fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-XML2JS-5414874
This commit is contained in:
snyk-bot 2023-07-26 19:29:48 +00:00
parent c6353ac224
commit e2660252fe
No known key found for this signature in database
GPG key ID: 5D98975276F8B078
2 changed files with 4 additions and 4 deletions

6
package-lock.json generated
View file

@ -5007,9 +5007,9 @@
"dev": true
},
"xml2js": {
"version": "0.4.23",
"resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.23.tgz",
"integrity": "sha512-ySPiMjM0+pLDftHgXY4By0uswI3SPKLDw/i3UXbnO8M/p28zqexCUoPmQFrYD+/1BzhGJSs2i1ERWKJAtiLrug==",
"version": "0.5.0",
"resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.5.0.tgz",
"integrity": "sha512-drPFnkQJik/O+uPKpqSgr22mpuFHqKdbS835iAQrUC73L2F5WkboIRd63ai/2Yg6I1jzifPFKH2NTK+cfglkIA==",
"requires": {
"sax": ">=0.6.0",
"xmlbuilder": "~11.0.0"

View file

@ -37,7 +37,7 @@
"fast-glob": "^3.2.5",
"got": "^11.8.2",
"picomatch": "^2.2.2",
"xml2js": "^0.4.23"
"xml2js": "^0.5.0"
},
"devDependencies": {
"@octokit/types": "^7.1.0",