Update dependency sitemap to v8.0.2 #25

renovate · 2025-10-29T06:02:39Z

renovate commented

2025-10-29 06:02:39 +00:00

This PR contains the following updates:

Package	Type	Update	Change
sitemap	dependencies	patch	`8.0.1` -> `8.0.2`

Release Notes

ekalinin/sitemap.js (sitemap)

`v8.0.2`

Compare Source

Bug Fixes

fix #464: Support xsi:schemaLocation in custom namespaces - thanks @dzakki
- Extended custom namespace validation to accept namespace-qualified attributes (like xsi:schemaLocation) in addition to xmlns declarations
- The validation regex now matches both xmlns:prefix="uri" and prefix:attribute="value" patterns
- Enables proper W3C schema validation while maintaining security validation for malicious content
- Added comprehensive tests including security regression tests

Example Usage

The following now works correctly (as documented in README):

const sms = new SitemapStream({
  xmlns: {
    custom: [
      'xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"',
      'xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd"'
    ]
  }
});

Testing

✅ All existing tests passing
✅ 8 new tests added covering positive and security scenarios
✅ 100% backward compatible with 8.0.1

Files Changed

2 files changed: 144 insertions, 5 deletions

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [sitemap](https://github.com/ekalinin/sitemap.js) | dependencies | patch | [`8.0.1` -> `8.0.2`](https://renovatebot.com/diffs/npm/sitemap/8.0.1/8.0.2) | --- ### Release Notes <details> <summary>ekalinin/sitemap.js (sitemap)</summary> ### [`v8.0.2`](https://github.com/ekalinin/sitemap.js/blob/HEAD/CHANGELOG.md#802---Bug-Fix-Release) [Compare Source](https://github.com/ekalinin/sitemap.js/compare/8.0.1...8.0.2) ##### Bug Fixes - **fix [#464](https://github.com/ekalinin/sitemap.js/issues/464)**: Support `xsi:schemaLocation` in custom namespaces - thanks [@dzakki](https://github.com/dzakki) - Extended custom namespace validation to accept namespace-qualified attributes (like `xsi:schemaLocation`) in addition to `xmlns` declarations - The validation regex now matches both `xmlns:prefix="uri"` and `prefix:attribute="value"` patterns - Enables proper W3C schema validation while maintaining security validation for malicious content - Added comprehensive tests including security regression tests ##### Example Usage The following now works correctly (as documented in README): ```javascript const sms = new SitemapStream({ xmlns: { custom: [ 'xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"', 'xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd"' ] } }); ``` ##### Testing - ✅ All existing tests passing - ✅ 8 new tests added covering positive and security scenarios - ✅ 100% backward compatible with 8.0.1 ##### Files Changed 2 files changed: 144 insertions, 5 deletions </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate added 1 commit 2025-10-29 06:02:40 +00:00

Update dependency sitemap to v8.0.2

ci/woodpecker/push/woodpecker Pipeline was successful

Details

490071326e

alazyreader merged commit 84db949c06 into main

2025-10-31 14:03:13 +00:00

alazyreader deleted branch renovate/sitemap-8.x-lockfile

2025-10-31 14:03:13 +00:00

alazyreader referenced this issue from a commit

2025-10-31 14:03:15 +00:00

Merge pull request 'Update dependency sitemap to v8.0.2' (#25) from renovate/sitemap-8.x-lockfile into main

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: alazyreader/nyc-bookstores#25