Limits

[djc]

Inspired by

• https://rustsec.org/advisories/RUSTSEC-2026-0194.html
• https://rustsec.org/advisories/RUSTSEC-2026-0195.html

[Copilot]

Pull request overview

This PR introduces configurable safety limits to the XML deserialization pipeline and refactors the public from_str convenience API to use the Deserializer directly, alongside a patch version bump.

Changes:

• Add Limits (max attributes / nesting depth / namespace declarations) enforced during tokenization in de::Context.
• Introduce Deserializer::new(input) and Deserializer::with_limits(...), and move root-type matching + accumulator driving into Deserializer::deserialize.
• Bump crate version to 0.7.6.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File	Description
instant-xml/src/lib.rs	Refactors from_str to construct a Deserializer and call the new deserialize entry point.
instant-xml/src/de.rs	Implements deserialization limits, adds Limits + builder API, and reworks deserializer/context ownership to support root construction from input.
instant-xml/Cargo.toml	Bumps patch version for the new behavior/API additions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.