From 82c39839399d2b0fa0d75d11ac4356e3139e92e7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 30 Mar 2026 10:44:31 -0300
Subject: [PATCH] Bump github.com/antchfx/xpath from 1.2.2 to 1.3.6 (#42633)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [github.com/antchfx/xpath](https://github.com/antchfx/xpath) from
1.2.2 to 1.3.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/antchfx/xpath/releases">github.com/antchfx/xpath's
releases</a>.</em></p>
<blockquote>
<h2>v1.3.6</h2>
<p>Merged PR:</p>
<ul>
<li><a
href="https://redirect.github.com/antchfx/xpath/issues/120">#120</a>(<a
href="https://github.com/mislav"><code>@​mislav</code></a>) - Fix
<code>last()</code> predicate on grouped expr.</li>
</ul>
<p>Fixed:</p>
<ul>
<li><a
href="https://redirect.github.com/antchfx/xpath/issues/121">#121</a></li>
</ul>
<h2>Release v1.3.5</h2>
<p>Merged PR:</p>
<ul>
<li><a
href="https://redirect.github.com/antchfx/xpath/issues/117">#117</a>(<a
href="https://github.com/mislav"><code>@​mislav</code></a>）- fix
<code>ancestor::</code> axes with position predicate.</li>
</ul>
<p>Fixed:</p>
<ul>
<li><a
href="https://redirect.github.com/antchfx/xpath/issues/113">#113</a> -
(fix <code>string()</code> function)</li>
</ul>
<h2>v1.3.4</h2>
<p>Merged PR:</p>
<ul>
<li><a
href="https://redirect.github.com/antchfx/xpath/issues/107">#107</a>(<a
href="https://github.com/Mrflatt"><code>@​Mrflatt</code></a>) - supports
Regexp feature in <code>replace()</code> function</li>
<li><a
href="https://redirect.github.com/antchfx/xpath/issues/111">#111</a>(<a
href="https://github.com/wjc4"><code>@​wjc4</code></a>) - Improve
<code>getHashCode</code> performance</li>
</ul>
<p>Fixed:</p>
<ul>
<li><a
href="https://redirect.github.com/antchfx/xpath/issues/109">#109</a></li>
</ul>
<h2>v1.3.3</h2>
<p>fix non-English predicate query <a
href="https://redirect.github.com/antchfx/xpath/issues/106">#106</a></p>
<h2>v1.3.2</h2>
<p>New Features:</p>
<ul>
<li>Supports Unicode chars for Non-English (PR <a
href="https://redirect.github.com/antchfx/xpath/issues/100">#100</a>)</li>
</ul>
<p>Bug Fixed:</p>
<ul>
<li><a
href="https://redirect.github.com/antchfx/xpath/issues/101">#101</a></li>
<li><a
href="https://redirect.github.com/antchfx/xpath/issues/102">#102</a></li>
<li><a
href="https://redirect.github.com/antchfx/xpath/issues/104">#104</a></li>
</ul>
<h2>v1.3.1</h2>
<ul>
<li>Merged PR <a
href="https://redirect.github.com/antchfx/xpath/issues/97">#97</a>.</li>
<li>Allows node-set numeric operator <code>+</code>, <code>-</code>,
<code>mod()</code>.<a
href="https://github.com/antchfx/xpath/commit/4b4638b370e898a9d10709464b8cd460b7dcfd0c">https://github.com/antchfx/xpath/commit/4b4638b370e898a9d10709464b8cd460b7dcfd0c</a></li>
<li><a
href="https://redirect.github.com/antchfx/xpath/issues/98">#98</a>,
Remove the duplicate element filter <a
href="https://github.com/antchfx/xpath/commit/5481aef473ee298d297387f5b69e2768df09e0c4">https://github.com/antchfx/xpath/commit/5481aef473ee298d297387f5b69e2768df09e0c4</a></li>
</ul>
<h2>v1.3.0</h2>
<ul>
<li>fixes <a
href="https://redirect.github.com/antchfx/xpath/issues/93">#93</a></li>
</ul>
<h3>New features:</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/antchfx/xpath/commit/afd4762cc342af56345a3fb4002a59281fcab494"><code>afd4762</code></a>
fix <a
href="https://redirect.github.com/antchfx/xpath/issues/121">#121</a></li>
<li><a
href="https://github.com/antchfx/xpath/commit/a8ced8f559cd68fc4aedfc87f21599d1190c0852"><code>a8ced8f</code></a>
Merge PR <a
href="https://redirect.github.com/antchfx/xpath/issues/120">#120</a></li>
<li><a
href="https://github.com/antchfx/xpath/commit/c92c3ebebbdd67f715161810f97ecfbcaa47921e"><code>c92c3eb</code></a>
Fix last() predicate on grouped expressions</li>
<li><a
href="https://github.com/antchfx/xpath/commit/3cbab9750ea36cbae6f967ebbf29b9eda0e841bf"><code>3cbab97</code></a>
Merge PR <a
href="https://redirect.github.com/antchfx/xpath/issues/119">#119</a></li>
<li><a
href="https://github.com/antchfx/xpath/commit/02c01b0b4051e7edd1bf40f3d595cc9143936aaa"><code>02c01b0</code></a>
Fix chained predicates on ancestor axis</li>
<li><a
href="https://github.com/antchfx/xpath/commit/511abd57bc74e9644fe27f4e52b559065e686e92"><code>511abd5</code></a>
Merge PR <a
href="https://redirect.github.com/antchfx/xpath/issues/117">#117</a></li>
<li><a
href="https://github.com/antchfx/xpath/commit/060b15493444a0e6c5a232022516e434818f7391"><code>060b154</code></a>
Fix positional predicate for the &quot;ancestor&quot; axis</li>
<li><a
href="https://github.com/antchfx/xpath/commit/8d50c252d867285812177ffd3ff0924104ffb1eb"><code>8d50c25</code></a>
fix <a
href="https://redirect.github.com/antchfx/xpath/issues/112">#112</a>，<a
href="https://redirect.github.com/antchfx/xpath/issues/113">#113</a></li>
<li><a
href="https://github.com/antchfx/xpath/commit/b9e198da9fb170a229c9c7e27d52e1a350636f4c"><code>b9e198d</code></a>
Merge PR <a
href="https://redirect.github.com/antchfx/xpath/issues/111">#111</a></li>
<li><a
href="https://github.com/antchfx/xpath/commit/fcb882bece30fe7d4d8f5069fed13f95a726e62f"><code>fcb882b</code></a>
improve getHashCode by removing fmt.Sprintf</li>
<li>Additional commits viewable in <a
href="https://github.com/antchfx/xpath/compare/v1.2.2...v1.3.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/antchfx/xpath&package-manager=go_modules&previous-version=1.2.2&new-version=1.3.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/fleetdm/fleet/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/go.mod b/go.mod
index 490c1a74c6..20529c47aa 100644
--- a/go.mod
+++ b/go.mod
@@ -203,7 +203,7 @@ require (
 	github.com/Microsoft/hcsshim v0.11.7 // indirect
 	github.com/ProtonMail/go-crypto v1.1.6 // indirect
 	github.com/akavel/rsrc v0.10.2 // indirect
-	github.com/antchfx/xpath v1.2.2 // indirect
+	github.com/antchfx/xpath v1.3.6 // indirect
 	github.com/antithesishq/antithesis-sdk-go v0.6.0-default-no-op // indirect
 	github.com/apache/thrift v0.22.0 // indirect
 	github.com/armon/circbuf v0.0.0-20190214190532-5111143e8da2 // indirect
diff --git a/go.sum b/go.sum
index df73433e90..f22a33dd81 100644
--- a/go.sum
+++ b/go.sum
@@ -91,8 +91,9 @@ github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be h1:9AeTilPcZAjCFI
 github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be/go.mod h1:ySMOLuWl6zY27l47sB3qLNK6tF2fkHG55UZxx8oIVo4=
 github.com/antchfx/xmlquery v1.3.14 h1:JVLQF1UIstQytN6MVES7D8gCiqIazZA+A2NWryaHwYk=
 github.com/antchfx/xmlquery v1.3.14/go.mod h1:yPRBXRdd2Xqz9c2Z61qvMKbK+u3NXXydp6nqEfw4VdI=
-github.com/antchfx/xpath v1.2.2 h1:fsKX4sHfxhsGpDMYjsvCmGC0EGdiT7XA0af/6PP6Oa0=
 github.com/antchfx/xpath v1.2.2/go.mod h1:i54GszH55fYfBmoZXapTHN8T8tkcHfRgLyVwwqzXNcs=
+github.com/antchfx/xpath v1.3.6 h1:s0y+ElRRtTQdfHP609qFu0+c6bglDv20pqOViQjjdPI=
+github.com/antchfx/xpath v1.3.6/go.mod h1:i54GszH55fYfBmoZXapTHN8T8tkcHfRgLyVwwqzXNcs=
 github.com/antithesishq/antithesis-sdk-go v0.6.0-default-no-op h1:kpBdlEPbRvff0mDD1gk7o9BhI16b9p5yYAXRlidpqJE=
 github.com/antithesishq/antithesis-sdk-go v0.6.0-default-no-op/go.mod h1:IUpT2DPAKh6i/YhSbt6Gl3v2yvUZjmKncl7U91fup7E=
 github.com/apache/thrift v0.22.0 h1:r7mTJdj51TMDe6RtcmNdQxgn9XcyfGDOzegMDRg47uc=