Bump xml from 0.91.3 to 1.0.1

[dependabot]

Bumps xml from 0.91.3 to 1.0.1.
Updates io.github.pdvrieze.xmlutil:serialization from 0.91.3 to 1.0.1

Release notes

Sourced from io.github.pdvrieze.xmlutil:serialization's releases.

1.0.1 – Cache it well

Note that 1.0.0 contains a significant caching bug in hash key collision cases (large amounts of elements). This release is a bugfix release, the only added functionality is simple functions that allow creating format caches with a specified size (rather than the default).

Fixes:

• Fix LRU cache so that it properly evicts and maintains its size (#372).
• Fix reading larger from kotlinx.io sources (#373)
• Fix close in PseudoBufferedReader (#374), this is probably never called, but still incorrect. Thanks to @​m-sasha for reporting many smaller bugs #374 - #382
• Fix serialization of negative values for XmlFloat/XmlDouble and related serializers (#375).
• Fix escaping of 0x1f in KtXmlWriter (#376).
• Allow writing of BOM in CData content, but disallow the sentinal character (0xffff) per the XML standards. Also tidy the error messages (#377).
• Fix DomWriter.getPrefixes that was incorrectly handling checks for already declared prefixes (#379).
• Fix writing namespace attributes through XmlEvent.Attribute (#380). Note that the parsing code does not generate Attribute events, so most use cases are not hit by this bug.
• Fix getPrefix in StartElementEvent (#381). It used a property rather than parameter in the fallback.
• Fix reading unicode characters in kotlinx.io.Source reading as well as native InputStreamReader (some of the code is common, and was buggy in both). Changes:
• Add support to specify the cache size of the underlying cache for LayeredCache and defaultSharedFormatCache()
• Add support for a PerSerializationFormatCache that allows for caching within individual invocations to a format.
• Snapshot releases no longer include javadoc/source artifacts, nor deprecated native targets. This should reduce the overall publication size/burden.
• Make InputStreamReader and SourceUnicodeReader have dedicated single character read implementations rather than reading into an array of length 1.

1.0.0 – To infinity, and beyond

Fixes:

• Remove usages of removeLast() to avoid issues on Android below API-level 35. Fixes #367.
• Fix Attr in the common DOM implementation not having its owner set/tracked appropriately.
• Ensure that the module structure matches the old structure from 1.0.0-rc2 and before.

Changes:

• The core-compat module is no longer published. Use core/core-jvm, and if integration with the native parser is needed, add the core-jdk or core-android modules.

1.0.0-rc3 – The full DOM

Features:

• There is now a common DOM implementation on all platforms that cooperates with the platform's DOM implementation (except for native targets that have none).

... (truncated)

Changelog

Sourced from io.github.pdvrieze.xmlutil:serialization's changelog.

1.0.1 Cache it well

(Jul 8, 2026) Fixes:

• Fix LRU cache so that it properly evicts and maintains its size (#372).
• Fix reading larger from kotlinx.io sources (#373)
• Fix close in PseudoBufferedReader (#374), this is probably never called, but still incorrect. Thanks to @​m-sasha for reporting many smaller bugs #374 - #382
• Fix serialization of negative values for XmlFloat/XmlDouble and related serializers (#375).
• Fix escaping of 0x1f in KtXmlWriter (#376).
• Allow writing of BOM in CData content, but disallow the sentinal character (0xffff) per the XML standards. Also tidy the error messages (#377).
• Fix DomWriter.getPrefixes that was incorrectly handling checks for already declared prefixes (#379).
• Fix writing namespace attributes through XmlEvent.Attribute (#380). Note that the parsing code does not generate Attribute events, so most use cases are not hit by this bug.
• Fix getPrefix in StartElementEvent (#381). It used a property rather than parameter in the fallback.
• Fix reading unicode characters in kotlinx.io.Source reading as well as native InputStreamReader (some of the code is common, and was buggy in both). Changes:
• Add support to specify the cache size of the underlying cache for LayeredCache and defaultSharedFormatCache()
• Add support for a PerSerializationFormatCache that allows for caching within individual invocations to a format.
• Snapshot releases no longer include javadoc/source artifacts, nor deprecated native targets. This should reduce the overall publication size/burden.
• Make InputStreamReader and SourceUnicodeReader have dedicated single character read implementations rather than reading into an array of length 1.

1.0.1

Fixes:

• Fix LRU cache so that it properly evicts and maintains its size (#372).
• Fix reading larger from kotlinx.io sources (#373)
• Fix close in PseudoBufferedReader (#374), this is probably never called, but still incorrect. Thanks to @​m-sasha for reporting many smaller bugs #374 - #382
• Fix serialization of negative values for XmlFloat/XmlDouble and related serializers (#375).
• Fix escaping of 0x1f in KtXmlWriter (#376).
• Allow writing of BOM in CData content, but disallow the sentinal character (0xffff) per the XML standards. Also tidy the error messages (#377).
• Fix DomWriter.getPrefixes that was incorrectly handling checks for already declared prefixes (#379).
• Fix writing namespace attributes through XmlEvent.Attribute (#380). Note that the parsing code does not generate Attribute events, so most use cases are not hit by this bug.
• Fix getPrefix in StartElementEvent (#381). It used a property rather than parameter in the fallback.
• Fix reading unicode characters in kotlinx.io.Source reading as well

... (truncated)

Commits

• 72c0b59 Only remove sources artifacts for snapshots, not for main releases (not allow...
• 9ff1184 Add date for 1.0.1 release.
• eeb446f Prepare 1.0.1 release.
• 3bbc7b9 Merge branch 'refs/heads/dev'
• e6ccb64 Fix optionality annotation consistency in DOM2.
• af059fb Fix Float/Double serialization regression tests to handle the fact that JS ta...
• 66541c6 Remove targets no longer available on snapshot releases.
• aea4ebd Implement InputStreamReader.read() as optimized reading.
• b4460c5 Fix SourceUnicodeReader and InputStreamReader to handle unicode characters (F...
• d466bbe Fix SourceUnicodeReader to handle unicode characters.
• Additional commits viewable in compare view

Updates io.github.pdvrieze.xmlutil:core-jdk from 0.91.3 to 1.0.1

Release notes

Sourced from io.github.pdvrieze.xmlutil:core-jdk's releases.

1.0.1 – Cache it well

Note that 1.0.0 contains a significant caching bug in hash key collision cases (large amounts of elements). This release is a bugfix release, the only added functionality is simple functions that allow creating format caches with a specified size (rather than the default).

Fixes:

• Fix LRU cache so that it properly evicts and maintains its size (#372).
• Fix reading larger from kotlinx.io sources (#373)
• Fix close in PseudoBufferedReader (#374), this is probably never called, but still incorrect. Thanks to @​m-sasha for reporting many smaller bugs #374 - #382
• Fix serialization of negative values for XmlFloat/XmlDouble and related serializers (#375).
• Fix escaping of 0x1f in KtXmlWriter (#376).
• Allow writing of BOM in CData content, but disallow the sentinal character (0xffff) per the XML standards. Also tidy the error messages (#377).
• Fix DomWriter.getPrefixes that was incorrectly handling checks for already declared prefixes (#379).
• Fix writing namespace attributes through XmlEvent.Attribute (#380). Note that the parsing code does not generate Attribute events, so most use cases are not hit by this bug.
• Fix getPrefix in StartElementEvent (#381). It used a property rather than parameter in the fallback.
• Fix reading unicode characters in kotlinx.io.Source reading as well as native InputStreamReader (some of the code is common, and was buggy in both). Changes:
• Add support to specify the cache size of the underlying cache for LayeredCache and defaultSharedFormatCache()
• Add support for a PerSerializationFormatCache that allows for caching within individual invocations to a format.
• Snapshot releases no longer include javadoc/source artifacts, nor deprecated native targets. This should reduce the overall publication size/burden.
• Make InputStreamReader and SourceUnicodeReader have dedicated single character read implementations rather than reading into an array of length 1.

1.0.0 – To infinity, and beyond

Fixes:

• Remove usages of removeLast() to avoid issues on Android below API-level 35. Fixes #367.
• Fix Attr in the common DOM implementation not having its owner set/tracked appropriately.
• Ensure that the module structure matches the old structure from 1.0.0-rc2 and before.

Changes:

• The core-compat module is no longer published. Use core/core-jvm, and if integration with the native parser is needed, add the core-jdk or core-android modules.

1.0.0-rc3 – The full DOM

Features:

• There is now a common DOM implementation on all platforms that cooperates with the platform's DOM implementation (except for native targets that have none).

... (truncated)

Changelog

Sourced from io.github.pdvrieze.xmlutil:core-jdk's changelog.

1.0.1 Cache it well

(Jul 8, 2026) Fixes:

• Fix LRU cache so that it properly evicts and maintains its size (#372).
• Fix reading larger from kotlinx.io sources (#373)
• Fix close in PseudoBufferedReader (#374), this is probably never called, but still incorrect. Thanks to @​m-sasha for reporting many smaller bugs #374 - #382
• Fix serialization of negative values for XmlFloat/XmlDouble and related serializers (#375).
• Fix escaping of 0x1f in KtXmlWriter (#376).
• Allow writing of BOM in CData content, but disallow the sentinal character (0xffff) per the XML standards. Also tidy the error messages (#377).
• Fix DomWriter.getPrefixes that was incorrectly handling checks for already declared prefixes (#379).
• Fix writing namespace attributes through XmlEvent.Attribute (#380). Note that the parsing code does not generate Attribute events, so most use cases are not hit by this bug.
• Fix getPrefix in StartElementEvent (#381). It used a property rather than parameter in the fallback.
• Fix reading unicode characters in kotlinx.io.Source reading as well as native InputStreamReader (some of the code is common, and was buggy in both). Changes:
• Add support to specify the cache size of the underlying cache for LayeredCache and defaultSharedFormatCache()
• Add support for a PerSerializationFormatCache that allows for caching within individual invocations to a format.
• Snapshot releases no longer include javadoc/source artifacts, nor deprecated native targets. This should reduce the overall publication size/burden.
• Make InputStreamReader and SourceUnicodeReader have dedicated single character read implementations rather than reading into an array of length 1.

1.0.1

Fixes:

• Fix LRU cache so that it properly evicts and maintains its size (#372).
• Fix reading larger from kotlinx.io sources (#373)
• Fix close in PseudoBufferedReader (#374), this is probably never called, but still incorrect. Thanks to @​m-sasha for reporting many smaller bugs #374 - #382
• Fix serialization of negative values for XmlFloat/XmlDouble and related serializers (#375).
• Fix escaping of 0x1f in KtXmlWriter (#376).
• Allow writing of BOM in CData content, but disallow the sentinal character (0xffff) per the XML standards. Also tidy the error messages (#377).
• Fix DomWriter.getPrefixes that was incorrectly handling checks for already declared prefixes (#379).
• Fix writing namespace attributes through XmlEvent.Attribute (#380). Note that the parsing code does not generate Attribute events, so most use cases are not hit by this bug.
• Fix getPrefix in StartElementEvent (#381). It used a property rather than parameter in the fallback.
• Fix reading unicode characters in kotlinx.io.Source reading as well

... (truncated)

Commits

• 72c0b59 Only remove sources artifacts for snapshots, not for main releases (not allow...
• 9ff1184 Add date for 1.0.1 release.
• eeb446f Prepare 1.0.1 release.
• 3bbc7b9 Merge branch 'refs/heads/dev'
• e6ccb64 Fix optionality annotation consistency in DOM2.
• af059fb Fix Float/Double serialization regression tests to handle the fact that JS ta...
• 66541c6 Remove targets no longer available on snapshot releases.
• aea4ebd Implement InputStreamReader.read() as optimized reading.
• b4460c5 Fix SourceUnicodeReader and InputStreamReader to handle unicode characters (F...
• d466bbe Fix SourceUnicodeReader to handle unicode characters.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)