chore(deps): bump github.com/beevik/etree from 1.5.0 to 1.7.0 in /core

[dependabot]

Bumps github.com/beevik/etree from 1.5.0 to 1.7.0.

Release notes

Sourced from github.com/beevik/etree's releases.

Release 1.7.0

Breaking changes

• To address a security issue, it was necessary to add a MaxDepth option to ReadSettings to limit the depth of XML trees during parsing. A generous default value of 1024 was chosen to avoid breaking most existing code. However, if your code is processing XML hierarchies with a depth greater than 1024, you will need to assign your Document a ReadSettings that has a MaxDepth set to a higher value.

Security Fixes

• Limited the depth of XML trees processed by all ReadFrom functions during parsing.
• Fixed a CompilePath index-out-of-range panic that could be caused by a missing path filter key.
• Sanitized the contents of XML text, comment, ProcInst and Directive tokens provided by the user.

Release v1.6.0

Changes

• Added new iterator versions of existing functions that return slices of Element pointers: ChildElementsSeq, SelectElementsSeq, FindElementsSeq, and FindElementsPathSeq.
• Improved performance of functions that return a single element.
• Because of its use of iterators, this package now requires go 1.23 or later.

Release v1.5.1

Fixes

• Fixed a bug in InsertChildAt.

Changelog

Sourced from github.com/beevik/etree's changelog.

Release 1.7.0

Changes

Breaking changes

• To address a security issue, it was necessary to add a MaxDepth option to ReadSettings to limit the depth of XML trees during parsing. A generous default value of 1024 was chosen to avoid breaking most existing code. However, if your code is processing XML hierarchies with a depth greater than 1024, you will need to assign your Document a ReadSettings that has a MaxDepth set to a higher value.

Security Fixes

• Limited the depth of XML trees processed by all ReadFrom functions during parsing.
• Fixed a CompilePath index-out-of-range panic that could be caused by a missing path filter key.
• Sanitized the contents of XML text, comment, ProcInst and Directive tokens provided by the user.

Release 1.6.0

Changes

• Added new iterator versions of existing functions that return slices of Element pointers: ChildElementsSeq, SelectElementsSeq, FindElementsSeq, and FindElementsPathSeq.
• Improved performance of functions that return a single element.
• Because of its use of iterators, this package now requires go 1.23 or later.

Release 1.5.1

Fixes

• Fixed a bug in InsertChildAt.

Commits

• 51e79d6 Release v1.7.0
• 236bb93 Document duplication bug fix
• 1215e0a Enforce maximum XML tree depth during parsing
• 936bc58 Sanitize XML contents provided by callers
• 62d8a79 Fix CompilePath index-out-of-range panic
• 4032e04 Release v1.6.0
• 23f40b1 Update README
• df3ff12 Update github actions to use go 1.23+
• ee27c8e Add iterator versions of element queries
• b602ec3 Release v1.5.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)