chore: pin xml-parser-xo (PROVCON-4790) (#2924)

darekplawecki · web-flow · commit 417be059530d · 2026-05-26T11:45:45.000+02:00
* chore: release security fixes (PROVCON-4790)

* chore: pin xml-parser-xo (PROVCON-4790)

* chore: check tests in pipeline (PROVCON-4790)

* chore: pin xml-parser-xo in angular and static-html tests (PROVCON-4790)

* chore: revert running tests on PR (PROVCON-4790)
diff --git a/examples/angular/package.json b/examples/angular/package.json
@@ -41,6 +41,7 @@
     "typescript": "4.2.4"
   },
   "resolutions": {
-    "minimatch": "9.0.5"
+    "minimatch": "9.0.5",
+    "xml-parser-xo": "4.1.5"
   }
 }
diff --git a/examples/angular/yarn.lock b/examples/angular/yarn.lock
diff --git a/examples/react-cra/package.json b/examples/react-cra/package.json
@@ -26,6 +26,7 @@
     "typescript": "^4.3.5"
   },
   "resolutions": {
+    "xml-parser-xo": "4.1.5",
     "@babel/core": "^7.16.0",
     "@types/react": "17.0.11",
     "loader-utils": "2.0.3",
diff --git a/examples/react-cra/yarn.lock b/examples/react-cra/yarn.lock
@@ -14325,10 +14325,10 @@ xml-name-validator@^3.0.0:
   resolved "https://registry.yarnpkg.com/xml-name-validator/-/xml-name-validator-3.0.0.tgz#6ae73e06de4d8c6e47f9fb181f78d648ad457c6a"
   integrity sha512-A5CUptxDsvxKJEU3yO6DuWBSJz/qizqzJKOMIfUJHETbBw/sFaDxgd6fxm1ewUaM0jZ444Fc5vC5ROYurg/4Pw==
 
-xml-parser-xo@^3.2.0:
-  version "3.2.0"
-  resolved "https://registry.yarnpkg.com/xml-parser-xo/-/xml-parser-xo-3.2.0.tgz#c633ab55cf1976d6b03ab4a6a85045093ac32b73"
-  integrity sha512-8LRU6cq+d7mVsoDaMhnkkt3CTtAs4153p49fRo+HIB3I1FD1o5CeXRjRH29sQevIfVJIcPjKSsPU/+Ujhq09Rg==
+xml-parser-xo@4.1.5, xml-parser-xo@^3.2.0:
+  version "4.1.5"
+  resolved "https://registry.yarnpkg.com/xml-parser-xo/-/xml-parser-xo-4.1.5.tgz#c3326af56219a406f1e20741a2826655fcb3b607"
+  integrity sha512-TxyRxk9sTOUg3glxSIY6f0nfuqRll2OEF8TspLgh5mZkLuBgheCn3zClcDSGJ58TvNmiwyCCuat4UajPud/5Og==
 
 xmlchars@^2.2.0:
   version "2.2.0"
diff --git a/examples/static-html/package.json b/examples/static-html/package.json
@@ -12,5 +12,8 @@
   "license": "ISC",
   "dependencies": {
     "express": "^4.17.1"
+  },
+  "resolutions": {
+    "xml-parser-xo": "4.1.5"
   }
 }
diff --git a/examples/static-html/yarn.lock b/examples/static-html/yarn.lock
diff --git a/package.json b/package.json
@@ -68,6 +68,7 @@
   },
   "resolutions": {
     "fast-xml-parser": "4.5.4",
+    "xml-parser-xo": "4.1.5",
     "tar": "6.2.1",
     "micromatch": "4.0.8",
     "@stoplight/react-error-boundary": "3.0.0",
diff --git a/yarn.lock b/yarn.lock
@@ -22962,10 +22962,10 @@ xml-name-validator@^3.0.0:
   resolved "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-3.0.0.tgz"
   integrity sha512-A5CUptxDsvxKJEU3yO6DuWBSJz/qizqzJKOMIfUJHETbBw/sFaDxgd6fxm1ewUaM0jZ444Fc5vC5ROYurg/4Pw==
 
-xml-parser-xo@^4.1.2:
-  version "4.1.2"
-  resolved "https://registry.npmjs.org/xml-parser-xo/-/xml-parser-xo-4.1.2.tgz"
-  integrity sha512-Z/DRB0ZAKj5vAQg++XsfQQKfT73Vfj5n5lKIVXobBDQEva6NHWUTxOA6OohJmEcpoy8AEqBmSGkXXAnFwt5qAA==
+xml-parser-xo@4.1.5, xml-parser-xo@^4.1.2:
+  version "4.1.5"
+  resolved "https://registry.yarnpkg.com/xml-parser-xo/-/xml-parser-xo-4.1.5.tgz#c3326af56219a406f1e20741a2826655fcb3b607"
+  integrity sha512-TxyRxk9sTOUg3glxSIY6f0nfuqRll2OEF8TspLgh5mZkLuBgheCn3zClcDSGJ58TvNmiwyCCuat4UajPud/5Og==
 
 xml@^1.0.1:
   version "1.0.1"

Original file line number	Diff line number	Diff line change
`@@ -41,6 +41,7 @@`
`41`	`41`	`"typescript": "4.2.4"`
`42`	`42`	`},`
`43`	`43`	`"resolutions": {`
`44`		`- "minimatch": "9.0.5"`
	`44`	`+ "minimatch": "9.0.5",`
	`45`	`+ "xml-parser-xo": "4.1.5"`
`45`	`46`	`}`
`46`	`47`	`}`
Original file line number	Diff line number	Diff line change
`@@ -12,5 +12,8 @@`
`12`	`12`	`"license": "ISC",`
`13`	`13`	`"dependencies": {`
`14`	`14`	`"express": "^4.17.1"`
	`15`	`+ },`
	`16`	`+ "resolutions": {`
	`17`	`+ "xml-parser-xo": "4.1.5"`
`15`	`18`	`}`
`16`	`19`	`}`