chore(deps): bump entities from 5.0.0 to 7.0.0

[dependabot]

Bumps entities from 5.0.0 to 7.0.0.

Release notes

Sourced from entities's releases.

v7.0.0

No changes in public API; a lot of internals changed though, for faster encoding & decoding and reduced memory usage.

Improvements

• Improve decode trie size by @​fb55 in fb55/entities#1944

Reduced length of the encoded trie by 21% for HTML (from 15,242 words (uint16) to 12075), by:

• Adding a semicolon flag on value nodes, which means semicolons don't have to be encoded anymore.
• Compacting dict keys: two keys are now stored in each word, instead of one
• Compacting runs of 3 or more characters: successive characters are now also stored as two characters per word

Also reduces the size of the encoded table by 32% (after the previous change) by encoding it as base64.

• Improve encode trie file size by @​fb55 in fb55/entities#1948

Encodes the encode trie as a string, with a simple parser turning it into the previous structure on load. This leads to a 44% decrease in file size (from 24,034 to 13,392 bytes).

• Speed up encodes using bitsets by @​fb55 in fb55/entities#1952

Uses bitmaps to replace regex when looking for ASCII code points that should be replaced with entities. Leads to a ~1.6x speed up for encodeHTML.

Miscellaneous

• Fix broken repository URL in package.json by @​ExplodingCabbage in fb55/entities#1919
• Use Biome by @​fb55 in fb55/entities#1953

New Contributors

• @​ExplodingCabbage made their first contribution in fb55/entities#1919

Full Changelog: fb55/entities@v6.0.1...v7.0.0

v6.0.1

What's Changed

• fix: add types for old node entry points by @​43081j in fb55/entities#1861

Full Changelog: fb55/entities@v6.0.0...v6.0.1

v6.0.0

Features

• Improved bundler tree shaking by adding pure annotations by @​Gravitonic in fb55/entities#1501
• BREAKING: Simplified deep import paths, to make entities work in old NodeJS versions by @​fb55 in fb55/entities#1531
  • If you are using deep imports, you will have to update them. Instead of importing entities/dist/decode.js, import entities/decode. The same applies to escape.
• Automated publishes by @​fb55 in fb55/entities#1532
  • entities is now available on both npm and JSR
• Enabled isolated declarations by @​fb55 in fb55/entities#1522

... (truncated)

Commits

• 45131ad 7.0.0
• 8b24a1a chore: publish on tag push
• 9543950 chore: simplify publish workflow
• 758a0a0 chore: Use Biome (#1953)
• 1cf044d chore(deps-dev): Bump vitest from 2.1.8 to 3.2.4 (#1932)
• 4399541 Speed up encodes using bitsets (#1952)
• b30708d chore(deps): Bump github/codeql-action from 3.29.11 to 3.30.1 (#1951)
• 0ff47b4 Improve encode trie file size (#1948)
• 740dc46 chore(deps-dev): Bump @​types/node from 24.3.0 to 24.3.1 (#1947)
• 8747486 chore(deps-dev): Bump typedoc from 0.28.10 to 0.28.12 (#1942)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.