Upgrade checkout refs and docs to v7 (#779)

* chore: upgrade checkout/setup-go refs to v7

* chore: commit remaining dependency, license, and dist updates

.github/workflows/microsoft-validation.yml

@@ -20,7 +20,7 @@ jobs:
         os: [ubuntu-latest, windows-latest, macos-latest]
         go-version: ['1.25', '1.24']
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Setup Microsoft build of Go ${{ matrix.go-version }}
         uses: ./
@@ -59,7 +59,7 @@ jobs:
     env:
       GO_DOWNLOAD_BASE_URL: 'https://aka.ms/golang/release/latest'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Setup Microsoft build of Go via environment variable
         uses: ./
@@ -95,7 +95,7 @@ jobs:
           - os: macos-latest
             architecture: arm64
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Setup Microsoft build of Go with architecture
         uses: ./
@@ -116,7 +116,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Setup Microsoft build of Go with caching
         uses: ./

.github/workflows/publish-immutable-actions.yml

@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checking out
-        uses: actions/checkout@v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Publish
         id: publish
         uses: actions/publish-immutable-action@v0.0.4

.github/workflows/versions.yml

@@ -20,7 +20,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Setup Go Stable
         uses: ./
         with:
@@ -35,7 +35,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Setup Go oldStable
         uses: ./
         with:
@@ -57,7 +57,7 @@ jobs:
           - os: macos-latest-large
             architecture: x32
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Setup Go ${{ matrix.version }} ${{ matrix.architecture }}
         uses: ./
         with:
@@ -82,7 +82,7 @@ jobs:
             go: 1.23.2
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: setup-go ${{ matrix.go }}
         uses: ./
@@ -101,7 +101,7 @@ jobs:
         os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large]
         go-version: ['1.20', '1.21', '1.22', '1.23']
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Setup Go and check latest
         uses: ./
         with:
@@ -117,7 +117,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Setup Go and check latest
         uses: ./
         with:
@@ -133,7 +133,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Setup Go and check latest
         uses: ./
         with:
@@ -149,7 +149,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Setup Go and check latest
         uses: ./
         with:
@@ -165,7 +165,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-large]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Setup Go from .go-version file
         uses: ./
         with:
@@ -183,7 +183,7 @@ jobs:
         go: [1.20.14, 1.21.10, 1.22.8, 1.23.2]
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: setup-go ${{ matrix.go }}
         uses: ./
@@ -203,7 +203,7 @@ jobs:
         go: [1.11.12]
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: setup-go ${{ matrix.go }}
         uses: ./
@@ -231,7 +231,7 @@ jobs:
           - os: macos-latest-large
             architecture: x64
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Setup Go and check latest
         uses: ./
         with:

.github/workflows/windows-validation.yml

@@ -19,7 +19,7 @@ jobs:
         cache: [false, true]
         go: [1.20.1]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: 'Setup ${{ matrix.cache }}, cache: ${{ matrix.go }}'
         uses: ./
@@ -88,7 +88,7 @@ jobs:
       matrix:
         cache: [false, true]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: 'Setup default go, cache: ${{ matrix.cache }}'
         uses: ./
@@ -121,7 +121,7 @@ jobs:
         cache: [false]
         go: [1.20.1]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: 'Setup ${{ matrix.go }}, cache: ${{ matrix.cache }}'
         uses: ./

.licenses/npm/@nodable/entities.dep.yml

@@ -1,6 +1,6 @@
 ---
 name: "@nodable/entities"
-version: 2.2.0
+version: 3.0.0
 type: npm
 summary: Entity parser for XML, HTML, External entites with security and NCR control
 homepage:

.licenses/npm/brace-expansion-1.1.16.dep.yml

@@ -1,6 +1,6 @@
 ---
 name: brace-expansion
-version: 1.1.15
+version: 1.1.16
 type: npm
 summary: Brace expansion as known from sh/bash
 homepage: https://github.com/juliangruber/brace-expansion

.licenses/npm/brace-expansion-5.0.8.dep.yml

@@ -1,6 +1,6 @@
 ---
 name: brace-expansion
-version: 5.0.6
+version: 5.0.8
 type: npm
 summary: Brace expansion as known from sh/bash
 homepage:

.licenses/npm/fast-xml-parser.dep.yml

@@ -1,6 +1,6 @@
 ---
 name: fast-xml-parser
-version: 5.9.3
+version: 5.10.1
 type: npm
 summary: Validate XML, Parse XML, Build XML without C/C++ based libraries
 homepage:

.licenses/npm/is-unsafe.dep.yml

@@ -1,6 +1,6 @@
 ---
 name: is-unsafe
-version: 1.0.1
+version: 2.0.0
 type: npm
 summary: Zero-dependency, DOM-free, pure predicate for detecting unsafe strings across
   HTML, XML, SVG, SQL, SHELL, and REGEX contexts

.licenses/npm/path-expression-matcher.dep.yml

@@ -1,6 +1,6 @@
 ---
 name: path-expression-matcher
-version: 1.6.0
+version: 1.6.2
 type: npm
 summary: Efficient path tracking and pattern matching for XML/JSON parsers
 homepage: https://github.com/NaturalIntelligence/path-expression-matcher#readme

.licenses/npm/xml-naming-0.3.0.dep.yml

@@ -0,0 +1,35 @@
+---
+name: xml-naming
+version: 0.3.0
+type: npm
+summary: Validates XML name productions — Name, NCName, QName, NMToken, NMTokens —
+  for XML 1.0 and 1.1
+homepage:
+license: mit
+licenses:
+- sources: LICENSE
+  text: |
+    MIT License
+
+    Copyright (c) 2026 Natural Intelligence
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all
+    copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.
+- sources: README.md
+  text: MIT
+notices: []

README.md

@@ -35,7 +35,7 @@ See [action.yml](action.yml).
 
 <!-- start usage -->
 ```yaml
-- uses: actions/setup-go@v6
+- uses: actions/setup-go@v7
   with:
     # Version or version range of Go to use
     go-version: '1.23'
@@ -70,8 +70,8 @@ See [action.yml](action.yml).
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.25' # The Go version to download (if necessary) and use.
   - run: go run hello.go

docs/advanced-usage.md

@@ -23,8 +23,8 @@ For repeatable builds, specify the **exact major, minor, and patch version** (su
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.25.5'
   - run: go run hello.go
@@ -36,8 +36,8 @@ You can specify **only a major and minor version** if you are okay with the most
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.25'
   - run: go run hello.go
@@ -53,8 +53,8 @@ Download and use beta or RC Go versions as needed.
 ```yaml
 # RC version
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.25.0-rc.2'
   - run: go version
@@ -63,8 +63,8 @@ steps:
 ```yaml
 # Beta version
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.19.0-beta.1'
   - run: go version
@@ -80,8 +80,8 @@ If `oldstable` is provided, the action resolves it to the latest patch release o
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: 'stable'
   - run: go run hello.go
@@ -89,8 +89,8 @@ steps:
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: 'oldstable'
   - run: go run hello.go
@@ -100,8 +100,8 @@ You can also use **SemVer's version range syntax**, for instance:
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '^1.25.1'
   - run: go version
@@ -109,8 +109,8 @@ steps:
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '>=1.24.0-rc.1'
   - run: go version
@@ -129,9 +129,9 @@ jobs:
         go: [ '1.24', '1.25' ]
     name: Go ${{ matrix.go }} sample
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Setup go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: ${{ matrix.go }}
       - run: go run hello.go
@@ -154,9 +154,9 @@ jobs:
           - os: windows-latest
             go: '1.25'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Setup go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: ${{ matrix.go }}
       - run: go run hello.go
@@ -170,8 +170,8 @@ If both the `go-version` and the `go-version-file` inputs are provided then the
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version-file: 'path/to/go.mod'  # Read Go version from go.mod
   - run: go version
@@ -187,8 +187,8 @@ steps:
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version-file: '.go-version' # Read Go version from .go-version
   - run: go version
@@ -196,8 +196,8 @@ steps:
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version-file: '.tool-versions' # Read Go version from .tool-versions
   - run: go version
@@ -205,8 +205,8 @@ steps:
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version-file: 'go.work' # Read Go version from go.work
   - run: go version
@@ -228,8 +228,8 @@ want the most up-to-date Go version to always be used. It supports major (e.g.,
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.25'
       check-latest: true
@@ -242,8 +242,8 @@ steps:
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.25'
       cache-dependency-path: subdir/go.sum
@@ -256,8 +256,8 @@ steps:
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.25'
       cache-dependency-path: '**/go.sum'
@@ -266,8 +266,8 @@ steps:
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.25'
       cache-dependency-path: |
@@ -288,8 +288,8 @@ env:
 steps:
   - run: echo "$GOOS $GOARCH" > env.txt
 
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.25'
       cache-dependency-path: |
@@ -306,8 +306,8 @@ Besides dependencies, the action can also cache build outputs (the [`GOCACHE`](h
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.25'
       cache-dependency-path: |
@@ -328,10 +328,10 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Setup go
         id: setup-go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: '1.25.5'
           cache: false
@@ -394,8 +394,8 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-go@v6
+      - uses: actions/checkout@v7
+      - uses: actions/setup-go@v7
         id: go124
         with:
           go-version: '^1.24'
@@ -411,8 +411,8 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-go@v6
+      - uses: actions/checkout@v7
+      - uses: actions/setup-go@v7
         id: go124
         with:
           go-version: '1.24'
@@ -430,8 +430,8 @@ When a custom base URL is provided, the action skips the `actions/go-versions` m
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.25'
       go-download-base-url: 'https://aka.ms/golang/release/latest'
@@ -445,8 +445,8 @@ env:
   GO_DOWNLOAD_BASE_URL: 'https://aka.ms/golang/release/latest'
 
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.25'
   - run: go version
@@ -462,8 +462,8 @@ If your custom download source requires authentication, the `token` input is for
 
 ```yaml
 steps:
-  - uses: actions/checkout@v6
-  - uses: actions/setup-go@v6
+  - uses: actions/checkout@v7
+  - uses: actions/setup-go@v7
     with:
       go-version: '1.25'
       go-download-base-url: 'https://private-mirror.example.com/golang'
@@ -485,7 +485,7 @@ If that fails as well the action will try to download versions directly from [go
 If that fails as well you can get a higher rate limit with [generating a personal access token on github.com](https://github.com/settings/tokens/new) and passing it as the `token` input to the action:
 
 ```yaml
-uses: actions/setup-go@v6
+uses: actions/setup-go@v7
 with:
   token: ${{ secrets.GH_DOTCOM_TOKEN }}
   go-version: '1.25'

package-lock.json

@@ -75,9 +75,9 @@
       "license": "MIT"
     },
     "node_modules/@actions/cache/node_modules/brace-expansion": {
-      "version": "1.1.15",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.15.tgz",
-      "integrity": "sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==",
+      "version": "1.1.16",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.16.tgz",
+      "integrity": "sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==",
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^1.0.0",
@@ -1627,9 +1627,9 @@
       }
     },
     "node_modules/@nodable/entities": {
-      "version": "2.2.0",
-      "resolved": "https://registry.npmjs.org/@nodable/entities/-/entities-2.2.0.tgz",
-      "integrity": "sha512-9uGyhaQavEUMC8AIddIjau4NsnsXhou+j5sBAGojCM1oxmQpVKTWR/9JxABD6UAv12vpIms55fPZKFQEhG6uBg==",
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/@nodable/entities/-/entities-3.0.0.tgz",
+      "integrity": "sha512-8L9xFeTYKhm49xfIypoe2W5wV1m/3Z58kT+7kR9A8OyFxcPduI4VmxaUMQyKYrRjUoLLSXv6EKKID5Tvj9cUVw==",
       "funding": [
         {
           "type": "github",
@@ -2234,9 +2234,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2251,9 +2248,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2268,9 +2262,6 @@
         "loong64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2285,9 +2276,6 @@
         "loong64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2302,9 +2290,6 @@
         "ppc64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2319,9 +2304,6 @@
         "riscv64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2336,9 +2318,6 @@
         "riscv64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2353,9 +2332,6 @@
         "s390x"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2370,9 +2346,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2387,9 +2360,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2746,15 +2716,15 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "5.0.6",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.6.tgz",
-      "integrity": "sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==",
+      "version": "5.0.8",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.8.tgz",
+      "integrity": "sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==",
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^4.0.2"
       },
       "engines": {
-        "node": "18 || 20 || >=22"
+        "node": "20 || >=22"
       }
     },
     "node_modules/browserslist": {
@@ -3650,9 +3620,9 @@
       }
     },
     "node_modules/fast-xml-parser": {
-      "version": "5.9.3",
-      "resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-5.9.3.tgz",
-      "integrity": "sha512-brCNCeScma/kqa54J4PIDriSSSLssRkuYaUCpvHJulGc3HGI/xxKUCTDcYkAdqJsyb//ydpbxecjC3hB9+tb/g==",
+      "version": "5.10.1",
+      "resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-5.10.1.tgz",
+      "integrity": "sha512-IEMIf7298kXuZSRFoGfMYrl7is8LpavODgbNz1cwIudv7KwVFnuU+UsMporfq6PD6aXSlawZlARiA3UywCTfMw==",
       "funding": [
         {
           "type": "github",
@@ -3661,17 +3631,32 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "@nodable/entities": "^2.2.0",
+        "@nodable/entities": "^3.0.0",
         "fast-xml-builder": "^1.2.0",
-        "is-unsafe": "^1.0.1",
-        "path-expression-matcher": "^1.5.0",
+        "is-unsafe": "^2.0.0",
+        "path-expression-matcher": "^1.6.2",
         "strnum": "^2.4.1",
-        "xml-naming": "^0.1.0"
+        "xml-naming": "^0.3.0"
       },
       "bin": {
         "fxparser": "src/cli/cli.js"
       }
     },
+    "node_modules/fast-xml-parser/node_modules/xml-naming": {
+      "version": "0.3.0",
+      "resolved": "https://registry.npmjs.org/xml-naming/-/xml-naming-0.3.0.tgz",
+      "integrity": "sha512-ghig2TBE/H11aOVgmahA3MhimvkBr6JIYknH/Dhdk10nXwdbIqBJsbfMxpvFPG8bAw77gN29aQWvKpmVoPlvPQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/NaturalIntelligence"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=16.0.0"
+      }
+    },
     "node_modules/fb-watchman": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/fb-watchman/-/fb-watchman-2.0.2.tgz",
@@ -3889,9 +3874,9 @@
       "license": "MIT"
     },
     "node_modules/glob/node_modules/brace-expansion": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.1.tgz",
-      "integrity": "sha512-WR1cURNjuvBLMZBMbqM0UoE+WAfdUcEV1ccD8PVBVOI+Z3ND4+SZbN8RsfT2bMuG1qwz5RFvPukSZm5fF2D5eA==",
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.2.tgz",
+      "integrity": "sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -4146,9 +4131,9 @@
       }
     },
     "node_modules/is-unsafe": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/is-unsafe/-/is-unsafe-1.0.1.tgz",
-      "integrity": "sha512-CLK2+VdgERgD96EYm5lUQssZYlRg2tkZnbsxZoacmSiRxiFJ4Nk4SzjCl+Ur+v3kXIY9dTIdb3IH22y1mZ56LA==",
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/is-unsafe/-/is-unsafe-2.0.0.tgz",
+      "integrity": "sha512-2LdV822R+wmI86unXA93WCFpL6g+av8ynWk0nrHyJqGop5VoocYsSLFgN8jrfalT6iGeLNM4KXuVSsULP53kEA==",
       "funding": [
         {
           "type": "github",
@@ -5293,9 +5278,9 @@
       }
     },
     "node_modules/path-expression-matcher": {
-      "version": "1.6.0",
-      "resolved": "https://registry.npmjs.org/path-expression-matcher/-/path-expression-matcher-1.6.0.tgz",
-      "integrity": "sha512-e5y7RCLHKjemsgQ4eqGJtPyr10ILz25HO7flzxhTV8bgvd5yHx98DGtCAtbVW9f2TqnYI/gEVZd+vz7snrdPTw==",
+      "version": "1.6.2",
+      "resolved": "https://registry.npmjs.org/path-expression-matcher/-/path-expression-matcher-1.6.2.tgz",
+      "integrity": "sha512-enSlaiat05iasnzmgNxRj8reFdj3puY2QpNgP1aPIaVfT6nn9ICuPoFlKHk8EN22HcwewshO+mN2DGbkCEOtqQ==",
       "funding": [
         {
           "type": "github",
@@ -5972,9 +5957,9 @@
       "license": "MIT"
     },
     "node_modules/test-exclude/node_modules/brace-expansion": {
-      "version": "1.1.15",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.15.tgz",
-      "integrity": "sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==",
+      "version": "1.1.16",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.16.tgz",
+      "integrity": "sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {