Bump github.com/beevik/etree from 1.6.0 to 1.7.0

[dependabot]

Bumps github.com/beevik/etree from 1.6.0 to 1.7.0.

Release notes

Sourced from github.com/beevik/etree's releases.

Release 1.7.0

Breaking changes

• To address a security issue, it was necessary to add a MaxDepth option to ReadSettings to limit the depth of XML trees during parsing. A generous default value of 1024 was chosen to avoid breaking most existing code. However, if your code is processing XML hierarchies with a depth greater than 1024, you will need to assign your Document a ReadSettings that has a MaxDepth set to a higher value.

Security Fixes

• Limited the depth of XML trees processed by all ReadFrom functions during parsing.
• Fixed a CompilePath index-out-of-range panic that could be caused by a missing path filter key.
• Sanitized the contents of XML text, comment, ProcInst and Directive tokens provided by the user.

Changelog

Sourced from github.com/beevik/etree's changelog.

Release 1.7.0

Changes

Breaking changes

• To address a security issue, it was necessary to add a MaxDepth option to ReadSettings to limit the depth of XML trees during parsing. A generous default value of 1024 was chosen to avoid breaking most existing code. However, if your code is processing XML hierarchies with a depth greater than 1024, you will need to assign your Document a ReadSettings that has a MaxDepth set to a higher value.

Security Fixes

• Limited the depth of XML trees processed by all ReadFrom functions during parsing.
• Fixed a CompilePath index-out-of-range panic that could be caused by a missing path filter key.
• Sanitized the contents of XML text, comment, ProcInst and Directive tokens provided by the user.

Commits

• 51e79d6 Release v1.7.0
• 236bb93 Document duplication bug fix
• 1215e0a Enforce maximum XML tree depth during parsing
• 936bc58 Sanitize XML contents provided by callers
• 62d8a79 Fix CompilePath index-out-of-range panic
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.