chore(deps): bump fast-xml-parser, @aws-sdk/client-ses and @aws-sdk/client-secrets-manager in /lambdas/contact-form by dependabot[bot] · Pull Request #66 · tufstraka/Locsafe

dependabot · 2026-04-17T00:12:22Z

Bumps fast-xml-parser to 5.5.8 and updates ancestor dependencies fast-xml-parser, @aws-sdk/client-ses and @aws-sdk/client-secrets-manager. These dependencies need to be updated together.

Updates fast-xml-parser from 5.2.5 to 5.5.8

Release notes

Sourced from fast-xml-parser's releases.

fix bugs of entity parsing and value parsing

fix: entity expansion limits update strnum package to 2.2.0

fix entity expansion and incorrect replacement and performance

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.5.5...v5.5.6

support onDangerousProperty

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.5.3...v5.5.5

update dependecies to fix typings

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.5.1...v5.5.2

integrate path-expression-matcher

support path-expression-matcher

fix: stopNode should not be parsed

performance improvement for stopNode checking

Separate Builder

XML Builder was the part of fast-xml-parser for years. But considering that any bug in builder may false-alarm the users who are only using parser and vice-versa, we have decided to split it into a separate package.

Migration

To migrate to fast-xml-builder;

From
import { XMLBuilder } from "fast-xml-parser";
To
import  XMLBuilder  from "fast-xml-builder";
XMLBuilder will be removed from current package in any next major version of this library. So better to migrate.

support strictReservedNames

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.9...v5.3.9

handle non-array input for XML builder && support maxNestedTags

support maxNestedTags

handle non-array input for XML builder when preserveOrder is true (By Angelo Coetzee)

save use of js properies Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.7...v5.3.8

CJS typing fix

What's Changed

Unexport X2jOptions at declaration site by @Drarig29 in NaturalIntelligence/fast-xml-parser#787

... (truncated)

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.7.0

Use @nodable/entities v2.1.0

breaking changes

single entity scan. You're not allowed to user entity value to form another entity name.

you cant add numeric external entity

entity error message when expantion limit is crossed might change

typings are updated for new options related to process entity

please follow documentation of @nodable/entities for more detail.

performance

if processEntities is false, then there should not be impact on performance.

if processEntities is true, but you dont pass entity decoder separately then performance may degrade by approx 8-10%

if processEntities is true, and you pass entity decoder separately

if no entity then performance should be same as before

if there are entities then performance should be increased

5.6.0 / 2026-04-15

fix: entity replacement for numeric entities

use @nodable/entities to replace entities

this may change some error messages related to entities expansion limit or inavlid use

post check would be exposed in future version

5.5.12 / 2026-04-13

Performance Improvement: update path-expression-matcher

use proxy pattern than Proxy class

5.5.11 / 2026-04-08

Performance Improvement

integrate ExpressionSet for stopNodes

5.5.10 / 2026-04-03

increase default entity explansion limit as many projects demand for that

performance improvement

reduce calls to toString

early return when entities are not present

prepare rawAttrsForMatcher only if user sets jPath: false

5.5.9 / 2026-03-23

combine typing files

4.5.5 / 2026-03-22

apply fixes from v5 (legacy maintenance branch v4-maintenance)

support maxEntityCount

support onDangerousProperty

... (truncated)

Commits

a92a665 pass read only matcher in call back
a21c441 update package detail
239b64a check for min value for entity exapantion options
61cb666 restrict more properties to be unsafe
41abd66 performance improvement of reading DOCTYPE
3dfcd20 refactor: performance improvement
870043e update release info
6df401e update builder dependency
bd26122 check for entitiy expansion for lastEntities and html entities too
7e70dd8 fix incorrect regex to replace . in entity name
Additional commits viewable in compare view

Updates @aws-sdk/client-ses from 3.908.0 to 3.1031.0

Release notes

Sourced from @aws-sdk/client-ses's releases.

v3.1031.0

3.1031.0(2026-04-16)

Chores

upgrade smithy to 1.69.0 (#7932) (560d9878)

derestrict commit message linting (#7929) (a296c406)

codegen: sync for retry attempt count api (#7927) (b742fb8b)

Documentation Changes

client-cloudwatch: Update documentation of alarm mute rules start and end date fields (3b2342bc)

New Features

clients: update client endpoints as of 2026-04-16 (68ae10a1)

client-appstream: Add content redirection to Update Stack (1bde7c78)

client-connect: This release updates the Amazon Connect Rules CRUD APIs to support a new EventSourceName - OnEmailAnalysisAvailable. Use this event source to trigger rules when conversational analytics results are available for email contacts. (7abcd2c7)

client-rds: Adds a new DescribeServerlessV2PlatformVersions API to describe platform version properties for Aurora Serverless v2. Also introduces a new valid maintenance action value for serverless platform version updates. (b72b175a)

client-drs: Updating regex for identification of AWS Regions. (9405d283)

client-mediaconvert: Adds support for Elemental Inference powered smart crop feature, enabling video verticalization (c82e5cac)

client-auto-scaling: This release adds support for specifying Availability Zone IDs as an alternative to Availability Zone names when creating or updating Auto Scaling groups. (40e2faa7)

client-bedrock-agentcore: Introducing NamespacePath in AgentCore Memory to support hierarchical prefix based memory record retrieval. (91aeaedc)

client-devops-agent: Deprecate the userId from the Chat operations. This update also removes support of AllowVendedLogDeliveryForResource API from AWS SDKs. (39729e01)

client-connectcases: Added error handling for service quota limits (658cb4b3)

client-customer-profiles: Amazon Connect Customer Profiles adds RecommenderSchema CRUD APIs for custom ML training columns. CreateRecommender and CreateRecommenderFilter now accept optional RecommenderSchemaName. (be0aa8b0)

client-cognito-identity-provider: Adds support for passkey-based multi-factor authentication in Cognito User Pools. Users can authenticate securely using FIDO2-compliant passkeys with user verification, enabling passwordless MFA flows while maintaining backward compatibility with password-based authentication (4995e67c)

client-cloudwatch-logs: Endpoint update for CloudWatch Logs Streaming APIs. (6b28a142)

client-datazone: Launching SMUS IAM domain SDK support (60bff8a7)

client-dynamodb: performance improvements in JSON serialization (#7933) (c647598d)

Bug Fixes

eventstream-handler-node: use static credentials in event signing streams (#7930) (c5af293d)

tests: resolve lerna.json from monorepo root and let rollup use UMD output format (#7928) (a1313f90)

Tests

private: preview endpoint bdd for mock clients (#7938) (0b44cb70)

util-endpoints: remove bail option on endpoint tests (#7934) (768782ff)

For list of updated packages, view updated-packages.md in assets-3.1031.0.zip

v3.1030.0

3.1030.0(2026-04-13)

Documentation Changes

... (truncated)

Changelog

Sourced from @aws-sdk/client-ses's changelog.

3.1031.0 (2026-04-16)

Note: Version bump only for package @aws-sdk/client-ses

3.1030.0 (2026-04-13)

Note: Version bump only for package @aws-sdk/client-ses

3.1029.0 (2026-04-10)

Note: Version bump only for package @aws-sdk/client-ses

3.1028.0 (2026-04-09)

Note: Version bump only for package @aws-sdk/client-ses

3.1027.0 (2026-04-08)

Note: Version bump only for package @aws-sdk/client-ses

3.1026.0 (2026-04-07)

Note: Version bump only for package @aws-sdk/client-ses

3.1025.0 (2026-04-06)

... (truncated)

Commits

33a780e Publish v3.1031.0
560d987 chore: upgrade smithy to 1.69.0 (#7932)
b742fb8 chore(codegen): sync for retry attempt count api (#7927)
5ae7dfb Publish v3.1030.0
5d5aaed Publish v3.1029.0
edca62d Publish v3.1028.0
690d8d4 Publish v3.1027.0
67ea2f7 Publish v3.1026.0
b19357a chore(codegen): update for sparse types and retry 2.1 updates (#7916)
8cfa946 Publish v3.1025.0
Additional commits viewable in compare view

Updates @aws-sdk/client-secrets-manager from 3.908.0 to 3.1031.0

Release notes

Sourced from @aws-sdk/client-secrets-manager's releases.

v3.1031.0

3.1031.0(2026-04-16)

Chores

upgrade smithy to 1.69.0 (#7932) (560d9878)

derestrict commit message linting (#7929) (a296c406)

codegen: sync for retry attempt count api (#7927) (b742fb8b)

Documentation Changes

client-cloudwatch: Update documentation of alarm mute rules start and end date fields (3b2342bc)

New Features

clients: update client endpoints as of 2026-04-16 (68ae10a1)

client-appstream: Add content redirection to Update Stack (1bde7c78)

client-connect: This release updates the Amazon Connect Rules CRUD APIs to support a new EventSourceName - OnEmailAnalysisAvailable. Use this event source to trigger rules when conversational analytics results are available for email contacts. (7abcd2c7)

client-rds: Adds a new DescribeServerlessV2PlatformVersions API to describe platform version properties for Aurora Serverless v2. Also introduces a new valid maintenance action value for serverless platform version updates. (b72b175a)

client-drs: Updating regex for identification of AWS Regions. (9405d283)

client-mediaconvert: Adds support for Elemental Inference powered smart crop feature, enabling video verticalization (c82e5cac)

client-auto-scaling: This release adds support for specifying Availability Zone IDs as an alternative to Availability Zone names when creating or updating Auto Scaling groups. (40e2faa7)

client-bedrock-agentcore: Introducing NamespacePath in AgentCore Memory to support hierarchical prefix based memory record retrieval. (91aeaedc)

client-devops-agent: Deprecate the userId from the Chat operations. This update also removes support of AllowVendedLogDeliveryForResource API from AWS SDKs. (39729e01)

client-connectcases: Added error handling for service quota limits (658cb4b3)

client-customer-profiles: Amazon Connect Customer Profiles adds RecommenderSchema CRUD APIs for custom ML training columns. CreateRecommender and CreateRecommenderFilter now accept optional RecommenderSchemaName. (be0aa8b0)

client-cognito-identity-provider: Adds support for passkey-based multi-factor authentication in Cognito User Pools. Users can authenticate securely using FIDO2-compliant passkeys with user verification, enabling passwordless MFA flows while maintaining backward compatibility with password-based authentication (4995e67c)

client-cloudwatch-logs: Endpoint update for CloudWatch Logs Streaming APIs. (6b28a142)

client-datazone: Launching SMUS IAM domain SDK support (60bff8a7)

client-dynamodb: performance improvements in JSON serialization (#7933) (c647598d)

Bug Fixes

eventstream-handler-node: use static credentials in event signing streams (#7930) (c5af293d)

tests: resolve lerna.json from monorepo root and let rollup use UMD output format (#7928) (a1313f90)

Tests

private: preview endpoint bdd for mock clients (#7938) (0b44cb70)

util-endpoints: remove bail option on endpoint tests (#7934) (768782ff)

For list of updated packages, view updated-packages.md in assets-3.1031.0.zip

v3.1030.0

3.1030.0(2026-04-13)

Documentation Changes

... (truncated)

Changelog

Sourced from @aws-sdk/client-secrets-manager's changelog.

3.1031.0 (2026-04-16)

Note: Version bump only for package @aws-sdk/client-secrets-manager

3.1030.0 (2026-04-13)

Note: Version bump only for package @aws-sdk/client-secrets-manager

3.1029.0 (2026-04-10)

Note: Version bump only for package @aws-sdk/client-secrets-manager

3.1028.0 (2026-04-09)

Note: Version bump only for package @aws-sdk/client-secrets-manager

3.1027.0 (2026-04-08)

Note: Version bump only for package @aws-sdk/client-secrets-manager

3.1026.0 (2026-04-07)

Note: Version bump only for package @aws-sdk/client-secrets-manager

3.1025.0 (2026-04-06)

... (truncated)

Commits

33a780e Publish v3.1031.0
560d987 chore: upgrade smithy to 1.69.0 (#7932)
b742fb8 chore(codegen): sync for retry attempt count api (#7927)
5ae7dfb Publish v3.1030.0
5d5aaed Publish v3.1029.0
edca62d Publish v3.1028.0
690d8d4 Publish v3.1027.0
67ea2f7 Publish v3.1026.0
b19357a chore(codegen): update for sparse types and retry 2.1 updates (#7916)
8cfa946 Publish v3.1025.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

…lient-secrets-manager Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) to 5.5.8 and updates ancestor dependencies [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser), [@aws-sdk/client-ses](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ses) and [@aws-sdk/client-secrets-manager](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-secrets-manager). These dependencies need to be updated together. Updates `fast-xml-parser` from 5.2.5 to 5.5.8 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.2.5...v5.5.8) Updates `@aws-sdk/client-ses` from 3.908.0 to 3.1031.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ses/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1031.0/clients/client-ses) Updates `@aws-sdk/client-secrets-manager` from 3.908.0 to 3.1031.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-secrets-manager/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1031.0/clients/client-secrets-manager) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-version: 5.5.8 dependency-type: indirect - dependency-name: "@aws-sdk/client-ses" dependency-version: 3.1031.0 dependency-type: direct:production - dependency-name: "@aws-sdk/client-secrets-manager" dependency-version: 3.1031.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 17, 2026

dependabot Bot mentioned this pull request Apr 17, 2026

chore(deps): bump fast-xml-parser, @aws-sdk/client-ses and @aws-sdk/client-secrets-manager in /lambdas/contact-form #58

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump fast-xml-parser, @aws-sdk/client-ses and @aws-sdk/client-secrets-manager in /lambdas/contact-form#66

chore(deps): bump fast-xml-parser, @aws-sdk/client-ses and @aws-sdk/client-secrets-manager in /lambdas/contact-form#66
dependabot[bot] wants to merge 1 commit into
wagwanfrom
dependabot/npm_and_yarn/lambdas/contact-form/multi-56b3d5962e

dependabot Bot commented on behalf of github Apr 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 17, 2026

fix bugs of entity parsing and value parsing

fix entity expansion and incorrect replacement and performance

support onDangerousProperty

update dependecies to fix typings

integrate path-expression-matcher

Separate Builder

Migration

support strictReservedNames

handle non-array input for XML builder && support maxNestedTags

CJS typing fix

What's Changed

v3.1031.0

3.1031.0(2026-04-16)

Chores

Documentation Changes

New Features

Bug Fixes

Tests

v3.1030.0

3.1030.0(2026-04-13)

Documentation Changes

3.1031.0 (2026-04-16)

3.1030.0 (2026-04-13)

3.1029.0 (2026-04-10)

3.1028.0 (2026-04-09)

3.1027.0 (2026-04-08)

3.1026.0 (2026-04-07)

3.1025.0 (2026-04-06)

v3.1031.0

3.1031.0(2026-04-16)

Chores

Documentation Changes

New Features

Bug Fixes

Tests

v3.1030.0

3.1030.0(2026-04-13)

Documentation Changes

3.1031.0 (2026-04-16)

3.1030.0 (2026-04-13)

3.1029.0 (2026-04-10)

3.1028.0 (2026-04-09)

3.1027.0 (2026-04-08)

3.1026.0 (2026-04-07)

3.1025.0 (2026-04-06)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants