Skip to content

build(deps): Bump fast-xml-builder from 1.1.5 to 1.2.0#4

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fast-xml-builder-1.2.0
Open

build(deps): Bump fast-xml-builder from 1.1.5 to 1.2.0#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fast-xml-builder-1.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Copy link
Copy Markdown

Bumps fast-xml-builder from 1.1.5 to 1.2.0.

Changelog

Sourced from fast-xml-builder's changelog.

1.2.0 (2026-05-08)

  • Add support for sanitizeName option
  • Support xml-naming for validating and sanitizing tag and attribute names

1.1.9 (2026-05-06)

  • fix: format output for preserve order when indent by is set to empty string

1.1.8 (2026-05-05)

  • fix: skip text property for PI tags
  • improve typings

1.1.7 (2026--05-04)

  • fix security issues when attribute value contains quotes

1.1.6 (2026--05-04)

  • fix security issues related to comment
  • skip comment with null value

1.1.5 (2026-04-17)

  • fix security issues related to comment and cdata

1.1.4 (2026-03-16)

  • support maxNestedTags option

1.1.3 (2026-03-13)

  • declare Matcher & Expression as unknown so user is not forced to install path-expression-matcher

1.1.2 (2026-03-11)

  • fix typings

1.1.1 (2026-03-11)

  • upgrade path-expression-matcher to 1.1.3

1.1.0 (2026-03-10)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [fast-xml-builder](https://github.com/NaturalIntelligence/fast-xml-builder) from 1.1.5 to 1.2.0.
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-builder/blob/main/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-builder@v1.1.5...v1.2.0)

---
updated-dependencies:
- dependency-name: fast-xml-builder
  dependency-version: 1.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 12, 2026
NicolasKieffer added a commit that referenced this pull request Jun 10, 2026
Add PDF_ANALYSIS_SUPPRESS_SUGGESTIONS so suggestions can be ignored by
what they change, via a `<action>[:<column>[:<state>]]` grammar (e.g.
`update:source:filled`). `state` (empty|filled) targets the user's
current cell value so updates can be restricted to empty and/or
populated fields. Default `update:resourceName,update:source:filled`
stops name-change suggestions on existing KRT rows (issues #4/#6) and
never overwrites a SOURCE the user already filled, while still filling
empty ones. `none` opts out entirely.

Documents the grammar in .env.example and environment-variables.md.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
NicolasKieffer added a commit that referenced this pull request Jul 8, 2026
… finds

Robustness: the comparison and generation parsers now repair the common
unescaped-backslash malformation (sanitizeJsonEscapes) and retry empty/broken
LM responses, returning best-effort after the last attempt; the comparison
completeness prompt + an 'unreviewed' flag surface any generated ref the LM
omitted so a partial response no longer drops suggestions silently.

Tiering (issue #2): add suggestions carry a `tier` (confident /
needs_verification) + `tierReason` — an add with no identifier is surfaced but
flagged for the curator to verify rather than suppressed or presented as
high-confidence. The KRT editor shows an amber "Verify" badge; the suggestions
audit view renders the 'Unreviewed' decision.

Datasets (issues #2/#4): principle 6 in the comparison prompt now surfaces the
authors' own depositable data even when the identifier is missing, and skips
datasets that are only cited for comparison rather than used/generated.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
NicolasKieffer added a commit that referenced this pull request Jul 8, 2026
…dataset detection

Seed retention (issue #1): buildGeneratedKrt now reconciles the Generated KRT
against the author KRT — any author item the LM consolidation dropped is
carried back, tagged `carriedFromAuthorKrt`, so an author-provided resource can
never be silently lost (observed: the datasets consolidation dropping ~1 in 5
author dataset seeds it mistook for assay readouts, even ones with a Zenodo DOI).

Antibodies (issue #3): the materials prompt now captures every antibody from
cues (RRID:AB_, anti-<target>, host, clone, dilution, vendor+catalog) instead
of only enriching seeds — identifier-less ones ride the new needs_verification
tier. Confirmed +0.09 antibody recall across a 3-run eval.

Datasets (issues #2/#4): the consolidation gate allows the authors' own
depositable data with a missing identifier, and excludes datasets cited only
for comparison.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
NicolasKieffer added a commit that referenced this pull request Jul 22, 2026
…e, errors gate

- #2: protocols.io protocols now require a DOI/URL identifier (error) — plain
  text no longer passes silently. Applied in both the DB validateRow path and
  the stateless validateRowValues path.
- #4: clearer 'Source is required' guidance distinguishing the repository/vendor
  name (Source) from the DOI/URL (Identifier).
- #16: row-order toggle in the editor — 'By resource type' (default) vs
  'As submitted' (original input order); an explicit column sort still wins.
- #11: RESOURCE TYPE errors always block Continue; other errors can be passed via
  an explicit 'Continue anyway' acknowledge modal. Warnings never block.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants