Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 18, 2025

Bumps xmltodict from 0.15.1 to 1.0.2.

Release notes

Sourced from xmltodict's releases.

v1.0.2

1.0.2 (2025-09-17)

Bug Fixes

  • allow DOCTYPE with disable_entities=True (default) (25b61a4)

v1.0.1

1.0.1 (2025-09-17)

Bug Fixes

  • fail closed when entities disabled (c986d2d)
  • validate XML comments (3d4d2d3)

Documentation

  • add SECURITY.md (6413023)
  • clarify behavior for empty lists (2025b5c)
  • clarify process_comments docs (6b464fc)
  • clarify strip whitespace comment behavior (b3e2203)
  • create AGENTS.md for coding agents (0da66ee)
  • replace travis with actions badge (2576b94)
  • update CONTRIBUTING.md (db39180)

v1.0.0

1.0.0 (2025-09-12)

⚠ BREAKING CHANGES

  • modernize for Python 3.9+; drop legacy compat paths

Features

  • unparse: add limited XML comment round-trip; unify _emit behavior (e43537e)
  • unparse: add selective force_cdata support (bool/tuple/callable) (a497fed), closes #375

Bug Fixes

  • namespaces: attach [@xmlns](https://github.com/xmlns) to declaring element when process_namespaces=True (f0322e5), closes #163
  • streaming: avoid parent accumulation at item_depth; add regression tests (220240c)
  • unparse: handle non-string #text with attributes; unify value conversion (927a025), closes #366
  • unparse: skip empty lists to keep pretty/compact outputs consistent (ab4c86f)

... (truncated)

Changelog

Sourced from xmltodict's changelog.

1.0.2 (2025-09-17)

Bug Fixes

  • allow DOCTYPE with disable_entities=True (default) (25b61a4)

1.0.1 (2025-09-17)

Bug Fixes

  • fail closed when entities disabled (c986d2d)
  • validate XML comments (3d4d2d3)

Documentation

  • add SECURITY.md (6413023)
  • clarify behavior for empty lists (2025b5c)
  • clarify process_comments docs (6b464fc)
  • clarify strip whitespace comment behavior (b3e2203)
  • create AGENTS.md for coding agents (0da66ee)
  • replace travis with actions badge (2576b94)
  • update CONTRIBUTING.md (db39180)

1.0.0 (2025-09-12)

⚠ BREAKING CHANGES

  • modernize for Python 3.9+; drop legacy compat paths

Features

  • unparse: add limited XML comment round-trip; unify _emit behavior (e43537e)
  • unparse: add selective force_cdata support (bool/tuple/callable) (a497fed), closes #375

Bug Fixes

  • namespaces: attach [@xmlns](https://github.com/xmlns) to declaring element when process_namespaces=True (f0322e5), closes #163
  • streaming: avoid parent accumulation at item_depth; add regression tests (220240c)
  • unparse: handle non-string #text with attributes; unify value conversion (927a025), closes #366
  • unparse: skip empty lists to keep pretty/compact outputs consistent (ab4c86f)

Reverts

  • remove initial Release Drafter config (c0b74ed)

... (truncated)

Commits
  • d079849 chore(master): release 1.0.2
  • 25b61a4 fix: allow DOCTYPE with disable_entities=True (default)
  • a2a9ab7 ci(publish): allow uploading release assets
  • 656e6af chore(master): release 1.0.1
  • c986d2d fix: fail closed when entities disabled
  • 3d4d2d3 fix: validate XML comments
  • b4a5f2a refactor: remove jython-specific parsing branches
  • 6b464fc docs: clarify process_comments docs
  • 34daa30 refactor: remove unused helper functions
  • 2025b5c docs: clarify behavior for empty lists
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 18, 2025
Bumps [xmltodict](https://github.com/martinblech/xmltodict) from 0.15.1 to 1.0.2.
- [Release notes](https://github.com/martinblech/xmltodict/releases)
- [Changelog](https://github.com/martinblech/xmltodict/blob/master/CHANGELOG.md)
- [Commits](martinblech/xmltodict@v0.15.1...v1.0.2)

---
updated-dependencies:
- dependency-name: xmltodict
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/xmltodict-1.0.2 branch from e212513 to 5400b25 Compare September 24, 2025 18:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants