chore(deps): bump @xmldom/xmldom from 0.8.11 to 0.8.12 in the npm_and_yarn group across 1 directory

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the npm_and_yarn group with 1 update in the / directory: @xmldom/xmldom.

Updates @xmldom/xmldom from 0.8.11 to 0.8.12

Release notes

Sourced from @​xmldom/xmldom's releases.

0.8.12

Commits

Fixed

• preserve trailing whitespace in ProcessingInstruction data [#962](https://github.com/xmldom/xmldom/issues/962) / [#42](https://github.com/xmldom/xmldom/issues/42)
• Security: createCDATASection now throws InvalidCharacterError when data contains "]]>", as required by the WHATWG DOM spec. GHSA-wh4c-j3r5-mjhp
• Security: XMLSerializer now splits CDATASection nodes whose data contains "]]>" into adjacent CDATA sections at serialization time, preventing XML injection via mutation methods (appendData, replaceData, .data =, .textContent =). GHSA-wh4c-j3r5-mjhp

Code that passes a string containing "]]>" to createCDATASection and relied on the previously unsafe behavior will now receive InvalidCharacterError. Use a mutation method such as appendData if you intentionally need "]]>" in a CDATASection node's data.

Thank you, @​thesmartshadow, @​stevenobiajulu, for your contributions

xmldom/xmldom#357

Changelog

Sourced from @​xmldom/xmldom's changelog.

0.8.12

Fixed

• preserve trailing whitespace in ProcessingInstruction data [#962](https://github.com/xmldom/xmldom/issues/962) / [#42](https://github.com/xmldom/xmldom/issues/42)
• Security: createCDATASection now throws InvalidCharacterError when data contains "]]>", as required by the WHATWG DOM spec. GHSA-wh4c-j3r5-mjhp
• Security: XMLSerializer now splits CDATASection nodes whose data contains "]]>" into adjacent CDATA sections at serialization time, preventing XML injection via mutation methods (appendData, replaceData, .data =, .textContent =). GHSA-wh4c-j3r5-mjhp

Code that passes a string containing "]]>" to createCDATASection and relied on the previously unsafe behavior will now receive InvalidCharacterError. Use a mutation method such as appendData if you intentionally need "]]>" in a CDATASection node's data.

Thank you, @​thesmartshadow, @​stevenobiajulu, for your contributions

Commits

• 189cb78 0.8.12
• ed08df7 fix: XML injection via unsafe CDATA serialization (GHSA-wh4c-j3r5-mjhp) (#968)
• a5b929b chore: clean up generated test artefacts before running ci-local
• 4e37a20 ci: run format:check in lint job
• ac0ac77 chore: ignore generated files when checking formatting
• 968c893 chore: add local CI script and format:check script
• ac40424 fix: preserve trailing whitespace in ProcessingInstruction data (#962)
• cece752 chore: add .nvmrc pointing to node version 18
• cbf44d9 docs: improve links to changes in most recent release
• See full diff in compare view

Maintainer changes

This version was pushed to npm by karfau, a new releaser for @​xmldom/xmldom since your current version.

[github-actions]

🤖 CI Summary

Job	Status
Unit Tests	✅ success
Lint	✅ success
Build	✅ success
E2E Tests	✅ success

📦 Bundle Size

Main JS: 50KB

📋 What to do if tests fail?

• Unit Tests: Check the test output in the Actions tab
• Lint: Run npm run lint locally
• E2E Tests: Check Playwright report artifacts
• Skipped jobs: Path filters detected no relevant changes

---

Updated: 2026-04-08T02:20:47.785Z

[jtn0123]

@dependabot rebase

[jtn0123]

@dependabot rebase

[github-actions]

⚠️ SonarCloud Analysis

Quality Gate: UNKNOWN

New Code

Metric	Value
🐛 Bugs	N/A
🔓 Vulnerabilities	N/A
🔥 Security Hotspots	N/A
🧹 Code Smells	N/A
📊 Coverage	N/A
📋 Duplication	N/A
🕐 New Debt	N/A

Ratings

	Reliability	Security	Maintainability
Grade	N/A	N/A	N/A

Overall Project

Metric	Value
📊 Coverage	N/A
🕐 Technical Debt	N/A
📏 Lines of Code	N/A
🐛 Bugs	N/A
🔓 Vulnerabilities	N/A
🧹 Code Smells	N/A
📋 Duplication	N/A

View full analysis on SonarCloud

---

SonarCloud · 3ba9cb8 · 2026-04-08 02:21:29 UTC

[github-actions]

🎉 This PR is included in version 1.12.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀