xmldom/commit/ac8012ff998e6948a4a12858d9055b2c39f15c6d"><code>ac8012f</code></a> chore(deps): update dependency eslint to v8.23.1 (<a href="https://github-redirect.dependabot.com/xmldom/xmldom/issues/419">#419</a>)</li> <li><a href="https://github.com/xmldom/xmldom/commit/7efca8c4b7a7b9c2be045d35b4963c8301cb7c80"><code>7efca8c</code></a> chore(deps): update dependency nodemon to v2.0.19 (<a href="https://github-redirect.dependabot.com/xmldom/xmldom/issues/420">#420</a>)</li> <li>Additional commits viewable in <a href="https://github.com/xmldom/xmldom/compare/0.8.2...0.8.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@xmldom/xmldom&package-manager=npm_and_yarn&previous-version=0.8.2&new-version=0.8.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/shexSpec/shexTest/network/alerts). </details> See https://github.com/shexSpec/shexTest/pull/61 -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Tuesday, 11 October 2022 23:19:28 UTC