build(deps): Bump entities from 8.0.0 to 8.1.0

[dependabot]

Bumps entities from 8.0.0 to 8.1.0.

Release notes

Sourced from entities's releases.

v8.1.0

Faster decoding & escaping, with smaller bundles. Encoding output stays compatible with v8.

Improvements

• Decoding: decodeHTML 1.19×, decodeHTMLStrict 1.14×, decodeHTMLAttribute 1.18×, decodeXML 1.46×, default decode 1.44× as fast. #2248, #2348
• Escaping: escapeUTF8 1.49×, escapeAttribute 1.23×, escapeText 1.33× as fast. #2247, #2348
• Encoding mostly ASCII 4 KiB prose: encodeHTML 1.70×, encodeNonAsciiHTML 2.24×, encodeXML / escape 2.46× as fast. On the short, dense benchmark input, HTML encoding is unchanged; XML encoding and default encode take about 6% longer. #2246, #2348
• 19% smaller full bundle (18% gzipped), targeting ES2022.

Compared with v8.0.0; speedups are medians of nine runs on Node 26.8.1, Linux/x64. Short inputs use the repository benchmark fixtures; results vary with input.

Fixes

• decodeHTMLAttribute preserves interrupted references such as &notin<, previously incorrectly decoded to ¬in<. #2213
• decodeHTML preserves unterminated names such as &Xi$, previously incorrectly decoded to Â. #2331
• decodeXML and default decode preserve XML numeric code points: € now yields U+0080 instead of €. HTML decoding still yields €. By @​adarshx01 in #2347.

Deprecations

• Use String.prototype.codePointAt instead of getCodePoint from entities/escape. #2268

Full Changelog: fb55/entities@v8.0.0...v8.1.0

Commits

• c71f562 8.1.0
• 05af0b3 fix(decode): skip Windows-1252 C1 remap for XML numeric references (#2347)
• 5045f0b test: run html5lib-tests entity fixtures against the decoders (#2272)
• e12dbf8 build(deps-dev): bump vitest from 4.1.11 to 5.0.0 (#2350)
• f982260 build(deps-dev): bump @​biomejs/biome from 2.5.11 to 2.5.12 (#2353)
• 257d38e build(deps-dev): bump tinybench from 6.1.4 to 6.1.5 (#2354)
• fd0b8df build(deps-dev): bump eslint from 10.9.1 to 10.10.0 (#2352)
• 417b259 build(deps-dev): bump @​eslint/compat from 2.1.0 to 2.1.1 (#2351)
• 30141cb build(deps-dev): bump @​biomejs/biome from 2.5.3 to 2.5.11 (#2337)
• 1d737a2 fix: preserve compatibility for the next release (#2348)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: e224ee39-962e-46a6-b1cd-9f95c5468f49

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}