Bump dependencies & resolves CVE-2026-25128

Author: LitoMore

.xo-config.json

@@ -29,17 +29,17 @@
 	"author": "LitoMore",
 	"license": "MIT",
 	"dependencies": {
-		"fast-xml-parser": "^5.0.8"
+		"fast-xml-parser": "^5.3.4"
 	},
 	"devDependencies": {
-		"@ava/typescript": "^5.0.0",
-		"@sindresorhus/tsconfig": "^7.0.0",
-		"@types/node": "^22.13.8",
-		"ava": "^6.2.0",
+		"@ava/typescript": "^6.0.0",
+		"@sindresorhus/tsconfig": "^8.1.0",
+		"@types/node": "^25.1.0",
+		"ava": "^6.4.1",
 		"c8": "^10.1.3",
-		"del-cli": "^6.0.0",
-		"eslint-plugin-import": "^2.31.0",
-		"typescript": "^5.8.2",
-		"xo": "^0.60.0"
+		"del-cli": "^7.0.0",
+		"eslint-plugin-import": "^2.32.0",
+		"typescript": "^5.9.3",
+		"xo": "^1.2.3"
 	}
 }

package.json

@@ -247,7 +247,7 @@ export const dataToFcpxml = (
 	};
 	/* eslint-enable @typescript-eslint/naming-convention */
 
-	const xml = builder.build(xmlData) as string;
+	const xml = builder.build(xmlData);
 	if (typeof xml === 'string') return xml;
 	/* c8 ignore start */
 	throw new Error('Failed to build XML');

source/convertions/fcpxml.ts

@@ -1,3 +1,3 @@
 export * from './convertions/_index.js';
 export {detectFormat, timeToMs, msToTime} from './convertions/_utils.js';
-export * from './types.js';
+export type * from './types.js';

source/index.ts

@@ -1,4 +1,10 @@
 import test from 'ava';
+import {
+	approxMatch,
+	sampleFcpxml,
+	sampleSrt,
+	sampleVtt,
+} from './_helpers.test.js';
 import {
 	fcpxmlToData,
 	fcpxmlToSrt,
@@ -10,12 +16,6 @@ import {
 	vttToFcpxml,
 	vttToSrt,
 } from 'subkit';
-import {
-	approxMatch,
-	sampleFcpxml,
-	sampleSrt,
-	sampleVtt,
-} from './_helpers.test.js';
 
 const srtText = await sampleSrt();
 const vttText = await sampleVtt();

test/index.test.ts

@@ -1,6 +1,6 @@
 import test from 'ava';
-import {detectFormat, msToTime, timeToMs} from 'subkit';
 import {sampleFcpxml, sampleSrt, sampleVtt} from './_helpers.test.js';
+import {detectFormat, msToTime, timeToMs} from 'subkit';
 
 const srtText = await sampleSrt();
 const vttText = await sampleVtt();

test/utils.test.ts

@@ -0,0 +1,39 @@
+const xoConfig = [
+	{
+		prettier: true,
+		rules: {
+			'sort-imports': [
+				'error',
+				{
+					ignoreCase: false,
+					ignoreDeclarationSort: true,
+					ignoreMemberSort: false,
+					memberSyntaxSortOrder: ['none', 'all', 'multiple', 'single'],
+					allowSeparatedGroups: false,
+				},
+			],
+			'import-x/no-named-as-default': 'off',
+			'import-x/extensions': 'off',
+			'import-x/order': [
+				'error',
+				{
+					groups: ['builtin', 'external', 'parent', 'sibling', 'index'],
+					alphabetize: {
+						order: 'asc',
+						caseInsensitive: true,
+					},
+					warnOnUnassignedImports: true,
+					'newlines-between': 'never',
+				},
+			],
+			'@typescript-eslint/consistent-type-imports': [
+				'error',
+				{
+					prefer: 'no-type-imports',
+				},
+			],
+		},
+	},
+];
+
+export default xoConfig;