[Snyk] Security upgrade xmlbuilder from 3.1.0 to 4.2.1

[Jeff-Tian]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LODASH-6139239	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: xmlbuilder

The new version differs by 29 commits.

• 84da166 4.2.1
• 91ba3a2 Merge pull request #99 from addaleax/master
• 6b4ce3c Update lodash dependency to 4.0.0
• 2299f6f 4.2.0
• 3c85701 Added the noDoubleEncoding flag. Closes #97
• 6c85637 4.1.0
• 62411b1 Added option for separating array items. Closes #96
• ec17840 4.0.0
• 6b76a87 Clean up array-object check
• 7e628e6 Array items are crated as child nodes. #list decorator is removed. See Issue #93
• 2a3b4a4 Remove unnecessary null checks
• 90cb8c0 Clean up guard tests
• 295e783 Added test for failure to create any nodes
• 6f97f95 Added test for t() which is an alias of text()
• 683be7a Added test for doc() function of XMLNode
• 0f73462 Removed unused clone() function
• cc0e708 Add tests for a() and i() which are aliases of attribute() and instruction()
• e1b1108 Add tests for up() and doc() methods of dtd
• 5e83bc0 Add test for public dtd
• 555b1fd Add test for invalid version string
• e46d170 Remove unused clone() functions
• e71fd01 Check encoding against entire string
• 3fb9480 Added tests for guards
• dfbb9c0 Add code coverage badge

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution