Merge pull request #55 from advanced-security/copilot/fix-dependabot-vulnerability

fix: update fast-xml-parser 4.4.1 → 4.5.4 (CVE-2026-25896)

Author: adrienpessu

functions/helpers/getSecretDetails/package-lock.json

@@ -35,5 +35,11 @@
     "@aws-sdk/client-ssm": "^3.816.0",
     "@octokit/auth-app": "^8.0.1",
     "@octokit/webhooks-types": "^6.0.0"
+  },
+  "resolutions": {
+    "fast-xml-parser": "4.5.4"
+  },
+  "overrides": {
+    "fast-xml-parser": "4.5.4"
   }
 }

functions/helpers/getSecretDetails/package.json

@@ -146,7 +146,7 @@
     "@smithy/smithy-client" "^4.2.6"
     "@smithy/types" "^4.2.0"
     "@smithy/util-middleware" "^4.0.2"
-    fast-xml-parser "4.4.1"
+    fast-xml-parser "4.5.4"
     tslib "^2.6.2"
 
 "@aws-sdk/credential-provider-env@3.816.0":
@@ -1473,10 +1473,10 @@ fast-levenshtein@^2.0.6:
   resolved "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz"
   integrity sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==
 
-fast-xml-parser@4.4.1:
-  version "4.4.1"
-  resolved "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-4.4.1.tgz"
-  integrity sha512-xkjOecfnKGkSsOwtZ5Pz7Us/T6mrbPQrq0nh+aCO5V9nk5NLWmasAHumTKjiPJPWANe+kAZ84Jc8ooJkzZ88Sw==
+fast-xml-parser@4.5.4:
+  version "4.5.4"
+  resolved "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-4.5.4.tgz"
+  integrity sha512-jE8ugADnYOBsu1uaoayVl1tVKAMNOXyjwvv2U6udEA2ORBhDooJDWoGxTkhd4Qn4yh59JVVt/pKXtjPwx9OguQ==
   dependencies:
     strnum "^1.0.5"