alazyreader/nyc-bookstores
1
0
Fork 0
Code Issues 1 Pull Requests Releases Wiki Activity

Update dependency sitemap to v8.0.2 #25

Merged
alazyreader merged 1 commits from renovate/sitemap-8.x-lockfile into main 2025-10-31 14:03:13 +00:00
Conversation 0 Commits 1 Files Changed 1
+6 -6
renovate commented 2025-10-29 06:02:39 +00:00
Contributor
Copy Link
Copy Source

This PR contains the following updates:

Package Type Update Change
sitemap dependencies patch 8.0.1 -> 8.0.2

Release Notes

ekalinin/sitemap.js (sitemap)

v8.0.2

Compare Source

Bug Fixes
  • fix #​464: Support xsi:schemaLocation in custom namespaces - thanks @​dzakki
    • Extended custom namespace validation to accept namespace-qualified attributes (like xsi:schemaLocation) in addition to xmlns declarations
    • The validation regex now matches both xmlns:prefix="uri" and prefix:attribute="value" patterns
    • Enables proper W3C schema validation while maintaining security validation for malicious content
    • Added comprehensive tests including security regression tests
Example Usage

The following now works correctly (as documented in README):

const sms = new SitemapStream({
  xmlns: {
    custom: [
      'xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"',
      'xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd"'
    ]
  }
});
Testing
  • ✅ All existing tests passing
  • ✅ 8 new tests added covering positive and security scenarios
  • ✅ 100% backward compatible with 8.0.1
Files Changed

2 files changed: 144 insertions, 5 deletions

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [sitemap](https://github.com/ekalinin/sitemap.js) | dependencies | patch | [`8.0.1` -> `8.0.2`](https://renovatebot.com/diffs/npm/sitemap/8.0.1/8.0.2) | --- ### Release Notes <details> <summary>ekalinin/sitemap.js (sitemap)</summary> ### [`v8.0.2`](https://github.com/ekalinin/sitemap.js/blob/HEAD/CHANGELOG.md#802---Bug-Fix-Release) [Compare Source](https://github.com/ekalinin/sitemap.js/compare/8.0.1...8.0.2) ##### Bug Fixes - **fix [#&#8203;464](https://github.com/ekalinin/sitemap.js/issues/464)**: Support `xsi:schemaLocation` in custom namespaces - thanks [@&#8203;dzakki](https://github.com/dzakki) - Extended custom namespace validation to accept namespace-qualified attributes (like `xsi:schemaLocation`) in addition to `xmlns` declarations - The validation regex now matches both `xmlns:prefix="uri"` and `prefix:attribute="value"` patterns - Enables proper W3C schema validation while maintaining security validation for malicious content - Added comprehensive tests including security regression tests ##### Example Usage The following now works correctly (as documented in README): ```javascript const sms = new SitemapStream({ xmlns: { custom: [ 'xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"', 'xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd"' ] } }); ``` ##### Testing - ✅ All existing tests passing - ✅ 8 new tests added covering positive and security scenarios - ✅ 100% backward compatible with 8.0.1 ##### Files Changed 2 files changed: 144 insertions, 5 deletions </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNjQuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE2NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate added 1 commit 2025-10-29 06:02:40 +00:00
Update dependency sitemap to v8.0.2
ci/woodpecker/push/woodpecker Pipeline was successful
Details
490071326e
alazyreader merged commit 84db949c06 into main 2025-10-31 14:03:13 +00:00
alazyreader deleted branch renovate/sitemap-8.x-lockfile 2025-10-31 14:03:13 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
junebug alazyreader (David)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: alazyreader/nyc-bookstores#25