Port from main: bump xml2js version to resolve CVE-2023-0842 for @azu…

…re/core-http (#25502) (#25518) and update release date Co-authored-by: gyz0072004 <[email protected]>
Azure · Apr 11, 2023 · 26e118d · 26e118d
1 parent a06695a
commit 26e118d
Show file tree

Hide file tree

Showing 3 changed files with 38 additions and 23 deletions.
diff --git a/common/config/rush/pnpm-lock.yaml b/common/config/rush/pnpm-lock.yaml
diff --git a/sdk/core/core-http/CHANGELOG.md b/sdk/core/core-http/CHANGELOG.md
@@ -1,15 +1,11 @@
 # Release History
 
-## 3.0.1 (Unreleased)
-
-### Features Added
-
-### Breaking Changes
-
-### Bugs Fixed
+## 3.0.1 (2023-04-11)
 
 ### Other Changes
 
+- Upgrade dependency `xml2js` version to `^0.5.0`.
+
 ## 3.0.0 (2023-02-03)
 
 ### Features Added

diff --git a/sdk/core/core-http/package.json b/sdk/core/core-http/package.json
@@ -129,7 +129,7 @@
  "tslib": "^2.2.0",
  "tunnel": "^0.0.6",
  "uuid": "^8.3.0",
- "xml2js": "^0.4.19"
+ "xml2js": "^0.5.0"
  },
  "devDependencies": {
  "@azure/eslint-plugin-azure-sdk": "^3.0.0",