Merge pull request #17308 from backstage/dependabot/npm_and_yarn/xml2js-0.5.0

Bump xml2js from 0.4.23 to 0.5.0

.changeset/dependabot-ff5881d.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-code-coverage-backend': patch
+---
+
+Bump `xml2js` from 0.4.23 to 0.5.0

plugins/code-coverage-backend/package.json

@@ -44,7 +44,7 @@
     "@types/supertest": "^2.0.8",
     "msw": "^1.0.0",
     "supertest": "^6.1.6",
-    "xml2js": "^0.4.23"
+    "xml2js": "^0.5.0"
   },
   "files": [
     "dist",

yarn.lock

@@ -5903,7 +5903,7 @@ __metadata:
     supertest: ^6.1.6
     uuid: ^8.3.2
     winston: ^3.2.1
-    xml2js: ^0.4.23
+    xml2js: ^0.5.0
     yn: ^4.0.0
   languageName: unknown
   linkType: soft
@@ -40429,6 +40429,16 @@ __metadata:
   languageName: node
   linkType: hard
 
+"xml2js@npm:^0.5.0":
+  version: 0.5.0
+  resolution: "xml2js@npm:0.5.0"
+  dependencies:
+    sax: ">=0.6.0"
+    xmlbuilder: ~11.0.0
+  checksum: 1aa71d62e5bc2d89138e3929b9ea46459157727759cbc62ef99484b778641c0cd21fb637696c052d901a22f82d092a3e740a16b4ce218e81ac59b933535124ea
+  languageName: node
+  linkType: hard
+
 "xml@npm:=1.0.1":
   version: 1.0.1
   resolution: "xml@npm:1.0.1"