Skip to content

chore(deps): Bump transitive dep fast-xml-parser #19437

New issue
New issue
Closed
#19433
Closed
chore(deps): Bump transitive dep fast-xml-parser#19437
#19433
Assignees
Lms24

Description

@github-actions
github-actions
bot
opened on Feb 19, 2026

Note

The pull request "chore(deps): Bump transitive dep fast-xml-parser" was created by @Lms24 but did not reference an issue. Therefore this issue was created for better visibility in external tools like Linear.

bumps fast-xml-parser to 5.3.6 which resolves https://github.com/getsentry/sentry-javascript/security/dependabot/1062 partially. The remaining case was usage of the dep in @langchain/anthropic@0.3.x which we only use in node integration tests. Given we intentionally test against 0.x, I dismissed the alert due to this case.

Activity

  1. github-actions
    assigned
    Lms24
    on Feb 19, 2026

  2. linear commented on Feb 19, 2026

    @linear
    linearBot
    on Feb 19, 2026 – with Linear

    JS-1767

  3. Lms24
    added a commit that references this issue on Feb 20, 2026

    chore(deps): Bump transitive dep `fast-xml-parser` (#19433)

    b3d336c
  4. Lms24
    closed this as completedin #19433on Feb 20, 2026

  5. github-actions commented on Feb 24, 2026

    @github-actions
    github-actionsBot
    on Feb 24, 2026 – with GitHub Actions
    ContributorAuthor

    A PR closing this issue has just been released 🚀

    This issue was referenced by PR #19433, which was included in the 10.40.0 release.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions