Skip to content

deps(go): bump module github.com/beevik/etree to v1.7.0 - #9601

Merged
olblak merged 3 commits into
mainfrom
updatecli_main_c09fb7a7fe70dd4572233a70a769d64ba137852560b42daf675fbb007f549878
Jul 17, 2026
Merged

deps(go): bump module github.com/beevik/etree to v1.7.0#9601
olblak merged 3 commits into
mainfrom
updatecli_main_c09fb7a7fe70dd4572233a70a769d64ba137852560b42daf675fbb007f549878

Conversation

@updateclibot

@updateclibot updateclibot Bot commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

deps(go): bump module github.com/beevik/etree

clean: go mod tidy

ran shell command "go mod tidy"

deps(go): bump module github.com/beevik/etree to v1.7.0

go.mod updated Module path "github.com/beevik/etree" version from "v1.6.0" to "v1.7.0"

v1.7.0
**Breaking changes**

* To address a security issue, it was necessary to add a `MaxDepth` option to
  `ReadSettings` to limit the depth of XML trees during parsing. A generous
  default value of 1024 was chosen to avoid breaking most existing code.
  However, if your code is processing XML hierarchies with a depth greater
  than 1024, you will need to assign your `Document` a `ReadSettings` that has
  a `MaxDepth` set to a higher value.

**Security Fixes**

* Limited the depth of XML trees processed by all `ReadFrom` functions during
  parsing.
* Fixed a `CompilePath` index-out-of-range panic that could be caused by a
  missing path filter key.
* Sanitized the contents of XML text, comment, ProcInst and Directive tokens
  provided by the user.
v1.6.0
**Changes**

* Added new iterator versions of existing functions that return slices of  `Element` pointers: `ChildElementsSeq`, `SelectElementsSeq`, `FindElementsSeq`, and `FindElementsPathSeq`.
* Improved performance of functions that return a single element.
* Because of its use of iterators, this package now requires go 1.23 or later.
GitHub Action workflow link
Updatecli logo

Created automatically by Updatecli

Options:

Most of Updatecli configuration is done via its manifest(s).

  • If you close this pull request, Updatecli will automatically reopen it, the next time it runs.
  • If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made.

Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

updateclibot Bot added 2 commits July 15, 2026 13:48
Made with ❤️️ by updatecli
@updateclibot updateclibot Bot added the dependencies Pull requests that update a dependency file label Jul 15, 2026
@olblak
olblak enabled auto-merge (squash) July 17, 2026 08:06
@olblak
olblak merged commit c560871 into main Jul 17, 2026
8 of 9 checks passed
@olblak
olblak deleted the updatecli_main_c09fb7a7fe70dd4572233a70a769d64ba137852560b42daf675fbb007f549878 branch July 17, 2026 08:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant