Skip to content

Bump entities from 8.0.0 to 8.1.0 - #4369

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/entities-8.1.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/entities-8.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps entities from 8.0.0 to 8.1.0.

Release notes

Sourced from entities's releases.

v8.1.0

Faster decoding & escaping, with smaller bundles. Encoding output stays compatible with v8.

Improvements

  • Decoding: decodeHTML 1.19×, decodeHTMLStrict 1.14×, decodeHTMLAttribute 1.18×, decodeXML 1.46×, default decode 1.44× as fast. #2248, #2348
  • Escaping: escapeUTF8 1.49×, escapeAttribute 1.23×, escapeText 1.33× as fast. #2247, #2348
  • Encoding mostly ASCII 4 KiB prose: encodeHTML 1.70×, encodeNonAsciiHTML 2.24×, encodeXML / escape 2.46× as fast. On the short, dense benchmark input, HTML encoding is unchanged; XML encoding and default encode take about 6% longer. #2246, #2348
  • 19% smaller full bundle (18% gzipped), targeting ES2022.

Compared with v8.0.0; speedups are medians of nine runs on Node 26.8.1, Linux/x64. Short inputs use the repository benchmark fixtures; results vary with input.

Fixes

  • decodeHTMLAttribute preserves interrupted references such as &notin<, previously incorrectly decoded to ¬in<. #2213
  • decodeHTML preserves unterminated names such as &Xi$, previously incorrectly decoded to Â. #2331
  • decodeXML and default decode preserve XML numeric code points: &#x80; now yields U+0080 instead of €. HTML decoding still yields €. By @​adarshx01 in #2347.

Deprecations

  • Use String.prototype.codePointAt instead of getCodePoint from entities/escape. #2268

Full Changelog: fb55/entities@v8.0.0...v8.1.0

Commits
  • c71f562 8.1.0
  • 05af0b3 fix(decode): skip Windows-1252 C1 remap for XML numeric references (#2347)
  • 5045f0b test: run html5lib-tests entity fixtures against the decoders (#2272)
  • e12dbf8 build(deps-dev): bump vitest from 4.1.11 to 5.0.0 (#2350)
  • f982260 build(deps-dev): bump @​biomejs/biome from 2.5.11 to 2.5.12 (#2353)
  • 257d38e build(deps-dev): bump tinybench from 6.1.4 to 6.1.5 (#2354)
  • fd0b8df build(deps-dev): bump eslint from 10.9.1 to 10.10.0 (#2352)
  • 417b259 build(deps-dev): bump @​eslint/compat from 2.1.0 to 2.1.1 (#2351)
  • 30141cb build(deps-dev): bump @​biomejs/biome from 2.5.3 to 2.5.11 (#2337)
  • 1d737a2 fix: preserve compatibility for the next release (#2348)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [entities](https://github.com/fb55/entities) from 8.0.0 to 8.1.0.
- [Release notes](https://github.com/fb55/entities/releases)
- [Commits](fb55/entities@v8.0.0...v8.1.0)

---
updated-dependencies:
- dependency-name: entities
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

Looks like entities is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 21, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/entities-8.1.0 branch September 21, 2026 21:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

1 participant