Merge pull request #19 from abhinavminhas/dev

Github Release Creation - v.1.0.4
abhinavminhas · May 23, 2023 · 84aa9f7 · 84aa9f7
2 parents 0ffc107 + cc442da
commit 84aa9f7
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 24 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -1,11 +1,11 @@
 name: Release
 
 env:
-    RELEASE_NAME: "v.1.0.3"
+    RELEASE_NAME: "v.1.0.4"
     RELEASE_NOTES: |
-      - Sofware Release (qTest-MSTest-Parser)
-      - No change to qTest-MSTest-Parser
-      - Security Update - 'glob-parent' dependency update to latest version (6.0.2) to avoid [CVE-2020-28469](https://github.com/advisories/GHSA-ww39-953v-wcq6)
+      - Security Update - 'decode-uri-component' vulnerable to Denial of Service (DoS) [CVE-2022-38900](https://github.com/advisories/GHSA-w573-4hg7-7wgq)
+      - Security Update - 'minimatch' ReDoS vulnerability [CVE-2022-3517](https://github.com/advisories/GHSA-f8q6-p94x-37v3)
+      - Security Update - 'xml2js' is vulnerable to prototype pollution [CVE-2023-0842](https://github.com/advisories/GHSA-776f-qx25-q3cc)
     
 on:
   workflow_dispatch:

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -19,6 +19,6 @@
   "dependencies": {
     "fs": "^0.0.1-security",
     "globby": "^9.1.0",
-    "xml2js": "^0.4.23"
+    "xml2js": "^0.5.0"
   }
 }