[Snyk] Upgrade xml2js from 0.4.19 to 0.4.23

[snyk-bot]

Snyk has created this PR to upgrade xml2js from 0.4.19 to 0.4.23.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2019-12-19.

Release notes

Package name: xml2js

• 0.4.23 - 2019-12-19
• 0.4.22 - 2019-09-03
  

  Bump version for next release

• 0.4.21 - 2019-09-02
  

  New release 0.4.21

• 0.4.20 - 2019-09-01
  

  New release, 0.4.20

• 0.4.19 - 2017-08-22
  

  This reverts commit b9b44e0.

from xml2js GitHub release notes

Commit messages

Package name: xml2js

• 8fc5b92 Bump version for next release
• bb266cf Merge pull request #546 from optoolco/reduce-deps
• 3c2c99a regenerate lib/parser.js
• 1adc998 src: Inline util.promisify
• 882ec6b package: Remove temporary util.promisify dep
• aefc64a Bump version for next release
• 7a6d39f Merge pull request #531 from Leonidas-from-XIV/node-4
• c62b085 Use promise shim instead of actual Node function
• fd006fd Add compatibility shim for Node < 8
• 81972ee Use xmlbuilder that works with Node 4
• 080e904 Attempt to restore Node 4 compatibility
• 5b11691 New release 0.4.21
• b47e3dc Merge pull request #528 from Leonidas-from-XIV/xmlbuilder-update
• 1375359 Update xmlbuilder dependency to 13.x
• d04c9e5 New release, 0.4.20
• d810f49 Merge pull request #525 from Leonidas-from-XIV/update-event
• 7a83bc8 updated events
• f41cb5f Merge pull request #522 from Leonidas-from-XIV/parse-string-promise
• c6071f3 Add lockfile
• f2a3f80 Minimal version is Node 8
• c759711 Create a promise-specific version of parseString
• 5770685 Merge pull request #521 from Leonidas-from-XIV/maintained-nodejs-ci
• 387a83b Bump nodejs versions to ones that are still maintained
• eb6c144 Merge pull request #468 from jcsahnwaldt/patch-2

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs