Codestin Search App

dependabot · 2026-04-01T00:21:23Z

Bumps @xmldom/xmldom from 0.9.8 to 0.9.9.

Release notes

Sourced from @xmldom/xmldom's releases.

0.9.9

Commits

Added

implement ParentNode.children getter [#960](https://github.com/xmldom/xmldom/issues/960) / [#410](https://github.com/xmldom/xmldom/issues/410)

Fixed

Security: createCDATASection now throws InvalidCharacterError when data contains "]]>", as required by the WHATWG DOM spec. GHSA-wh4c-j3r5-mjhp

Security: XMLSerializer now splits CDATASection nodes whose data contains "]]>" into adjacent CDATA sections at serialization time, preventing XML injection via mutation methods (appendData, replaceData, .data =, .textContent =). GHSA-wh4c-j3r5-mjhp

correctly traverse ancestor chain in Node.contains [#931](https://github.com/xmldom/xmldom/issues/931)

Code that passes a string containing "]]>" to createCDATASection and relied on the previously unsafe behavior will now receive InvalidCharacterError. Use a mutation method such as appendData if you intentionally need "]]>" in a CDATASection node's data.

Chore

updated dependencies

Thank you, @stevenobiajulu, @yoshi389111, @thesmartshadow, for your contributions

xmldom/xmldom#435

Changelog

Sourced from @xmldom/xmldom's changelog.

0.9.9

Added

implement ParentNode.children getter [#960](https://github.com/xmldom/xmldom/issues/960) / [#410](https://github.com/xmldom/xmldom/issues/410)

Fixed

Security: createCDATASection now throws InvalidCharacterError when data contains "]]>", as required by the WHATWG DOM spec. GHSA-wh4c-j3r5-mjhp

Security: XMLSerializer now splits CDATASection nodes whose data contains "]]>" into adjacent CDATA sections at serialization time, preventing XML injection via mutation methods (appendData, replaceData, .data =, .textContent =). GHSA-wh4c-j3r5-mjhp

correctly traverse ancestor chain in Node.contains [#931](https://github.com/xmldom/xmldom/issues/931)

Code that passes a string containing "]]>" to createCDATASection and relied on the previously unsafe behavior will now receive InvalidCharacterError. Use a mutation method such as appendData if you intentionally need "]]>" in a CDATASection node's data.

Chore

updated dependencies

Thank you, @stevenobiajulu, @yoshi389111, @thesmartshadow, for your contributions

0.8.12

Fixed

preserve trailing whitespace in ProcessingInstruction data [#962](https://github.com/xmldom/xmldom/issues/962) / [#42](https://github.com/xmldom/xmldom/issues/42)

Security: createCDATASection now throws InvalidCharacterError when data contains "]]>", as required by the WHATWG DOM spec. GHSA-wh4c-j3r5-mjhp

Security: XMLSerializer now splits CDATASection nodes whose data contains "]]>" into adjacent CDATA sections at serialization time, preventing XML injection via mutation methods (appendData, replaceData, .data =, .textContent =). GHSA-wh4c-j3r5-mjhp

Code that passes a string containing "]]>" to createCDATASection and relied on the previously unsafe behavior will now receive InvalidCharacterError. Use a mutation method such as appendData if you intentionally need "]]>" in a CDATASection node's data.

Thank you, @thesmartshadow, @stevenobiajulu, for your contributions

0.8.11

Fixed

update ownerDocument when moving nodes between documents [#933](https://github.com/xmldom/xmldom/issues/933) / [#932](https://github.com/xmldom/xmldom/issues/932)

Thank you, @shunkica, for your contributions

0.9.8

... (truncated)

Commits

7ffb16b 0.9.9
07aade1 docs: add missing references to changelog (#970)
2b852e8 fix: XML injection via unsafe CDATA serialization (GHSA-wh4c-j3r5-mjhp) (#969)
d9adeff chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 (#966)
be45d04 chore: add local CI script and format:check (#965)
2d73ddd chore(deps-dev): bump yauzl from 3.2.0 to 3.2.1 (#963)
385c392 chore(deps): bump minimatch (#961)
7750b31 feat: implement ParentNode.children getter (#960)
aa806cd chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#958)
7d2610c chore(deps): update npm to v11.6.3 (#947)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by karfau, a new releaser for @xmldom/xmldom since your current version.

pkg-pr-new · 2026-04-01T00:23:49Z

Open in StackBlitz

create-wdio

npm i https://pkg.pr.new/webdriverio/webdriverio/create-wdio@15176

eslint-plugin-wdio

npm i https://pkg.pr.new/webdriverio/webdriverio/eslint-plugin-wdio@15176

@wdio/allure-reporter

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/allure-reporter@15176

@wdio/appium-service

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/appium-service@15176

@wdio/browser-runner

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/browser-runner@15176

@wdio/browserstack-service

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/browserstack-service@15176

@wdio/cli

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/cli@15176

@wdio/concise-reporter

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/concise-reporter@15176

@wdio/config

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/config@15176

@wdio/cucumber-framework

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/cucumber-framework@15176

@wdio/dot-reporter

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/dot-reporter@15176

@wdio/firefox-profile-service

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/firefox-profile-service@15176

@wdio/globals

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/globals@15176

@wdio/jasmine-framework

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/jasmine-framework@15176

@wdio/json-reporter

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/json-reporter@15176

@wdio/junit-reporter

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/junit-reporter@15176

@wdio/lighthouse-service

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/lighthouse-service@15176

@wdio/local-runner

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/local-runner@15176

@wdio/logger

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/logger@15176

@wdio/mocha-framework

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/mocha-framework@15176

@wdio/protocols

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/protocols@15176

@wdio/repl

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/repl@15176

@wdio/reporter

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/reporter@15176

@wdio/runner

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/runner@15176

@wdio/sauce-service

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/sauce-service@15176

@wdio/shared-store-service

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/shared-store-service@15176

@wdio/smoke-test-cjs-service

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/smoke-test-cjs-service@15176

@wdio/smoke-test-reporter

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/smoke-test-reporter@15176

@wdio/smoke-test-service

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/smoke-test-service@15176

@wdio/spec-reporter

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/spec-reporter@15176

@wdio/static-server-service

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/static-server-service@15176

@wdio/sumologic-reporter

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/sumologic-reporter@15176

@wdio/testingbot-service

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/testingbot-service@15176

@wdio/types

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/types@15176

@wdio/utils

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/utils@15176

@wdio/webdriver-mock-service

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/webdriver-mock-service@15176

@wdio/xvfb

npm i https://pkg.pr.new/webdriverio/webdriverio/@wdio/xvfb@15176

webdriver

npm i https://pkg.pr.new/webdriverio/webdriverio/webdriver@15176

webdriverio

npm i https://pkg.pr.new/webdriverio/webdriverio@15176

commit: e4b8a55

Bumps [@xmldom/xmldom](https://github.com/xmldom/xmldom) from 0.9.8 to 0.9.9. - [Release notes](https://github.com/xmldom/xmldom/releases) - [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md) - [Commits](xmldom/xmldom@0.9.8...0.9.9) --- updated-dependencies: - dependency-name: "@xmldom/xmldom" dependency-version: 0.9.9 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2026-04-22T20:21:43Z

Superseded by #15209.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 1, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/xmldom/xmldom-0.9.9 branch from c10db62 to e4b8a55 Compare April 4, 2026 15:41

dependabot Bot closed this Apr 22, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/xmldom/xmldom-0.9.9 branch April 22, 2026 20:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump @xmldom/xmldom from 0.9.8 to 0.9.9#15176

chore(deps): bump @xmldom/xmldom from 0.9.8 to 0.9.9#15176
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/xmldom/xmldom-0.9.9

dependabot Bot commented on behalf of github Apr 1, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Apr 1, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Apr 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.9.9

Added

Fixed

Chore

0.9.9

Added

Fixed

Chore

0.8.12

Fixed

0.8.11

Fixed

0.9.8

Uh oh!

pkg-pr-new Bot commented Apr 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Apr 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Apr 1, 2026 •

edited

Loading

pkg-pr-new Bot commented Apr 1, 2026 •

edited

Loading