Update Rust crate quick-xml to v0.39.4 #40

Merged
redbinder0526 merged 1 commit from renovate/quick-xml-0.x-lockfile into main 2026-05-10 11:21:51 +02:00
Owner

This PR contains the following updates:

Package Type Update Change
quick-xml dependencies patch 0.39.20.39.4

Release Notes

tafia/quick-xml (quick-xml)

v0.39.4

Compare Source

Bug Fixes
  • #​957: Fix slice-index panic when reading malformed DTD whose unknown markup
    is split across BufReader chunks. As with #​950, the returned
    Event::DocType may contain the malformed DTD; this fix only ensures that
    the parser does not panic.
  • #​960: Fix sibling slice-index panic when a single chunk delivers < followed
    by 9+ bytes of unknown markup inside a DTD internal subset. Same disposition
    as #​957 / #​950: parser must not panic; DTD validity reporting is a future
    improvement.

v0.39.3

Compare Source

Bug Fixes
  • #​950: Fix subtraction with overflow when parse malformed DTD in some cases.
    Note, that currently we do not check the validity of DTD, so the returned Event::DocType
    may contain the malformed DTD.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [quick-xml](https://github.com/tafia/quick-xml) | dependencies | patch | `0.39.2` → `0.39.4` | --- ### Release Notes <details> <summary>tafia/quick-xml (quick-xml)</summary> ### [`v0.39.4`](https://github.com/tafia/quick-xml/blob/HEAD/Changelog.md#0394----2026-05-08) [Compare Source](https://github.com/tafia/quick-xml/compare/v0.39.3...v0.39.4) ##### Bug Fixes - [#&#8203;957]: Fix slice-index panic when reading malformed DTD whose unknown markup is split across `BufReader` chunks. As with [#&#8203;950], the returned `Event::DocType` may contain the malformed DTD; this fix only ensures that the parser does not panic. - [#&#8203;960]: Fix sibling slice-index panic when a single chunk delivers `<` followed by 9+ bytes of unknown markup inside a DTD internal subset. Same disposition as [#&#8203;957] / [#&#8203;950]: parser must not panic; DTD validity reporting is a future improvement. [#&#8203;950]: https://github.com/tafia/quick-xml/issues/950 [#&#8203;957]: https://github.com/tafia/quick-xml/issues/957 [#&#8203;960]: https://github.com/tafia/quick-xml/issues/960 ### [`v0.39.3`](https://github.com/tafia/quick-xml/blob/HEAD/Changelog.md#0393----2026-05-04) [Compare Source](https://github.com/tafia/quick-xml/compare/v0.39.2...v0.39.3) ##### Bug Fixes - [#&#8203;950]: Fix subtraction with overflow when parse malformed DTD in some cases. Note, that currently we do not check the validity of DTD, so the returned `Event::DocType` may contain the malformed DTD. [#&#8203;950]: https://github.com/tafia/quick-xml/issues/950 </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Update Rust crate quick-xml to v0.39.3
All checks were successful
Build and Test / account (push) Successful in 7m40s
77a29f3186
spacebot force-pushed renovate/quick-xml-0.x-lockfile from 77a29f3186
All checks were successful
Build and Test / account (push) Successful in 7m40s
to 85817154c3
All checks were successful
Build and Test / account (push) Successful in 8m13s
2026-05-08 22:00:54 +02:00
Compare
spacebot changed title from Update Rust crate quick-xml to v0.39.3 to Update Rust crate quick-xml to v0.39.4 2026-05-08 22:00:58 +02:00
redbinder0526 deleted branch renovate/quick-xml-0.x-lockfile 2026-05-10 11:21:51 +02:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
spacebar/account!40
No description provided.