# Continuity ledger (per-branch)

## Human intent (must not be overwritten)

- Resolve Dependabot alert https://github.com/giselles-ai/giselle/security/dependabot/174
  (GHSA-gh4j-gqv2-49f6 / CVE-2026-41650): fast-xml-parser XMLBuilder does
  not escape `-->` in comments or `]]>` in CDATA, enabling XML/CDATA
  injection. Patched in 5.7.0.

## Goal (incl. success criteria)

- Lockfile carries `fast-xml-parser >= 5.7.0` only; alert closes.

## Constraints/Assumptions

- Single vulnerable copy at `5.5.12` (transitive via `@aws-sdk/xml-builder`
  used by `@aws-sdk/client-s3` and credential providers).
- The repo already pinned `fast-xml-parser` via `pnpm.overrides` to satisfy
  earlier security alerts (5.3.6 -> 5.5.12 chain visible in git log). Same
  override slot, just bumped to a patched version.
- We don't appear to use `XMLBuilder` from this package directly in our own
  code; the AWS SDK uses it for request signing. Direct exploit risk is low,
  but the alert applies because of version range alone.

## Key decisions

- Bump existing override `"fast-xml-parser": "5.5.12"` -> `"5.7.2"` (latest
  5.7.x). 5.7.0 is the minimum patched version; choosing 5.7.2 picks up
  follow-up bugfixes.

## State

- Lockfile collapsed to a single `fast-xml-parser@5.7.2`.
- `pnpm format / build-sdk / check-types / test` all green.

## Done

- package.json: pinned override 5.5.12 -> 5.7.2.
- pnpm-lock.yaml: regenerated; only `fast-xml-parser@5.7.2` remains.

## Now

- Commit, push, open PR.

## Next

- Watch CI; License Compliance workflow refreshes `docs/packages-license.md`
  on this branch automatically.

## Open questions (UNCONFIRMED if needed)

- None.

## Working set (files/ids/commands)

- package.json
- pnpm-lock.yaml
- Alert: https://github.com/giselles-ai/giselle/security/dependabot/174
- Advisory: https://github.com/advisories/GHSA-gh4j-gqv2-49f6
