Skip to content

Bump xmltodict from 0.15.1 to 1.0.3 in /docker/xml-feed#5225

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/docker/xml-feed/xmltodict-1.0.3
Closed

Bump xmltodict from 0.15.1 to 1.0.3 in /docker/xml-feed#5225
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/docker/xml-feed/xmltodict-1.0.3

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 16, 2026

Bumps xmltodict from 0.15.1 to 1.0.3.

Release notes

Sourced from xmltodict's releases.

v1.0.3

1.0.3 (2026-02-15)

Bug Fixes

  • unparse: serialize None text/attrs as empty values (fixes #401) (aa16511)

Documentation

  • readme: fix Fedora and Arch package links (fd6a73b)

v1.0.2

1.0.2 (2025-09-17)

Bug Fixes

  • allow DOCTYPE with disable_entities=True (default) (25b61a4)

v1.0.1

1.0.1 (2025-09-17)

Bug Fixes

  • fail closed when entities disabled (c986d2d)
  • validate XML comments (3d4d2d3)

Documentation

  • add SECURITY.md (6413023)
  • clarify behavior for empty lists (2025b5c)
  • clarify process_comments docs (6b464fc)
  • clarify strip whitespace comment behavior (b3e2203)
  • create AGENTS.md for coding agents (0da66ee)
  • replace travis with actions badge (2576b94)
  • update CONTRIBUTING.md (db39180)

v1.0.0

1.0.0 (2025-09-12)

⚠ BREAKING CHANGES

  • modernize for Python 3.9+; drop legacy compat paths

Features

... (truncated)

Changelog

Sourced from xmltodict's changelog.

1.0.3 (2026-02-15)

Bug Fixes

  • unparse: serialize None text/attrs as empty values (fixes #401) (aa16511)

Documentation

  • readme: fix Fedora and Arch package links (fd6a73b)

1.0.2 (2025-09-17)

Bug Fixes

  • allow DOCTYPE with disable_entities=True (default) (25b61a4)

1.0.1 (2025-09-17)

Bug Fixes

  • fail closed when entities disabled (c986d2d)
  • validate XML comments (3d4d2d3)

Documentation

  • add SECURITY.md (6413023)
  • clarify behavior for empty lists (2025b5c)
  • clarify process_comments docs (6b464fc)
  • clarify strip whitespace comment behavior (b3e2203)
  • create AGENTS.md for coding agents (0da66ee)
  • replace travis with actions badge (2576b94)
  • update CONTRIBUTING.md (db39180)

1.0.0 (2025-09-12)

⚠ BREAKING CHANGES

  • modernize for Python 3.9+; drop legacy compat paths

Features

  • unparse: add limited XML comment round-trip; unify _emit behavior (e43537e)
  • unparse: add selective force_cdata support (bool/tuple/callable) (a497fed), closes #375

... (truncated)

Commits
  • 89c4bf7 chore(master): release 1.0.3
  • fd6a73b docs(readme): fix Fedora and Arch package links
  • aa16511 fix(unparse): serialize None text/attrs as empty values (fixes #401)
  • f7d76c9 style: lines required between function definitions
  • 1bfb267 build: remove unnecessary wheel from dependencies
  • d9f6d40 build: no need for README.md in MANIFEST.in
  • 34378ef build: pep 639 compliance
  • d079849 chore(master): release 1.0.2
  • 25b61a4 fix: allow DOCTYPE with disable_entities=True (default)
  • a2a9ab7 ci(publish): allow uploading release assets
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [xmltodict](https://github.com/martinblech/xmltodict) from 0.15.1 to 1.0.3.
- [Release notes](https://github.com/martinblech/xmltodict/releases)
- [Changelog](https://github.com/martinblech/xmltodict/blob/master/CHANGELOG.md)
- [Commits](martinblech/xmltodict@v0.15.1...v1.0.3)

---
updated-dependencies:
- dependency-name: xmltodict
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 16, 2026
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 23, 2026

Superseded by #5238.

@dependabot dependabot bot closed this Feb 23, 2026
@dependabot dependabot bot deleted the dependabot/pip/docker/xml-feed/xmltodict-1.0.3 branch February 23, 2026 12:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants