Bump @xmldom/xmldom and codeceptjs by dependabot[bot] · Pull Request #49 · browserstack/codecept-js-browserstack

dependabot · 2026-04-09T03:47:35Z

Bumps @xmldom/xmldom to 0.9.9 and updates ancestor dependency codeceptjs. These dependencies need to be updated together.

Updates @xmldom/xmldom from 0.9.5 to 0.9.9

Release notes

Sourced from @xmldom/xmldom's releases.

0.9.9

Commits

Added

implement ParentNode.children getter [#960](https://github.com/xmldom/xmldom/issues/960) / [#410](https://github.com/xmldom/xmldom/issues/410)

Fixed

Security: createCDATASection now throws InvalidCharacterError when data contains "]]>", as required by the WHATWG DOM spec. GHSA-wh4c-j3r5-mjhp

Security: XMLSerializer now splits CDATASection nodes whose data contains "]]>" into adjacent CDATA sections at serialization time, preventing XML injection via mutation methods (appendData, replaceData, .data =, .textContent =). GHSA-wh4c-j3r5-mjhp

correctly traverse ancestor chain in Node.contains [#931](https://github.com/xmldom/xmldom/issues/931)

Code that passes a string containing "]]>" to createCDATASection and relied on the previously unsafe behavior will now receive InvalidCharacterError. Use a mutation method such as appendData if you intentionally need "]]>" in a CDATASection node's data.

Chore

updated dependencies

Thank you, @stevenobiajulu, @yoshi389111, @thesmartshadow, for your contributions

xmldom/xmldom#435

0.9.8

Commits

Fixed

fix: replace \u2029 as part of normalizeLineEndings [#839](https://github.com/xmldom/xmldom/issues/839) / [#838](https://github.com/xmldom/xmldom/issues/838)

perf: speed up line detection [#847](https://github.com/xmldom/xmldom/issues/847) / [#838](https://github.com/xmldom/xmldom/issues/838)

Chore

updated dependencies

drop jazzer and rxjs devDependencies [#845](https://github.com/xmldom/xmldom/issues/845)

Thank you, @kboshold, @Ponynjaa, for your contributions.

xmldom/xmldom#435

0.9.7

Commits

... (truncated)

Changelog

Sourced from @xmldom/xmldom's changelog.

0.9.9

Added

implement ParentNode.children getter [#960](https://github.com/xmldom/xmldom/issues/960) / [#410](https://github.com/xmldom/xmldom/issues/410)

Fixed

Security: createCDATASection now throws InvalidCharacterError when data contains "]]>", as required by the WHATWG DOM spec. GHSA-wh4c-j3r5-mjhp

Security: XMLSerializer now splits CDATASection nodes whose data contains "]]>" into adjacent CDATA sections at serialization time, preventing XML injection via mutation methods (appendData, replaceData, .data =, .textContent =). GHSA-wh4c-j3r5-mjhp

correctly traverse ancestor chain in Node.contains [#931](https://github.com/xmldom/xmldom/issues/931)

Code that passes a string containing "]]>" to createCDATASection and relied on the previously unsafe behavior will now receive InvalidCharacterError. Use a mutation method such as appendData if you intentionally need "]]>" in a CDATASection node's data.

Chore

updated dependencies

Thank you, @stevenobiajulu, @yoshi389111, @thesmartshadow, for your contributions

0.8.12

Fixed

preserve trailing whitespace in ProcessingInstruction data [#962](https://github.com/xmldom/xmldom/issues/962) / [#42](https://github.com/xmldom/xmldom/issues/42)

Security: createCDATASection now throws InvalidCharacterError when data contains "]]>", as required by the WHATWG DOM spec. GHSA-wh4c-j3r5-mjhp

Security: XMLSerializer now splits CDATASection nodes whose data contains "]]>" into adjacent CDATA sections at serialization time, preventing XML injection via mutation methods (appendData, replaceData, .data =, .textContent =). GHSA-wh4c-j3r5-mjhp

Code that passes a string containing "]]>" to createCDATASection and relied on the previously unsafe behavior will now receive InvalidCharacterError. Use a mutation method such as appendData if you intentionally need "]]>" in a CDATASection node's data.

Thank you, @thesmartshadow, @stevenobiajulu, for your contributions

0.8.11

Fixed

update ownerDocument when moving nodes between documents [#933](https://github.com/xmldom/xmldom/issues/933) / [#932](https://github.com/xmldom/xmldom/issues/932)

Thank you, @shunkica, for your contributions

0.9.8

... (truncated)

Commits

7ffb16b 0.9.9
07aade1 docs: add missing references to changelog (#970)
2b852e8 fix: XML injection via unsafe CDATA serialization (GHSA-wh4c-j3r5-mjhp) (#969)
d9adeff chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 (#966)
be45d04 chore: add local CI script and format:check (#965)
2d73ddd chore(deps-dev): bump yauzl from 3.2.0 to 3.2.1 (#963)
385c392 chore(deps): bump minimatch (#961)
7750b31 feat: implement ParentNode.children getter (#960)
aa806cd chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#958)
7d2610c chore(deps): update npm to v11.6.3 (#947)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by karfau, a new releaser for @xmldom/xmldom since your current version.

Updates codeceptjs from 3.6.9 to 3.7.8

Release notes

Sourced from codeceptjs's releases.

3.7.8

What's Changed

Fix open security issues by @thomashohn in codeceptjs/CodeceptJS#5504

Create gitleaks.yml by @kobenguyent in codeceptjs/CodeceptJS#5505

Update dependencies by @thomashohn in codeceptjs/CodeceptJS#5510

release 3.7.8 by @kobenguyent in codeceptjs/CodeceptJS#5511

Full Changelog: codeceptjs/CodeceptJS@3.7.7...3.7.8

3.7.7

What's Changed

fix: support Playwright 1.58+ output format in codeceptjs info by @mirao in codeceptjs/CodeceptJS#5423

fix: run-workers --by suite parallelization broken by test file sorting by @mirao in codeceptjs/CodeceptJS#5419

Bump axios and other minor deps by @thomashohn in codeceptjs/CodeceptJS#5448

Update some deps and remove security issues by @thomashohn in codeceptjs/CodeceptJS#5458

doc: fix playwright link to external device list by @gimler in codeceptjs/CodeceptJS#5450

Update minor deps by @thomashohn in codeceptjs/CodeceptJS#5463

Update some deps by @thomashohn in codeceptjs/CodeceptJS#5467

Update Sinon by @thomashohn in codeceptjs/CodeceptJS#5472

Added overwrites by @thomashohn in codeceptjs/CodeceptJS#5477

Updated deps by @thomashohn in codeceptjs/CodeceptJS#5488

Update actions by @thomashohn in codeceptjs/CodeceptJS#5490

Bump versions by @thomashohn in codeceptjs/CodeceptJS#5494

release 3.7.7 by @kobenguyent in codeceptjs/CodeceptJS#5495

New Contributors

@gimler made their first contribution in codeceptjs/CodeceptJS#5450

Full Changelog: codeceptjs/CodeceptJS@3.7.6...3.7.7

3.7.5

❤️ Thanks all to those who contributed to make this release! ❤️

✨ Features

feat: Add configurable sensitive data masking with custom patterns (#5109)

Backward Compatible Boolean Configuration
// codecept.conf.js
exports.config = {
  maskSensitiveData: true, // Uses built-in patterns for common sensitive data
  // ... other config
}
Advanced Custom Patterns Configuration
</tr></table> 

... (truncated)

Changelog

Sourced from codeceptjs's changelog.

3.7.8

❤️ Thanks all to those who contributed to make this release! ❤️

🧹 Chores & Maintenance

Update dependencies (#5510) - by @thomashohn

Create gitleaks.yml (#5505) - by @kobenguyent

Fix open security issues (#5504) - by @thomashohn

3.7.7

❤️ Thanks all to those who contributed to make this release! ❤️

🐛 Bug Fixes

fix: run-workers --by suite parallelization broken by test file sorting (#5412) (#5419) - by @mirao

fix: support Playwright 1.58+ output format in codeceptjs info (#5423) - by @mirao

📖 Documentation

doc: fix playwright link to external device list (#5450) - by @gimler

🧹 Chores & Maintenance

chore(deps): keep dependencies in sync (#5494, #5490, #5488, #5477, #5472, #5467, #5463, #5458, #5448) - by @thomashohn

3.7.6

❤️ Thanks all to those who contributed to make this release! ❤️

✨ Features

feat(bdd): add support for the But keyword (#5291) - by @mozillalives

feat(playwright): add support for storageState configuration (#5192) - by @Samuel-StO

feat(rest): add support for HEAD request (#5212) - by @kobenguyent

🐛 Bug Fixes

fix(runner): test files are not executed in alphabetical order (#5386) - by DenysKuchma

fix(html-reporter): handle edgeInfo properly (#5327)

fix(html-reporter): improvements and stability fixes (#5242) - by @kobenguyent

fix(html-reporter): address multiple rendering issues (#5240) - by @kobenguyent

fix(screenshots): prevent filename collisions using unique names (#5299) - by @mirao

fix(playwright): always use keyboard.type for strings and add national characters test (#5280) - by @mirao

fix(playwright): remove redundant async initialization of selector engines (#5206) - by @Samuel-StO

fix(timeout): apply global timeout before suite execution (#5275) - by @mirao

fix(retryFailedStep): handle missing options to prevent promise chaining error (#5276) - by @mirao

fix(workers): correct stats when running with workers (#5215) - by @kobenguyent

fix(appium): resolve platformName handling issue (#5214) - by @mirao

... (truncated)

Commits

138d28e release 3.7.8 (#5511)
1737c67 Update dependencies (#5510)
80d483e Create gitleaks.yml (#5505)
83cb43d Fix open security issues (#5504)
30a36a6 release 3.7.7 (#5495)
051ced8 Bump versions (#5494)
11511b4 Update actions (#5490)
1324e07 Updated deps (#5488)
47451b3 Added overwrites (#5477)
c6b3da2 Update Sinon (#5472)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@xmldom/xmldom](https://github.com/xmldom/xmldom) to 0.9.9 and updates ancestor dependency [codeceptjs](https://github.com/Codeception/codeceptjs). These dependencies need to be updated together. Updates `@xmldom/xmldom` from 0.9.5 to 0.9.9 - [Release notes](https://github.com/xmldom/xmldom/releases) - [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md) - [Commits](xmldom/xmldom@0.9.5...0.9.9) Updates `codeceptjs` from 3.6.9 to 3.7.8 - [Release notes](https://github.com/Codeception/codeceptjs/releases) - [Changelog](https://github.com/codeceptjs/CodeceptJS/blob/3.x/CHANGELOG.md) - [Commits](codeceptjs/CodeceptJS@3.6.9...3.7.8) --- updated-dependencies: - dependency-name: "@xmldom/xmldom" dependency-version: 0.9.9 dependency-type: indirect - dependency-name: codeceptjs dependency-version: 3.7.8 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 9, 2026

dependabot bot requested a review from a team as a code owner April 9, 2026 03:47

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 9, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump @xmldom/xmldom and codeceptjs#49

Bump @xmldom/xmldom and codeceptjs#49
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-39527a4e50

dependabot bot commented on behalf of github Apr 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Apr 9, 2026

0.9.9

Added

Fixed

Chore

0.9.8

Fixed

Chore

0.9.7

0.9.9

Added

Fixed

Chore

0.8.12

Fixed

0.8.11

Fixed

0.9.8

3.7.8

What's Changed

3.7.7

What's Changed

New Contributors

3.7.5

✨ Features

Backward Compatible Boolean Configuration

Advanced Custom Patterns Configuration

3.7.8

🧹 Chores & Maintenance

3.7.7

🧹 Chores & Maintenance

3.7.6

✨ Features

🐛 Bug Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants