Bump fast-xml-parser and @aws-sdk/client-s3

[dependabot]

Bumps fast-xml-parser to 5.10.1 and updates ancestor dependency @aws-sdk/client-s3. These dependencies need to be updated together.

Updates fast-xml-parser from 5.9.3 to 5.10.1

Release notes

Sourced from fast-xml-parser's releases.

v5.10.1

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.10.0...v5.10.1

v5.10.0

What's Changed

• Bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in NaturalIntelligence/fast-xml-parser#849
• Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @​dependabot[bot] in NaturalIntelligence/fast-xml-parser#848

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.9.3...v5.10.0

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.10.1 / 2026-07-17

• fix: multiple DOCTYPE declarations.
• deps: @nodable/entities for treeshaking

5.10.0 / 2026-07-11

• upgrade:
  • xml-naming v0.3.0: cache support
  • PEM v1.6.2: sibling bug fix
  • is-unsafe v2.0.0: tree shaking

*5.9.3 / 2026-06-19

• update strnum

*5.9.2 / 2026-06-17

• dummy release to test changes in github action

*5.9.1 / 2026-06-17

• dummy release to test release from github action

*5.9.0 / 2026-06-15

• update strnum to 2.3.0
  • you can set hex, binary, enotation, infinity, unicode
• validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.

*5.8.0 / 2026-05-12

• integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility)
  • This will consider xml-version as well. '1.0' is default
• update strnum to 2.3.0
  • You can set octal and binary parsing which is bydeault off
• update fast-xml-builder to 1.2.0
  • can sanitize tag names if found invalid
  • fix format output

5.7.3 / 2006-05-05

• fix: alwaysCreateTextNode should create text node when attributes are present for self closing node
• fix stop node expression when ns prefix is removed (found by iruizsalinas)
• update XML Builder to 1.1.7
• mark addEntity deprecated

5.7.2 / 2026-04-25

• allow numerical external entity for backward compatibility

... (truncated)

Commits

• 2ce7191 5.10.1
• 4e1bb01 update for release
• ffd1269 deps: @​nodable/entities for treeshaking
• 4e546e0 fix: multiple DOCTYPE are not allowed
• 296b332 5.10.0
• 75f7565 update package guide
• 2d8d1d0 update details
• e58e4dd upgrade: xml-naming v0.3.0, PEM v1.6.2, is-unsafe v2.0.0
• 545e491 Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 (#848)
• 5ea8aa1 Bump actions/checkout from 6.0.3 to 7.0.0 (#849)
• See full diff in compare view

Updates @aws-sdk/client-s3 from 3.186.0 to 3.1095.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1095.0

3.1095.0(2026-07-24)

Chores

• codegen: sync for CBOR large map deser, event-streams exceptions, endpoints features, ChecksumStream fix (#8218) (bb564e57)
• core/protocols: JSON serde consistency testing and perf tuning (#8214) (8dac2514)

Documentation Changes

• client-odb: Documentation-only update to clarify the operation-specific valid values for the externalIdType field. (e1f6b3ae)

New Features

• clients: update client endpoints as of 2026-07-24 (f84113a7)
• client-neptune-graph: Update validations for Tag Keys and KMS Key ARNs. (9109ccf7)
• client-cognito-identity-provider: Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool. (fb3d908c)
• client-dynamodb: Endpoint test standardizations (2e9ccdb4)
• client-rtbfabric: The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead. (70e61b39)
• client-artifact: Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments. (e2d5f0e2)
• client-application-insights: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (20dd5886)
• core: update clock skew detection threshold and configs (#8189) (a2773d56)

Bug Fixes

• core/protocols: avoid Buffer.slice in return ByteJsonShapeSerializer.flush (#8222) (d4f2aeb5)

Tests

• core/httpAuthSchemes: fix test race condition (#8223) (a4dd3ded)

---

For list of updated packages, view updated-packages.md in assets-3.1095.0.zip

v3.1094.0

3.1094.0(2026-07-23)

New Features

• client-kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (1b65b736)
• client-sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod (9af2f247)
• client-gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping. (77119b6b)
• client-workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (ce7eec0f)
• client-bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (f47c152c)
• client-mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels. (024499b2)
• client-bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (635ae75d)
• client-appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (aa5d998d)
• client-redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement (ad898eba)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/client-s3

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/client-s3

3.1093.0 (2026-07-22)

Note: Version bump only for package @​aws-sdk/client-s3

3.1092.0 (2026-07-21)

Note: Version bump only for package @​aws-sdk/client-s3

3.1091.0 (2026-07-20)

Note: Version bump only for package @​aws-sdk/client-s3

3.1090.0 (2026-07-17)

Note: Version bump only for package @​aws-sdk/client-s3

3.1089.0 (2026-07-16)

... (truncated)

Commits

• 753d651 Publish v3.1095.0
• bb564e5 chore(codegen): sync for CBOR large map deser, event-streams exceptions, endp...
• c379112 Publish v3.1094.0
• 0f79b6a Publish v3.1093.0
• 80f0df5 Publish v3.1092.0
• a1269f7 Publish v3.1091.0
• eb268ed Publish v3.1090.0
• 60e8b54 Publish v3.1089.0
• 91723d2 docs(client-s3): Documentation update for removing the 30 day minimum restric...
• 73de389 Publish v3.1088.0
• Additional commits viewable in compare view

[dependabot]

Looks like these dependencies are up-to-date now, so this is no longer needed.