Merge pull request #2613 from fosrl/dependabot/npm_and_yarn/multi-43b302174d

Bump fast-xml-parser and @aws-sdk/xml-builder
2026-03-07 14:51:07 +00:00 · 2026-03-06 14:16:27 -08:00 · 2026-03-06 22:14:56 +00:00 · 2026-03-06 14:13:32 -08:00 · 2026-03-06 18:40:41 +00:00
2 changed files with 36 additions and 23 deletions
--- a/package-lock.json
+++ b/package-lock.json
@@ -57,7 +57,7 @@
                "d3": "7.9.0",
                "drizzle-orm": "0.45.1",
                "express": "5.2.1",
-                "express-rate-limit": "8.2.1",
+                "express-rate-limit": "8.2.2",
                "glob": "13.0.6",
                "helmet": "8.1.0",
                "http-errors": "2.0.1",
@@ -1035,13 +1035,13 @@
            }
        },
        "node_modules/@aws-sdk/xml-builder": {
-            "version": "3.972.5",
-            "resolved": "https://registry.npmjs.org/@aws-sdk/xml-builder/-/xml-builder-3.972.5.tgz",
-            "integrity": "sha512-mCae5Ys6Qm1LDu0qdGwx2UQ63ONUe+FHw908fJzLDqFKTDBK4LDZUqKWm4OkTCNFq19bftjsBSESIGLD/s3/rA==",
+            "version": "3.972.10",
+            "resolved": "https://registry.npmjs.org/@aws-sdk/xml-builder/-/xml-builder-3.972.10.tgz",
+            "integrity": "sha512-OnejAIVD+CxzyAUrVic7lG+3QRltyja9LoNqCE/1YVs8ichoTbJlVSaZ9iSMcnHLyzrSNtvaOGjSDRP+d/ouFA==",
            "license": "Apache-2.0",
            "dependencies": {
-                "@smithy/types": "^4.12.0",
-                "fast-xml-parser": "5.3.6",
+                "@smithy/types": "^4.13.0",
+                "fast-xml-parser": "5.4.1",
                "tslib": "^2.6.2"
            },
            "engines": {
@@ -8463,9 +8463,9 @@
            }
        },
        "node_modules/@smithy/types": {
-            "version": "4.12.0",
-            "resolved": "https://registry.npmjs.org/@smithy/types/-/types-4.12.0.tgz",
-            "integrity": "sha512-9YcuJVTOBDjg9LWo23Qp0lTQ3D7fQsQtwle0jVfpbUHy9qBwCEgKuVH4FqFB3VYu0nwdHKiEMA+oXz7oV8X1kw==",
+            "version": "4.13.0",
+            "resolved": "https://registry.npmjs.org/@smithy/types/-/types-4.13.0.tgz",
+            "integrity": "sha512-COuLsZILbbQsdrwKQpkkpyep7lCsByxwj7m0Mg5v66/ZTyenlfBc40/QFQ5chO0YN/PNEH1Bi3fGtfXPnYNeDw==",
            "license": "Apache-2.0",
            "dependencies": {
                "tslib": "^2.6.2"
@@ -14392,12 +14392,12 @@
            }
        },
        "node_modules/express-rate-limit": {
-            "version": "8.2.1",
-            "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.2.1.tgz",
-            "integrity": "sha512-PCZEIEIxqwhzw4KF0n7QF4QqruVTcF73O5kFKUnGOyjbCCgizBBiFaYpd/fnBLUMPw/BWw9OsiN7GgrNYr7j6g==",
+            "version": "8.2.2",
+            "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.2.2.tgz",
+            "integrity": "sha512-Ybv7bqtOgA914MLwaHWVFXMpMYeR1MQu/D+z2MaLYteqBsTIp9sY3AU7mGNLMJv8eLg8uQMpE20I+L2Lv49nSg==",
            "license": "MIT",
            "dependencies": {
-                "ip-address": "10.0.1"
+                "ip-address": "10.1.0"
            },
            "engines": {
                "node": ">= 16"
@@ -14517,10 +14517,22 @@
            ],
            "license": "BSD-3-Clause"
        },
+        "node_modules/fast-xml-builder": {
+            "version": "1.0.0",
+            "resolved": "https://registry.npmjs.org/fast-xml-builder/-/fast-xml-builder-1.0.0.tgz",
+            "integrity": "sha512-fpZuDogrAgnyt9oDDz+5DBz0zgPdPZz6D4IR7iESxRXElrlGTRkHJ9eEt+SACRJwT0FNFrt71DFQIUFBJfX/uQ==",
+            "funding": [
+                {
+                    "type": "github",
+                    "url": "https://github.com/sponsors/NaturalIntelligence"
+                }
+            ],
+            "license": "MIT"
+        },
        "node_modules/fast-xml-parser": {
-            "version": "5.3.6",
-            "resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-5.3.6.tgz",
-            "integrity": "sha512-QNI3sAvSvaOiaMl8FYU4trnEzCwiRr8XMWgAHzlrWpTSj+QaCSvOf1h82OEP1s4hiAXhnbXSyFWCf4ldZzZRVA==",
+            "version": "5.4.1",
+            "resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-5.4.1.tgz",
+            "integrity": "sha512-BQ30U1mKkvXQXXkAGcuyUA/GA26oEB7NzOtsxCDtyu62sjGw5QraKFhx2Em3WQNjPw9PG6MQ9yuIIgkSDfGu5A==",
            "funding": [
                {
                    "type": "github",
@@ -14529,6 +14541,7 @@
            ],
            "license": "MIT",
            "dependencies": {
+                "fast-xml-builder": "^1.0.0",
                "strnum": "^2.1.2"
            },
            "bin": {
@@ -15490,9 +15503,9 @@
            }
        },
        "node_modules/ip-address": {
-            "version": "10.0.1",
-            "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.0.1.tgz",
-            "integrity": "sha512-NWv9YLW4PoW2B7xtzaS3NCot75m6nK7Icdv0o3lfMceJVRfSoQwqD4wEH5rLwoKJwUiZ/rfpiVBhnaF0FK4HoA==",
+            "version": "10.1.0",
+            "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz",
+            "integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==",
            "license": "MIT",
            "engines": {
                "node": ">= 12"
@@ -20574,9 +20587,9 @@
            }
        },
        "node_modules/strnum": {
-            "version": "2.1.2",
-            "resolved": "https://registry.npmjs.org/strnum/-/strnum-2.1.2.tgz",
-            "integrity": "sha512-l63NF9y/cLROq/yqKXSLtcMeeyOfnSQlfMSlzFt/K73oIaD8DGaQWd7Z34X9GPiKqP5rbSh84Hl4bOlLcjiSrQ==",
+            "version": "2.2.0",
+            "resolved": "https://registry.npmjs.org/strnum/-/strnum-2.2.0.tgz",
+            "integrity": "sha512-Y7Bj8XyJxnPAORMZj/xltsfo55uOiyHcU2tnAVzHUnSJR/KsEX+9RoDeXEnsXtl/CX4fAcrt64gZ13aGaWPeBg==",
            "funding": [
                {
                    "type": "github",
--- a/package.json
+++ b/package.json
@@ -80,7 +80,7 @@
        "d3": "7.9.0",
        "drizzle-orm": "0.45.1",
        "express": "5.2.1",
-        "express-rate-limit": "8.2.1",
+        "express-rate-limit": "8.2.2",
        "glob": "13.0.6",
        "helmet": "8.1.0",
        "http-errors": "2.0.1",
Author	SHA1	Message	Date
Owen Schwartz	d4b830b9bb	Merge pull request #2613 from fosrl/dependabot/npm_and_yarn/multi-43b302174d Bump fast-xml-parser and @aws-sdk/xml-builder	2026-03-06 14:16:27 -08:00
dependabot[bot]	14d6ff25a7	Bump fast-xml-parser and @aws-sdk/xml-builder Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [@aws-sdk/xml-builder](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/xml-builder). These dependencies needed to be updated together. Updates `fast-xml-parser` from 5.3.6 to 5.4.1 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.6...v5.4.1) Updates `@aws-sdk/xml-builder` from 3.972.5 to 3.972.10 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/xml-builder/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/xml-builder) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-version: 5.4.1 dependency-type: indirect - dependency-name: "@aws-sdk/xml-builder" dependency-version: 3.972.10 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-06 22:14:56 +00:00
Owen Schwartz	1f62f305ce	Merge pull request #2611 from fosrl/dependabot/npm_and_yarn/express-rate-limit-8.2.2 Bump express-rate-limit from 8.2.1 to 8.2.2	2026-03-06 14:13:32 -08:00
dependabot[bot]	cebcf3e337	Bump express-rate-limit from 8.2.1 to 8.2.2 Bumps [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) from 8.2.1 to 8.2.2. - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](https://github.com/express-rate-limit/express-rate-limit/compare/v8.2.1...v8.2.2) --- updated-dependencies: - dependency-name: express-rate-limit dependency-version: 8.2.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-06 18:40:41 +00:00