papandreou / node-cldr

node.js library for extracting data from CLDR (the Unicode Common Locale Data Repository)
BSD 3-Clause "New" or "Revised" License
123 stars 18 forks source link

Upgrade xmldom to version 0.5.0 #138

Closed depfu[bot] closed 3 years ago

depfu[bot] commented 3 years ago

Here is everything you need to know about this upgrade. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ xmldom (^0.4.0 → ^0.5.0) · Repo · Changelog

Release Notes

0.5.0

Fixes

  • BREAKING CHANGE: Avoid misinterpretation of malicious XML input - GHSA-h6q6-9hqw-rwfv (CVE-2021-21366)
  • Fix breaking preprocessors' directives when parsing attributes #171
  • fix(dom): Escape ]]> when serializing CharData #181
  • Switch to (only) MIT license (drop problematic LGPL license option) #178
  • Export DOMException; remove custom assertions; etc. #174

Docs

  • Update MDN links in readme.md #188

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 26 commits:


Depfu Status

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands
@​depfu rebase
Rebases against your default branch and redoes this update
@​depfu recreate
Recreates this PR, overwriting any edits that you've made to it
@​depfu merge
Merges this PR once your tests are passing and conflicts are resolved
@​depfu close
Closes this PR and deletes the branch
@​depfu reopen
Restores the branch and reopens this PR (if it's closed)
@​depfu pause
Ignores all future updates for this dependency and closes this PR
@​depfu pause [minor|major]
Ignores all future minor/major updates for this dependency and closes this PR
@​depfu resume
Future versions of this dependency will create PRs again (leaves this PR as is)
coveralls commented 3 years ago

Coverage Status

Coverage remained the same at 76.008% when pulling 5474258f3b2cbf5216e41401097a4df5149615c6 on depfu/update/npm/xmldom-0.5.0 into cbfff72f0bc29ea7c9264d0e94c8b592ef1f8022 on master.