[dependabot]

Updated AngleSharp from 1.8.5 to 1.8.6.

Release notes

Sourced from AngleSharp's releases.

1.8.6

Released on Sunday, October 25 2026

What's Changed

• Removed temporary copies when serializing text that needs no HTML escaping @​perfloop-agent in Avoid rebuilding unescaped text during HTML serialization AngleSharp/AngleSharp#1388
• Fixed INode.Equals (isEqualNode) to compare what the DOM spec compares: character data, doctype identifiers, processing instructions, element prefixes and attribute local names, no longer base URLs, without overflowing the stack on deep trees
• Fixed IAttr.Equals comparing the prefix instead of the local name
• Fixed IDocument.Import (importNode) returning nodes owned by the source document instead of the importing one
• Fixed IDocument.Import accepting a shadow root instead of throwing NotSupported
• Fixed INode.Clone and Import overflowing the stack on deeply nested trees and templates
• Fixed a shallow clone of a <template> copying its contents
• Fixed serializing < and > in attribute values unescaped, which let markup break out when reparsed under different rules (mutation XSS); they are now written as < and > like browsers do since the HTML spec change of May 2025
• Fixed IRange.CopyContent and ExtractContent overflowing the stack on deeply nested ranges
• Fixed Dispatch (dispatchEvent) returning true for a canceled event
• Fixed MutationObserver not observing a document itself and throwing for one without a root element
• Fixed MutationObserver.Disconnect keeping the previous targets for a later Connect
• Fixed a failing navigation or submission from DoClick crashing the process; it is reported as a context error
• Fixed URLSearchParams treating non-ASCII values as single bytes and leaving + undecoded @​NotAFlightRisk in Decode URLSearchParams as UTF-8 and treat + as a space AngleSharp/AngleSharp#1390
• Added the IHtmlSelectElement.SelectedIndex setter
• Added HtmlParserOptions.MaximumDepth (default 512) to stop deeply nested markup from building trees that overflow the stack
• Added focusing of elements with a tabindex and blurring of any focused element
• Added DoClickAsync to await a click's navigation or form submission
• Added toggling the parent <details> when clicking its <summary>
• Added declarative shadow DOM: the parser attaches <template shadowrootmode="open"> (or closed) as the shadow root of its parent
• Added :host(<compound>), and selectors in a shadow tree reaching its host (only through :host)
• Released 1.8.6 by @​FlorianRappl in Release 1.8.6 AngleSharp/AngleSharp#1391

New Contributors

• @​perfloop-agent made their first contribution in Avoid rebuilding unescaped text during HTML serialization AngleSharp/AngleSharp#1388

Full Changelog: AngleSharp/AngleSharp@v1.8.5...v1.8.6

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Dependabot triage

🧑 Needs a human — infra-secret.

The auto-merge workflow failed because it requested a merge-commit merge strategy, but the repository does not allow merge commits (only squash/rebase are permitted); this is a repository-configuration mismatch, not something fixable in the PR's diff or commit message.

No dependency version was changed. See doc/handwritten/for-maintainers/workflows/dependabot-autofix.en.md.

[dependabot]

Superseded by #473.