Skip to content

deps(go): bump module github.com/beevik/etree to v1.7.1 - #10249

Merged
olblak merged 2 commits into
mainfrom
updatecli_main_c09fb7a7fe70dd4572233a70a769d64ba137852560b42daf675fbb007f549878
Sep 6, 2026
Merged

olblak merged 2 commits into
mainfrom
updatecli_main_c09fb7a7fe70dd4572233a70a769d64ba137852560b42daf675fbb007f549878

Conversation

@updateclibot

@updateclibot updateclibot Bot commented Sep 5, 2026

Copy link
Copy Markdown
Contributor

deps(go): bump module github.com/beevik/etree

clean: go mod tidy

ran shell command "go mod tidy"

deps(go): bump module github.com/beevik/etree to v1.7.1

go.mod updated Module path "github.com/beevik/etree" version from "v1.7.0" to "v1.7.1"

v1.7.1
**Changes**

* Improve efficiency of `Element.Text` and `Element.Tail`.
v1.7.0
**Breaking changes**

* To address a security issue, it was necessary to add a `MaxDepth` option to
  `ReadSettings` to limit the depth of XML trees during parsing. A generous
  default value of 1024 was chosen to avoid breaking most existing code.
  However, if your code is processing XML hierarchies with a depth greater
  than 1024, you will need to assign your `Document` a `ReadSettings` that has
  a `MaxDepth` set to a higher value.

**Security Fixes**

* Limited the depth of XML trees processed by all `ReadFrom` functions during
  parsing.
* Fixed a `CompilePath` index-out-of-range panic that could be caused by a
  missing path filter key.
* Sanitized the contents of XML text, comment, ProcInst and Directive tokens
  provided by the user.
GitHub Action workflow link
Updatecli logo

Created automatically by Updatecli

Options:

Most of Updatecli configuration is done via its manifest(s).

  • If you close this pull request, Updatecli will automatically reopen it, the next time it runs.
  • If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made.

Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

Made with ❤️️ by updatecli
@updateclibot updateclibot Bot added the dependencies Pull requests that update a dependency file label Sep 5, 2026
@olblak
olblak enabled auto-merge (squash) September 5, 2026 11:34
@olblak
olblak merged commit 6936374 into main Sep 6, 2026
8 of 10 checks passed
@olblak
olblak deleted the updatecli_main_c09fb7a7fe70dd4572233a70a769d64ba137852560b42daf675fbb007f549878 branch September 6, 2026 13:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant