Upgrade fast-xml-parser dependency

microsoft / botframework-components

The repository for components built by Microsoft for the Azure Bot Framework.

https://aka.ms/botdocs

MIT License

113 stars 82 forks source link

Upgrade fast-xml-parser dependency #1532

Open ceciliaavila opened 1 year ago

ceciliaavila commented 1 year ago

Describe the bug

To avoid security alert CVE-2023-34104, upgrade botbuilder packages to version 4.21.0 as it has the safe version of fast-xml-parser 4.24. Version 4.21 of botbuilder is still in preview. We are creating this issue to track the task and proceed with the update once the version is published as latest.