[Snyk] Upgrade xmlbuilder2 from 2.4.0 to 2.4.1

[snyk-bot]

Snyk has created this PR to upgrade xmlbuilder2 from 2.4.0 to 2.4.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 2 years ago, on 2021-04-08.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	265/1000 Why? CVSS 5.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: xmlbuilder2

• 2.4.1 - 2021-04-08
  

  2.4.1

• 2.4.0 - 2020-09-14
  

  2.4.0

from xmlbuilder2 GitHub release notes

Commit messages

Package name: xmlbuilder2

• 10cb1af 2.4.1
• 03b00ce Update changelog
• 4fef5bf Update changelog
• a5d01fd Expose parswer sanitize function. Fixes [Snyk] Upgrade @actions/exec from 1.0.4 to 1.1.1 #65
• 0a97ef5 Add test case for [Snyk] Upgrade @actions/tool-cache from 1.6.1 to 1.7.2 #78
• d7bf999 Remove browser tests
• 0c9b9bd Update y18n. Fixes [Snyk] Upgrade @actions/io from 1.0.2 to 1.1.2 #85
• 406eaf9 Update elliptic. Fixes [Snyk] Upgrade @actions/glob from 0.2.0 to 0.3.0 #80
• d0094bf Use latest node. Fixes [pull] main from actions:main #84 fixes [pull] main from actions:main #69
• b48b061 Revert "Add common interface to customize serializers"
• 0aa1ec8 Merge pull request [pull] main from actions:main #71 from oozcitak/dependabot/bundler/docs/nokogiri-1.11.1
• 6f03cbc Bump nokogiri from 1.10.10 to 1.11.1 in /docs
• ae834b2 Merge pull request [Snyk] Upgrade @actions/glob from 0.2.0 to 0.3.0 #66 from oozcitak/dependabot/npm_and_yarn/ini-1.3.8
• fdcd1f0 Bump ini from 1.3.5 to 1.3.8
• ba4cbea Add next to to. Fixes [Snyk] Upgrade @actions/cache from 3.0.0 to 3.0.4 #61
• 09f028e Add common interface to customize serializers
• 25ebfe7 Add object test to [pull] main from actions:main #60
• af3ea0c Add test for [pull] main from actions:main #60
• 003a867 Merge branch 'master' of https://github.com/oozcitak/xmlbuilder2
• 8401c75 Add more keepNullNodes checks
• 6e9454c Check keepNullNodes for text nodes. Fixes [Snyk] Upgrade @actions/exec from 1.0.4 to 1.1.1 #56
• 55575e1 Merge pull request [Snyk] Upgrade @actions/tool-cache from 1.6.1 to 1.7.2 #54 from manupik/patch-1
• a6897ac Update CHANGELOG.md

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs