Skip to content

fix(deps): update dependency htmlparser2 to v12#5465

Open
renovate[bot] wants to merge 1 commit intodevelopfrom
renovate/htmlparser2-12.x
Open

fix(deps): update dependency htmlparser2 to v12#5465
renovate[bot] wants to merge 1 commit intodevelopfrom
renovate/htmlparser2-12.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 24, 2026

This PR contains the following updates:

Package Change Age Confidence
htmlparser2 ^3.10.0 → ^12.0.0 age confidence

Release Notes

fb55/htmlparser2 (htmlparser2)

v12.0.0

Compare Source

What's Changed

This release aligns HTML parsing with the WHATWG spec Almost all changes are to HTML mode only — XML mode is unaffected unless noted.

Raw-text & RCDATA tags

  • <iframe>, <noembed>, <noframes>, and <plaintext> are now raw-text tags, their content is no longer parsed as HTML
  • <textarea> now decodes entities like <title> already did
  • Self-closing <script/>, <style/>, etc. now enter their raw-text state (the / is ignored per spec) unless recognizeSelfClosing is enabled

SVG & MathML

  • Tag names inside <svg> are case-adjusted per spec (foreignObject, clipPath, etc.)
  • CDATA sections inside foreign content are treated as text
  • Special-tag detection is disabled inside foreign content
  • Stray </svg> / </math> no longer corrupt the parser's context tracking

Comments & declarations

  • <!-->, <!--->, <!->, <!> now parse as valid comments per spec
  • <?…> and non-DOCTYPE <!…> in HTML mode emit bogus comments instead of being silently dropped
  • <!DOCTYPEhtml> (no space) is recognized as a DOCTYPE
  • Unclosed comments, <!DOCTYPE, <?…, <![CDATA[… at EOF emit the correct token type

Implicit open/close

  • <h1>–<h6> implicitly close other headings
  • <a> closes a previous <a>
  • Nested <form> is ignored when one is already open
  • <image> is rewritten to <img> outside foreign content
  • </> is silently ignored instead of emitted as text

Other fixes

  • Fixed reset() not clearing attribute state, which could leak data across parseComplete() calls

#​2387

Full Changelog: fb55/htmlparser2@v11.0.0...v12.0.0

v11.0.0

Compare Source

Breaking Changes

  • The module is now ESM only #​2381
    • CommonJS require() is not supported in legacy environment anymore. Use import instead.
    • The minimum Node.js version is now 20.19.0.
  • Dependencies have been bumped to their latest major versions: domhandler v6, domutils v4, domelementtype v3, entities v8.

Features

  • Added WebWritableStream for the Web Streams API, enabling direct piping from fetch() response bodies into the parser #​2376

Bug Fixes

  • Comments now accept --!> as a closing sequence per the HTML spec, and <!--> is recognized as an empty comment in HTML mode #​2382
  • XML processing instructions (<?xml ... ?>) now require the full ?> closing sequence instead of just > #​2382
  • Fixed reset() not clearing isSpecial and sequenceIndex state, which could cause incorrect parsing after reuse #​2382
  • Fixed XML comment parsing: <!--> is no longer treated as a complete comment in xmlMode #​2383

Other Changes

  • Expanded README with full API reference, parser options, events, and practical examples #​2384

New Contributors

Full Changelog: fb55/htmlparser2@v10.1.0...v11.0.0

v10.1.0

Compare Source

What's Changed

  • entities was bumped from 6.0.1 to 7.0.1, bringing size & speed improvements #​2215
  • Test files are no longer shipped in the published module 72da671

New Contributors

Full Changelog: fb55/htmlparser2@v10.0.0...v10.1.0

v10.0.0

Compare Source

v9.1.0

Compare Source

Fixes

Features

v9.0.0

Compare Source

Breaking Changes

  • The tokenizer now uses the EntityDecoder from the entities module #​1480
    • Parsing of entities in attributes is now aligned with the HTML spec, and some inputs will produce different results. Eg. in <a href='&amp=boo'> the attribute value won't be modified any more.
    • The ontextentity tokenizer callback now has an endIndex argument; if you use the tokenizer directly, make sure indices are still the same.
  • Stacks inside the parser have been reversed. #​1511

Features

  • Added a createDocumentStream function, analogous to createDomStream (which is now deprecated) #​1510

Full Changelog: fb55/htmlparser2@v8.0.2...v9.0.0

v8.0.2

Compare Source

Bug Fixes

Other changes

New Contributors

Full Changelog: fb55/htmlparser2@v8.0.1...v8.0.2

v8.0.1

Compare Source

  • Added missing WritableStream export in the package.json 6923fca

v8.0.0

Compare Source

Breaking

  • The deprecated FeedHandler class has been removed #​1166
  • Typescript >= 4.5 is now required; see #​1242
  • The types from domhandler and domutils have changed, the deprecated normalizeWhitespace option was removed #​1164
  • The parser was updated to no longer concatenate strings. This led to several changes of internal interfaces. #​1045
    • This reduces the memory overhead when parsing streams, and avoids copying memory.
    • Breaking if you were previously extending internals.

Features

  • htmlparser2 is now a dual CommonJS & ESM module #​1165

Other changes

New Contributors

Full Changelog: fb55/htmlparser2@v7.2.0...v8.0.0

v7.2.0

Compare Source

What's Changed

Fixes:

Docs

Refactors:

The refactors lead to a combined ~5% speed-up.

New Contributors

Full Changelog: fb55/htmlparser2@v7.1.2...v7.2.0

v7.1.2

Compare Source

v7.1.1

Compare Source

  • Fixed a bug where implied close tags would be misreported (#​933) 903fb43
  • Fixed endIndex of text events being off by 1 (#​932) 78ef1b7

v7.1.0

Compare Source

Features:

Fixes:

  • htmlparser2@&#8203;7.0.0 changed how indices were computed. Unfortunately, a lot of edge-cases weren't handled correctly. This version fixes this.
    • refactor: Fix how indices are computed, add attrib indices (#​929) 28c162b
    • fix(parser): Fix indices for end, CDATA, add indices to tests (#​928) 4e25252
    • fix(parser): Don't override position for implied opening tags (#​917) fac221d
    • fix(parser): Index of closing tag was misaligned (#​913) 04c411c
  • .pause would lead to data being wrongfully discarded (#​927) 78af88d
  • The tokenizer would still emit some data after an error (#​923) 08b2040
  • Issue in foreign content: The tag name foreignObject will always be lowercased in HTML e852205

Refactors:

  • refactor(feeds): Move getFeed to domutils (#​931) f10dc03
  • refactor(tokenizer): Use explicit empty buffer if we have reached the end 9c30fe6
  • chore(tests): Add test for error without a listener 0eb0067
  • chore(tests): Use proxies to collect events (#​920) a2b0bf3
  • chore(tests): Move stream tests into WritableStream.spec (#​916) da67eba
  • refactor(tokenizer): Remove unused branches, improve test coverage (#​914) a2eae51
  • docs(readme): Update benchmark results d45fc82

v7.0.0

Compare Source

htmlparser2@&#8203;7.0.0 changes a lot of internals, resulting in an 20% overall performance improvement in AndreasMadsen's htmlparser-benchmark.

Breaking changes:

  • Fixed how start & end index positions are calculated (#​910) 5ab080e
    • Some indices, especially end indices, will now have changed. Most importantly, end indices will now always be greater or equal than start indices (whoops!).

Features:

Refactors:

  • Use a trie to decode HTML & XML entities in the tokenizer (#​863) 9a47a55
    • Leads to large speed-ups when dealing with entities.
  • Iterate over char codes in the tokenizer (#​894) f5aed75
    • Improved tokenizer performance by ~40%.
  • Use Map for openImpliesClose in the parser (#​911) 39a8109
  • Moved logic of FeedHandler to a function (#​912) 3a672ff

v6.1.0

Compare Source

Features:

Fixes:

Upgrades:

v6.0.1

Compare Source

v6.0.0

Compare Source

Breaking:

  • Bump domhandler, domutils 4dd4233 0d278fd
    • The new version of domhandler now comes with an actual root element for the document. This might break tests in a few cases. See the domhandler release notes for more details.
  • Make some private properties actually private 1c71e60

Features:

  • Add a parseDocument method 4653f23
    • This returns the root node of the document, instead of an array of the first nodes. You likely want to use this instead of the now deprecated getDOM method.
  • Improve docs df7ea98 1ce1d3b 0437d9c

Minor:

  • FeedHandler: Slightly restructure code b6b4382

v5.0.1

Compare Source

Also pulls in a new version of the entities module, which features more compact entity maps.

v5.0.0

Compare Source

Breaking changes:

  • Default the decodeEntities option to true 8ac01e0
  • Removes underscores in front of many private properties & methods. 6e296d2
  • Removes EVENTS, WritableStream and CollectingHandler exports from module import. The latter two are still part of the module, but now have to be imported explicitly. 6e296d2
  • The parser no longer extends EventEmitter f30f13c
  • HTML <title> tag content is now processed as text (#​483 by @​billneff79) 0189e56

Features:

Bug Fixes:

Diverse:

Thanks to everyone that contributed to this release!

Commit Range:

v4.1.0

Compare Source

  • Don't fail when parsing <__proto__> (fixes #​387)
  • Add types field to package.json
  • Update dependencies

v4.0.0

Compare Source

  • Port to TypeScript, Jest
  • Remove the Stream and ProxyHandler exports
  • Order some conditionals in Tokenizer by their likelihood to be hit
  • Fix implicit closing of certain tags — @​voithos
  • Fix: options.Tokenizer modified outer scope — @​thorn0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Mar 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants