Skip to content

Bump fast-xml-parser, @aws-sdk/client-s3, @aws-sdk/client-sts, @aws-sdk/credential-providers and minio - #124

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-48bcbbbdc1
Open

Bump fast-xml-parser, @aws-sdk/client-s3, @aws-sdk/client-sts, @aws-sdk/credential-providers and minio#124
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-48bcbbbdc1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps fast-xml-parser to 5.10.1 and updates ancestor dependencies fast-xml-parser, @aws-sdk/client-s3, @aws-sdk/client-sts, @aws-sdk/credential-providers and minio. These dependencies need to be updated together.

Updates fast-xml-parser from 4.2.5 to 5.10.1

Release notes

Sourced from fast-xml-parser's releases.

v5.10.1

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.10.0...v5.10.1

v5.10.0

What's Changed

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.9.3...v5.10.0

v5.9.3

What's Changed

New Contributors

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.9.2...v5.9.3

v5.9.2

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.9.1...v5.9.2

v5.9.1

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.9.0...v5.9.1

update strnum, use is-unsafe

  • update strnum to 2.3.0
    • you can set hex, binary, enotation, infinity, unicode
  • validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.

update strnum, FXB. Use xml-naming for DOCTYPE

  • integrate xml-naming to validate DOCTYPE entity name and notation name (using qname because of backward compatibility)
    • This will consider xml-version as well. '1.0' is default
  • update strnum to 2.3.0
    • You can set octal and binary parsing which is by deault off
  • update fast-xml-builder to 1.2.0
    • can sanitize tag names if found invalid
    • fix format output

fix minor old bugs and update builder

  • fix: alwaysCreateTextNode should create text node when attributes are present for self closing node
  • fix stop node expression when ns prefix is removed (found by iruizsalinas)
  • update XML Builder to 1.1.7
  • mark addEntity deprecated

backward compatibility for numerical external entity, fix #705, #817

  • allow numerical external entity for backward compatibility
  • fix #705: attributesGroupName working with preserveOrder

... (truncated)

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.10.1 / 2026-07-17

  • fix: multiple DOCTYPE declarations.
  • deps: @nodable/entities for treeshaking

5.10.0 / 2026-07-11

  • upgrade:
    • xml-naming v0.3.0: cache support
    • PEM v1.6.2: sibling bug fix
    • is-unsafe v2.0.0: tree shaking

*5.9.3 / 2026-06-19

  • update strnum

*5.9.2 / 2026-06-17

  • dummy release to test changes in github action

*5.9.1 / 2026-06-17

  • dummy release to test release from github action

*5.9.0 / 2026-06-15

  • update strnum to 2.3.0
    • you can set hex, binary, enotation, infinity, unicode
  • validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.

*5.8.0 / 2026-05-12

  • integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)
    • This will consider xml-version as well. '1.0' is default
  • update strnum to 2.3.0
    • You can set octal and binary parsing which is bydeault off
  • update fast-xml-builder to 1.2.0
    • can sanitize tag names if found invalid
    • fix format output

5.7.3 / 2006-05-05

  • fix: alwaysCreateTextNode should create text node when attributes are present for self closing node
  • fix stop node expression when ns prefix is removed (found by iruizsalinas)
  • update XML Builder to 1.1.7
  • mark addEntity deprecated

5.7.2 / 2026-04-25

  • allow numerical external entity for backward compatibility

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for fast-xml-parser since your current version.


Updates @aws-sdk/client-s3 from 3.304.0 to 3.1095.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1095.0

3.1095.0(2026-07-24)

Chores
  • codegen: sync for CBOR large map deser, event-streams exceptions, endpoints features, ChecksumStream fix (#8218) (bb564e57)
  • core/protocols: JSON serde consistency testing and perf tuning (#8214) (8dac2514)
Documentation Changes
  • client-odb: Documentation-only update to clarify the operation-specific valid values for the externalIdType field. (e1f6b3ae)
New Features
  • clients: update client endpoints as of 2026-07-24 (f84113a7)
  • client-neptune-graph: Update validations for Tag Keys and KMS Key ARNs. (9109ccf7)
  • client-cognito-identity-provider: Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool. (fb3d908c)
  • client-dynamodb: Endpoint test standardizations (2e9ccdb4)
  • client-rtbfabric: The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead. (70e61b39)
  • client-artifact: Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments. (e2d5f0e2)
  • client-application-insights: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (20dd5886)
  • core: update clock skew detection threshold and configs (#8189) (a2773d56)
Bug Fixes
  • core/protocols: avoid Buffer.slice in return ByteJsonShapeSerializer.flush (#8222) (d4f2aeb5)
Tests
  • core/httpAuthSchemes: fix test race condition (#8223) (a4dd3ded)

For list of updated packages, view updated-packages.md in assets-3.1095.0.zip

v3.1094.0

3.1094.0(2026-07-23)

New Features
  • client-kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (1b65b736)
  • client-sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod (9af2f247)
  • client-gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping. (77119b6b)
  • client-workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (ce7eec0f)
  • client-bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (f47c152c)
  • client-mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels. (024499b2)
  • client-bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (635ae75d)
  • client-appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (aa5d998d)
  • client-redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement (ad898eba)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/client-s3

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/client-s3

3.1093.0 (2026-07-22)

Note: Version bump only for package @​aws-sdk/client-s3

3.1092.0 (2026-07-21)

Note: Version bump only for package @​aws-sdk/client-s3

3.1091.0 (2026-07-20)

Note: Version bump only for package @​aws-sdk/client-s3

3.1090.0 (2026-07-17)

Note: Version bump only for package @​aws-sdk/client-s3

3.1089.0 (2026-07-16)

... (truncated)

Commits
  • 753d651 Publish v3.1095.0
  • bb564e5 chore(codegen): sync for CBOR large map deser, event-streams exceptions, endp...
  • c379112 Publish v3.1094.0
  • 0f79b6a Publish v3.1093.0
  • 80f0df5 Publish v3.1092.0
  • a1269f7 Publish v3.1091.0
  • eb268ed Publish v3.1090.0
  • 60e8b54 Publish v3.1089.0
  • 91723d2 docs(client-s3): Documentation update for removing the 30 day minimum restric...
  • 73de389 Publish v3.1088.0
  • Additional commits viewable in compare view

Updates @aws-sdk/client-sts from 3.303.0 to 3.1095.0

Release notes

Sourced from @​aws-sdk/client-sts's releases.

v3.1095.0

3.1095.0(2026-07-24)

Chores
  • codegen: sync for CBOR large map deser, event-streams exceptions, endpoints features, ChecksumStream fix (#8218) (bb564e57)
  • core/protocols: JSON serde consistency testing and perf tuning (#8214) (8dac2514)
Documentation Changes
  • client-odb: Documentation-only update to clarify the operation-specific valid values for the externalIdType field. (e1f6b3ae)
New Features
  • clients: update client endpoints as of 2026-07-24 (f84113a7)
  • client-neptune-graph: Update validations for Tag Keys and KMS Key ARNs. (9109ccf7)
  • client-cognito-identity-provider: Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool. (fb3d908c)
  • client-dynamodb: Endpoint test standardizations (2e9ccdb4)
  • client-rtbfabric: The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead. (70e61b39)
  • client-artifact: Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments. (e2d5f0e2)
  • client-application-insights: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (20dd5886)
  • core: update clock skew detection threshold and configs (#8189) (a2773d56)
Bug Fixes
  • core/protocols: avoid Buffer.slice in return ByteJsonShapeSerializer.flush (#8222) (d4f2aeb5)
Tests
  • core/httpAuthSchemes: fix test race condition (#8223) (a4dd3ded)

For list of updated packages, view updated-packages.md in assets-3.1095.0.zip

v3.1094.0

3.1094.0(2026-07-23)

New Features
  • client-kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (1b65b736)
  • client-sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod (9af2f247)
  • client-gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping. (77119b6b)
  • client-workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (ce7eec0f)
  • client-bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (f47c152c)
  • client-mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels. (024499b2)
  • client-bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (635ae75d)
  • client-appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (aa5d998d)
  • client-redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement (ad898eba)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-sts's changelog.

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/client-sts

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/client-sts

3.1093.0 (2026-07-22)

Note: Version bump only for package @​aws-sdk/client-sts

3.1092.0 (2026-07-21)

Note: Version bump only for package @​aws-sdk/client-sts

3.1091.0 (2026-07-20)

Note: Version bump only for package @​aws-sdk/client-sts

3.1090.0 (2026-07-17)

Note: Version bump only for package @​aws-sdk/client-sts

3.1089.0 (2026-07-16)

... (truncated)

Commits

Updates @aws-sdk/credential-providers from 3.556.0 to 3.1095.0

Release notes

Sourced from @​aws-sdk/credential-providers's releases.

v3.1095.0

3.1095.0(2026-07-24)

Chores
  • codegen: sync for CBOR large map deser, event-streams exceptions, endpoints features, ChecksumStream fix (#8218) (bb564e57)
  • core/protocols: JSON serde consistency testing and perf tuning (#8214) (8dac2514)
Documentation Changes
  • client-odb: Documentation-only update to clarify the operation-specific valid values for the externalIdType field. (e1f6b3ae)
New Features
  • clients: update client endpoints as of 2026-07-24 (f84113a7)
  • client-neptune-graph: Update validations for Tag Keys and KMS Key ARNs. (9109ccf7)
  • client-cognito-identity-provider: Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool. (fb3d908c)
  • client-dynamodb: Endpoint test standardizations (2e9ccdb4)
  • client-rtbfabric: The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead. (70e61b39)
  • client-artifact: Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments. (e2d5f0e2)
  • client-application-insights: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (20dd5886)
  • core: update clock skew detection threshold and configs (#8189) (a2773d56)
Bug Fixes
  • core/protocols: avoid Buffer.slice in return ByteJsonShapeSerializer.flush (#8222) (d4f2aeb5)
Tests
  • core/httpAuthSchemes: fix test race condition (#8223) (a4dd3ded)

For list of updated packages, view updated-packages.md in assets-3.1095.0.zip

v3.1094.0

3.1094.0(2026-07-23)

New Features
  • client-kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (1b65b736)
  • client-sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod (9af2f247)
  • client-gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping. (77119b6b)
  • client-workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (ce7eec0f)
  • client-bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (f47c152c)
  • client-mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels. (024499b2)
  • client-bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (635ae75d)
  • client-appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (aa5d998d)
  • client-redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement (ad898eba)

... (truncated)

Changelog

Sourced from @​aws-sdk/credential-providers's changelog.

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1093.0 (2026-07-22)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1092.0 (2026-07-21)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1091.0 (2026-07-20)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1090.0 (2026-07-17)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1089.0 (2026-07-16)

... (truncated)

Commits

Updates minio from 7.1.3 to 8.0.7

Release notes

Sourced from minio's releases.

Bug fix release 8.0.7

What's Changed

New Contributors

Full Changelog: minio/minio-js@8.0.6...8.0.7

Bug fix release 8.0.6

What's Changed

New Contributors

Full Changelog: minio/minio-js@8.0.5...8.0.6

Bugfix Release

What's Changed

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump fast-xml-parser, @aws-sdk/client-s3, @aws-sdk/client-sts, @aws-s…
ce202b8 
…dk/credential-providers and minio

Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) to 5.10.1 and updates ancestor dependencies [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser), [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3), [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts), [@aws-sdk/credential-providers](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/credential-providers) and [minio](https://github.com/minio/minio-js). These dependencies need to be updated together.


Updates `fast-xml-parser` from 4.2.5 to 5.10.1
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v4.2.5...v5.10.1)

Updates `@aws-sdk/client-s3` from 3.304.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-s3)

Updates `@aws-sdk/client-sts` from 3.303.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-sts)

Updates `@aws-sdk/credential-providers` from 3.556.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/credential-providers/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/packages/credential-providers)

Updates `minio` from 7.1.3 to 8.0.7
- [Release notes](https://github.com/minio/minio-js/releases)
- [Commits](minio/minio-js@7.1.3...8.0.7)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.10.1
  dependency-type: indirect
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1095.0
  dependency-type: direct:development
- dependency-name: "@aws-sdk/client-sts"
  dependency-version: 3.1095.0
  dependency-type: direct:development
- dependency-name: "@aws-sdk/credential-providers"
  dependency-version: 3.1095.0
  dependency-type: indirect
- dependency-name: minio
  dependency-version: 8.0.7
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants