This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade xmlbuilder2 from 2.1.2 to 3.1.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 15 versions ahead of your current version.
• The recommended version was released a month ago, on 2023-05-09.

• 3.1.1 - 2023-05-09
  

  chore: Bump version to 3.1.1

• 3.1.0 - 2023-04-24
  

  chore: Bump version to 3.1.0

• 3.0.2 - 2021-08-10
  

  3.0.2

• 3.0.1 - 2021-07-29
  

  3.0.1

• 3.0.0 - 2021-07-29
  

  3.0.0

• 2.4.1 - 2021-04-08
  

  2.4.1

• 2.4.0 - 2020-09-14
  

  2.4.0

• 2.3.1 - 2020-08-05
  

  2.3.1

• 2.3.0 - 2020-08-04
  

  2.3.0

• 2.2.0 - 2020-07-14
  

  2.2.0

• 2.1.7 - 2020-07-09
• 2.1.6 - 2020-07-02
• 2.1.5 - 2020-06-18
• 2.1.4 - 2020-06-16
• 2.1.3 - 2020-06-11
• 2.1.2 - 2020-04-08

• a0488e5 chore: Bump version to 3.1.1
• 97edf4d build: Bump js-yaml to address security issue
• 501e1be Merge pull request error: No supported distribution was found for input jdkFile actions/setup-java#166 from jkowalleck/devDep_types-node
• 6ac659f fix(deps): moved `@ types/node` to a dev-depencency
• 9443dbf chore: Bump version to 3.1.0
• 7af28ab Merge pull request Make the distribution input field optional actions/setup-java#154 from npr/fix-109
• 4e494e6 Fixes Suddenly the step is extremely slow? actions/setup-java#109 & Action's execution says "no such file or directory, stat" but the file is present actions/setup-java#110
• 7acfbd4 Merge pull request actions/setup-java@v2 - Documentation actions/setup-java#134 from oozcitak/dependabot/bundler/docs/nokogiri-1.13.4
• bd17511 Bump nokogiri from 1.13.3 to 1.13.4 in /docs
• 9bbb552 Merge pull request Post job phase fails to remove private key actions/setup-java#128 from oozcitak/dependabot/npm_and_yarn/ansi-regex-4.1.1
• a488c6b Bump ansi-regex from 4.1.0 to 4.1.1
• 9605208 Merge branch 'master' of https://github.com/oozcitak/xmlbuilder2
• dd2623a Merge pull request set-up env disabled actions/setup-java#112 from mthadley/patch-1
• fe8e3d4 Update dependencies
• 80f174b Merge pull request Is master branch still needed? actions/setup-java#101 from shanekenney/master
• 490cc13 Merge pull request Setup mtls maven options actions/setup-java#126 from oozcitak/dependabot/npm_and_yarn/node-fetch-2.6.7
• 1aca6af Merge pull request Setup maven bin actions/setup-java#127 from oozcitak/dependabot/npm_and_yarn/tmpl-1.0.5
• d338d59 Merge pull request Runner v2.273.6 start to error out due to ::set-env name actions/setup-java#125 from oozcitak/dependabot/npm_and_yarn/tar-6.1.11
• 652f0e7 Merge pull request Add issue and pull request templates actions/setup-java#119 from oozcitak/dependabot/npm_and_yarn/ajv-6.12.6
• 9e19137 Merge pull request GPG fails to sign because settings.xml isn't written actions/setup-java#120 from oozcitak/dependabot/bundler/docs/nokogiri-1.13.3
• 393e831 Bump tmpl from 1.0.4 to 1.0.5
• fec2664 Bump node-fetch from 2.6.1 to 2.6.7
• a582dfa Bump tar from 6.1.2 to 6.1.11
• da80116 Merge pull request Fix documentation for GPG actions/setup-java#123 from oozcitak/dependabot/npm_and_yarn/minimist-1.2.6

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs