chore(deps): Bump fast-xml-parser, @nextcloud/dialogs and @nextcloud/vue by dependabot[bot] · Pull Request #96 · nextcloud/integration_alephalpha

dependabot · 2026-04-23T06:57:30Z

Bumps fast-xml-parser to 5.7.3 and updates ancestor dependencies fast-xml-parser, @nextcloud/dialogs and @nextcloud/vue. These dependencies need to be updated together.

Updates fast-xml-parser from 4.5.6 to 5.7.3

Release notes

Sourced from fast-xml-parser's releases.

fix minor old bugs and update builder

fix: alwaysCreateTextNode should create text node when attributes are present for self closing node

fix stop node expression when ns prefix is removed (found by iruizsalinas)

update XML Builder to 1.1.7

mark addEntity deprecated

backward compatibility for numerical external entity, fix #705, #817

allow numerical external entity for backward compatibility

fix #705: attributesGroupName working with preserveOrder

fix #817: stackoverflow when tag expression is very long

upgrade @nodable/entities and FXB

Use @nodable/entities v2.1.0

breaking changes

single entity scan. You're not allowed to use entity value to form another entity name.

you cant add numeric external entity

entity error message when expantion limit is crossed might change

typings are updated for new options related to process entity

please follow documentation of @nodable/entities for more detail.

performance

if processEntities is false, then there should not be impact on performance.

if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%

if processEntities is true, and you pass entity decoder separately

if no entity then performance should be same as before

if there are entities then performance should be increased from past versions

ignoreAttributes is not required to be set to set xml version for NCR entity value

update 'fast-xml-builder' to sanitize malicious CDATA and comment's content

use @nodable/entities to replace entities

No API change

No change in performance for basic usage

No typing change

No config change

new dependency

breaking: error messages for entities might have been changed.

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.5.12...v5.6.0

performance improvment, increase entity expansion default limit

increase default entity explansion limit as many projects demand for that
maxEntitySize: 10000,
maxExpansionDepth: 10000,
maxTotalExpansions: Infinity,
maxExpandedLength: 100000,
maxEntityCount: 1000,
performance improvement

reduce calls to toString

early return when entities are not present

... (truncated)

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

*5.8.0

integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)

This will consider xml-version as well. '1.0' is default

update strnum to 2.3.0

You can set octal and binary parsing which is bydeault off

update fast-xml-builder to 1.2.0

can sanitize tag names if found invalid

fix format output

5.7.3 / 2006-05-05

fix: alwaysCreateTextNode should create text node when attributes are present for self closing node

fix stop node expression when ns prefix is removed (found by iruizsalinas)

update XML Builder to 1.1.7

mark addEntity deprecated

5.7.2 / 2026-04-25

allow numerical external entity for backward compatibility

fix #705: attributesGroupName working with preserveOrder

fix #817: stackoverflow when tag expression is very long

5.7.1 / 2026-04-20

fix typo in CJS typing file

5.7.0 / 2026-04-17

Use @nodable/entities v2.1.0

breaking changes

single entity scan. You're not allowed to user entity value to form another entity name.

you cant add numeric external entity

entity error message when expantion limit is crossed might change

typings are updated for new options related to process entity

please follow documentation of @nodable/entities for more detail.

performance

if processEntities is false, then there should not be impact on performance.

if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%

if processEntities is true, and you pass entity decoder separately

if no entity then performance should be same as before

if there are entities then performance should be increased from past versions

ignoreAttributes is not required to be set to set xml version for NCR entity value

update 'fast-xml-builder' to sanitize malicious CDATA and comment's content

5.6.0 / 2026-04-15

fix: entity replacement for numeric entities

use @nodable/entities to replace entities

this may change some error messages related to entities expansion limit or inavlid use

post check would be exposed in future version

... (truncated)

Commits

d6d8042 update to release
d263370 remove dev dependency 'he'
f9c9a2c update builder to 1.1.7
b65da87 update changelog and mark addEntity deprecated
c2ca631 update fxb
da75191 fix stop node expression when ns prefix is removed
31bbc99 fix: alwaysCreateTextNode should create text node when attributes are present...
dab327a remove unnecessary
ab04eeb update docs
383cb3f Revise security information for v6 release
Additional commits viewable in compare view

Updates @nextcloud/dialogs from 4.2.1 to 7.3.0

Release notes

Sourced from @nextcloud/dialogs's releases.

v7.3.0

v7.3.0

Changed

Migrated to @nextcloud/files v4.0.0 - reducing dependencies on apps targeting Nextcloud 33+ #2275.
This also removes cancelable-promise as a dependency by replacing it with native AbortController.

Updated development dependencies

Updated translations

v7.2.0

What's Changed

🚀 Enhancements

fix: add allowCreateNew to filepicker by @grnd-alt in nextcloud-libraries/nextcloud-dialogs#2070

🐛 Fixed bugs

fix(filepicker): use @nextcloud/files for name validation by @susnux in nextcloud-libraries/nextcloud-dialogs#2158

fix(conflict-picker): use sub-path import to only import needed parts by @susnux in nextcloud-libraries/nextcloud-dialogs#2162

fix(conflict-picker): pass correct props to component by @susnux in nextcloud-libraries/nextcloud-dialogs#2159

fix(types): resolve Typescript issues and add CI job to check for type issues by @susnux in nextcloud-libraries/nextcloud-dialogs#2160

fix(filepicker): use proper folder icons by @susnux in nextcloud-libraries/nextcloud-dialogs#2180

fix: always use the node displayname prop by @susnux in nextcloud-libraries/nextcloud-dialogs#2179

Other Changes

chore: update workflows from organization by @susnux in nextcloud-libraries/nextcloud-dialogs#2052

ci: update workflows from organization by @susnux in nextcloud-libraries/nextcloud-dialogs#2102

ci: update workflows from organization by @susnux in nextcloud-libraries/nextcloud-dialogs#2185* Updated translations

chore: prepare v7.2.0 by @susnux in nextcloud-libraries/nextcloud-dialogs#2184

v7.1.0

What's Changed

🚀 Enhancements

feat(FilePicker): Improve pick and navigation logic to match user expectation by @artonge in nextcloud-libraries/nextcloud-dialogs#2033

🐛 Fixed bugs

fix: compress translations in assets by @susnux in nextcloud-libraries/nextcloud-dialogs#2044

Other Changes

Updates for project Nextcloud dialogs library by @transifex-integration[bot] in nextcloud-libraries/nextcloud-dialogs#2045

chore(deps): Update browserslist by @artonge in nextcloud-libraries/nextcloud-dialogs#2047

chore: prepare v7.1.0 by @artonge in nextcloud-libraries/nextcloud-dialogs#2047

Full Changelog: nextcloud-libraries/nextcloud-dialogs@v7.0.1...v7.1.0

v7.0.1

v7.0.1

Fixed

fix: export showConfirmation method #2029 (susnux)

Changed

docs: adjust changes link for v7.0.0 #2008 (susnux)

Updated translations

... (truncated)

Changelog

Sourced from @nextcloud/dialogs's changelog.

v7.3.0

Changed

Migrated to @nextcloud/files v4.0.0 - reducing dependencies on apps targeting Nextcloud 33+ #2275.
This also removes cancelable-promise as a dependency by replacing it with native AbortController.

Updated development dependencies

Updated translations

v7.2.0

Added

feat(filepicker): add allowCreateNew #2070 (grnd-alt)

Fixed

fix(filepicker): use @nextcloud/files for name validation #2158 (susnux)

fix(filepicker): use proper folder icons #2180 (susnux)

fix(conflict-picker): use sub-path import to only import needed parts #2162 (susnux)

fix(conflict-picker): pass correct props to component #2159 (susnux)

fix(types): resolve Typescript issues and add CI job to check for type issues #2160 (susnux)

fix: always use the node displayname prop #2179 (susnux)

Changed

chore: update workflows from organization #2052 (susnux)

chore: align devEngines with current support Node and NPM #2108 (susnux)

ci: update workflows from organization #2102 (susnux)

v7.1.0

Added

feat(FilePicker): Improve pick and navigation logic to match user expectation #2033 (artonge)

Fixed

fix: compress translations in assets #2044 (susnux)

Changed

Updates for project Nextcloud dialogs library #2045 (transifex-integration[bot])

chore(deps): Update browserslist #2047 (artonge)

v7.0.1

Fixed

fix: export showConfirmation method #2029 (susnux)

Changed

docs: adjust changes link for v7.0.0 #2008 (susnux)

Updated translations

v7.0.0

Notes

This package now builds on top of @nextcloud/vue version 9 using Vue 3. While this package uses Vue 3 it is also possible to use it within a Vue 2 project, in this case the Vue dependency will not be shared as the dependency was moved from a peer dependency to a plain dependency.

... (truncated)

Commits

f29d1a1 docs: adjust CHANGELOG version
ff6ecfb Merge pull request #2276 from nextcloud-libraries/chore/prepare-7-3-0
f5ee940 Merge pull request #2279 from nextcloud-libraries/dependabot/npm_and_yarn/mai...
9201082 Merge pull request #2281 from nextcloud-libraries/dependabot/npm_and_yarn/mai...
bdb424e Merge pull request #2280 from nextcloud-libraries/dependabot/npm_and_yarn/mai...
be9efd7 Merge pull request #2278 from nextcloud-libraries/dependabot/npm_and_yarn/mai...
8ae605f Merge pull request #2277 from nextcloud-libraries/dependabot/npm_and_yarn/mai...
42228cd chore(deps): bump vue from 3.5.27 to 3.5.28
29497dc chore(deps): bump @vueuse/core from 14.2.0 to 14.2.1
7be7836 chore(deps-dev): bump happy-dom from 20.5.0 to 20.6.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @nextcloud/dialogs since your current version.

Updates @nextcloud/vue from 7.12.6 to 9.8.0

Release notes

Sourced from @nextcloud/vue's releases.

v9.8.0

v9.8.0 (2026-05-07)

Full Changelog

What's Changed

🚀 Enhancements

feat: Semantic font weights for interactive elements #8469 (kra-mo)

feat: change NcAppNavigationItem/NcListItem active state design and NcAppContent edge style on Nextcloud 34+ #8448 #8513 (nfebe)

feat(NcAppSidebarTab): Redesign active tab as rounded filled pill #8447 (nfebe)

feat(NcAppSettingsDialog): new navigation design #8477 (nfebe)

v9.7.0

v9.7.0 (2026-04-24)

Full Changelog

📝 Notes

NcRichText component used with useMarkdown = true or useExtendedMarkdown = true no longer renders relative links that can not be resolved by Vue Router. They are might interfere with routing logic and considered not belonging to the application. Examples that are not rendered as a clickable link:

[unknown protocols](https://github.com/nextcloud-libraries/nextcloud-vue/blob/HEAD/unknown:protocol)

[unresolved relative link](https://github.com/nextcloud-libraries/nextcloud-vue/blob/HEAD/internal_route)

[relative parameters](https://github.com/nextcloud-libraries/nextcloud-vue/blob/HEAD/?parameters=1)

[relative anchor](https://github.com/nextcloud-libraries/nextcloud-vue/blob/HEAD/#anchor)

🚀 Enhancements

feat(NcRichContenteditable): allow to pass menuContainer as string #8417 (Antreesy)

🐛 Fixed bugs

fix(NcCheckboxRadioSwitch): use reactive state for group checkbox toggle #8324 (pringelmann)

fix(NcRichText): do not escape markdown syntax when resolving reference #8351 (Antreesy)

fix(NcPasswordField): reset validation state on change #8350 (Antreesy)

fix(NcAppNavigation): close navigation on click outside for mobile dimensions #8284 (grnd-alt)

fix(NcAvatar): redirect to guest avatar if avatar does not exist #8440 (skjnldsv)

fix(NcModal): prevent focus trap race condition #8093 (nikhil2297)

fix(NcRichText): do not render nested links in markdown #8449 (Antreesy)

fix(NcRichText)!: do not render invalid relative markdown links #8397 (Antreesy)

fix(NcAppNavigationSearch): Show search clear icon only when field contains something #8454 (jancborchardt)

Other Changes

Updated translations

New Contributors

@pringelmann made their first contribution in nextcloud-libraries/nextcloud-vue#8324

v9.6.0

v9.6.0 (2026-03-13)

🚀 Enhancements

feat(NcFilePicker): add picker component to select local files #7097 (susnux)

feat(emoji): extend 'emojiAddRecent' to allow pass emoji as an argument #8288 (Antreesy)

🐛 Fixed bugs

... (truncated)

Changelog

Sourced from @nextcloud/vue's changelog.

v9.8.0 (2026-05-07)

Full Changelog

What's Changed

🚀 Enhancements

feat: Semantic font weights for interactive elements #8469 (kra-mo)

feat: change NcAppNavigationItem/NcListItem active state design and NcAppContent edge style on Nextcloud 34+ #8448 (nfebe)

feat(NcAppSidebarTab): Redesign active tab as rounded filled pill #8447 (nfebe)

feat(NcAppSettingsDialog): new navigation design #8477 (nfebe)

v9.7.0 (2026-04-24)

Full Changelog

📝 Notes

NcRichText component used with useMarkdown = true or useExtendedMarkdown = true no longer renders relative links that can not be resolved by Vue Router. They are might interfere with routing logic and considered not belonging to the application. Examples that are not rendered as a clickable link:

[unknown protocols](https://github.com/nextcloud-libraries/nextcloud-vue/blob/main/unknown:protocol)

[unresolved relative link](https://github.com/nextcloud-libraries/nextcloud-vue/blob/main/internal_route)

[relative parameters](https://github.com/nextcloud-libraries/nextcloud-vue/blob/main/?parameters=1)

[relative anchor](https://github.com/nextcloud-libraries/nextcloud-vue/blob/main/#anchor)

🚀 Enhancements

feat(NcRichContenteditable): allow to pass menuContainer as string #8417 (Antreesy)

🐛 Fixed bugs

fix(NcCheckboxRadioSwitch): use reactive state for group checkbox toggle #8324 (pringelmann)

fix(NcRichText): do not escape markdown syntax when resolving reference #8351 (Antreesy)

fix(NcPasswordField): reset validation state on change #8350 (Antreesy)

fix(NcAppNavigation): close navigation on click outside for mobile dimensions #8284 (grnd-alt)

fix(NcAvatar): redirect to guest avatar if avatar does not exist #8440 (skjnldsv)

fix(NcModal): prevent focus trap race condition #8093 (nikhil2297)

fix(NcRichText): do not render nested links in markdown #8449 (Antreesy)

fix(NcRichText)!: do not render invalid relative markdown links #8397 (Antreesy)

fix(NcAppNavigationSearch): Show search clear icon only when field contains something #8454 (jancborchardt)

Other Changes

Updated translations

New Contributors

@pringelmann made their first contribution in nextcloud-libraries/nextcloud-vue#8324

v9.6.0 (2026-03-13)

Full Changelog

🚀 Enhancements

feat(NcFilePicker): add picker component to select local files #7097 (susnux)

feat(emoji): extend 'emojiAddRecent' to allow pass emoji as an argument #8288 (Antreesy)

🐛 Fixed bugs

fix(NcTextArea): area resize does not resize component #8175

fix(NcButton): remove active effect from disabled buttons #8176 (Antreesy)

... (truncated)

Commits

4eeb393 Merge pull request #8510 from nextcloud-libraries/chore/release/9.8.0
024de33 chore: prepare release v9.8.0
c742e14 Merge pull request #8495 from nextcloud-libraries/dependabot/npm_and_yarn/esl...
cc04281 chore(deps-dev): bump eslint from 10.2.1 to 10.3.0
45c21b7 Merge pull request #8518 from nextcloud-libraries/dependabot/npm_and_yarn/typ...
987caad Merge pull request #8517 from nextcloud-libraries/dependabot/npm_and_yarn/nex...
25433a0 chore(deps-dev): bump @types/node from 24.12.2 to 24.12.3
3d387c4 chore(deps-dev): bump @nextcloud/stylelint-config from 3.2.1 to 3.2.2
ae0d712 Merge pull request #8513 from nextcloud-libraries/backport/8512/main
5f1bbf8 fix(NcAppNavigation): Restore opaque background on mobile
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @nextcloud/vue since your current version.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) to 5.7.3 and updates ancestor dependencies [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser), [@nextcloud/dialogs](https://github.com/nextcloud-libraries/nextcloud-dialogs) and [@nextcloud/vue](https://github.com/nextcloud-libraries/nextcloud-vue). These dependencies need to be updated together. Updates `fast-xml-parser` from 4.5.6 to 5.7.3 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.5.6...v5.7.3) Updates `@nextcloud/dialogs` from 4.2.1 to 7.3.0 - [Release notes](https://github.com/nextcloud-libraries/nextcloud-dialogs/releases) - [Changelog](https://github.com/nextcloud-libraries/nextcloud-dialogs/blob/main/CHANGELOG.md) - [Commits](nextcloud-libraries/nextcloud-dialogs@v4.2.1...v7.3.0) Updates `@nextcloud/vue` from 7.12.6 to 9.8.0 - [Release notes](https://github.com/nextcloud-libraries/nextcloud-vue/releases) - [Changelog](https://github.com/nextcloud-libraries/nextcloud-vue/blob/main/CHANGELOG.md) - [Commits](nextcloud-libraries/nextcloud-vue@v7.12.6...v9.8.0) --- updated-dependencies: - dependency-name: "@nextcloud/dialogs" dependency-version: 7.3.0 dependency-type: direct:production - dependency-name: "@nextcloud/vue" dependency-version: 9.6.0 dependency-type: direct:production - dependency-name: fast-xml-parser dependency-version: 5.7.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 23, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-5e18392ac5 branch from 6a5d6de to c671f95 Compare May 11, 2026 07:23

provokateurin approved these changes May 11, 2026

View reviewed changes

provokateurin enabled auto-merge May 11, 2026 07:24

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump fast-xml-parser, @nextcloud/dialogs and @nextcloud/vue#96

chore(deps): Bump fast-xml-parser, @nextcloud/dialogs and @nextcloud/vue#96
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-5e18392ac5

dependabot Bot commented on behalf of github Apr 23, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Apr 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

fix minor old bugs and update builder

backward compatibility for numerical external entity, fix #705, #817

upgrade @​nodable/entities and FXB

use @​nodable/entities to replace entities

performance improvment, increase entity expansion default limit

v7.3.0

v7.3.0

Changed

v7.2.0

What's Changed

🚀 Enhancements

🐛 Fixed bugs

Other Changes

v7.1.0

What's Changed

🚀 Enhancements

🐛 Fixed bugs

Other Changes

v7.0.1

v7.0.1

Fixed

Changed

v7.3.0

Changed

v7.2.0

Added

Fixed

Changed

v7.1.0

Added

Fixed

Changed

v7.0.1

Fixed

Changed

v7.0.0

Notes

v9.8.0

v9.8.0 (2026-05-07)

What's Changed

🚀 Enhancements

v9.7.0

v9.7.0 (2026-04-24)

📝 Notes

🚀 Enhancements

🐛 Fixed bugs

Other Changes

New Contributors

v9.6.0

v9.6.0 (2026-03-13)

🚀 Enhancements

🐛 Fixed bugs

v9.8.0 (2026-05-07)

What's Changed

🚀 Enhancements

v9.7.0 (2026-04-24)

📝 Notes

🚀 Enhancements

🐛 Fixed bugs

Other Changes

New Contributors

v9.6.0 (2026-03-13)

🚀 Enhancements

🐛 Fixed bugs

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Apr 23, 2026 •

edited

Loading

upgrade `@nodable/entities` and FXB

use `@nodable/entities` to replace entities