From 7c0ffb43550162ac1a361b6f42e7528fab5a2ebf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 May 2023 17:05:23 +0000
Subject: [PATCH] Bump xml2js and @vscode/vsce in /.github/actions/ovsx-publish

Bumps [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js) and [@vscode/vsce](https://github.com/Microsoft/vsce). These dependencies needed to be updated together.

Updates `xml2js` from 0.4.23 to 0.5.0
- [Commits](https://github.com/Leonidas-from-XIV/node-xml2js/commits/0.5.0)

Updates `@vscode/vsce` from 2.17.0 to 2.19.0
- [Release notes](https://github.com/Microsoft/vsce/releases)
- [Commits](https://github.com/Microsoft/vsce/compare/v2.17.0...v2.19.0)

---
updated-dependencies:
- dependency-name: xml2js
  dependency-type: indirect
- dependency-name: "@vscode/vsce"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .../actions/ovsx-publish/package-lock.json    | 40 ++++++++++++-------
 1 file changed, 26 insertions(+), 14 deletions(-)

diff --git a/.github/actions/ovsx-publish/package-lock.json b/.github/actions/ovsx-publish/package-lock.json
index d4e6beb82..a8e376063 100644
--- a/.github/actions/ovsx-publish/package-lock.json
+++ b/.github/actions/ovsx-publish/package-lock.json
@@ -13,9 +13,9 @@
       }
     },
     "node_modules/@vscode/vsce": {
-      "version": "2.17.0",
-      "resolved": "https://repox.jfrog.io/repox/api/npm/npm/@vscode/vsce/-/vsce-2.17.0.tgz",
-      "integrity": "sha512-W4HN5MtTVj/mroQU1d82bUEeWM3dUykMFnMYZPtZ6jrMiHN1PUoN3RGcS896N0r2rIq8KpWDtufcQHgK8VfgpA==",
+      "version": "2.19.0",
+      "resolved": "https://repox.jfrog.io/repox/api/npm/npm/@vscode/vsce/-/vsce-2.19.0.tgz",
+      "integrity": "sha512-dAlILxC5ggOutcvJY24jxz913wimGiUrHaPkk16Gm9/PGFbz1YezWtrXsTKUtJws4fIlpX2UIlVlVESWq8lkfQ==",
       "dependencies": {
         "azure-devops-node-api": "^11.0.1",
         "chalk": "^2.4.2",
@@ -23,6 +23,7 @@
         "commander": "^6.1.0",
         "glob": "^7.0.6",
         "hosted-git-info": "^4.0.2",
+        "jsonc-parser": "^3.2.0",
         "leven": "^3.1.0",
         "markdown-it": "^12.3.2",
         "mime": "^1.3.4",
@@ -33,7 +34,7 @@
         "tmp": "^0.2.1",
         "typed-rest-client": "^1.8.4",
         "url-join": "^4.0.1",
-        "xml2js": "^0.4.23",
+        "xml2js": "^0.5.0",
         "yauzl": "^2.3.1",
         "yazl": "^2.2.2"
       },
@@ -499,6 +500,11 @@
         "is-ci": "bin.js"
       }
     },
+    "node_modules/jsonc-parser": {
+      "version": "3.2.0",
+      "resolved": "https://repox.jfrog.io/repox/api/npm/npm/jsonc-parser/-/jsonc-parser-3.2.0.tgz",
+      "integrity": "sha512-gfFQZrcTc8CnKXp6Y4/CBT3fTc0OVuDofpre4aEeEpSBPV5X5v4+Vmx+8snU7RLPrNHPKSgLxGo9YuQzz20o+w=="
+    },
     "node_modules/keytar": {
       "version": "7.9.0",
       "resolved": "https://repox.jfrog.io/repox/api/npm/npm/keytar/-/keytar-7.9.0.tgz",
@@ -996,9 +1002,9 @@
       "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ=="
     },
     "node_modules/xml2js": {
-      "version": "0.4.23",
-      "resolved": "https://repox.jfrog.io/repox/api/npm/npm/xml2js/-/xml2js-0.4.23.tgz",
-      "integrity": "sha512-ySPiMjM0+pLDftHgXY4By0uswI3SPKLDw/i3UXbnO8M/p28zqexCUoPmQFrYD+/1BzhGJSs2i1ERWKJAtiLrug==",
+      "version": "0.5.0",
+      "resolved": "https://repox.jfrog.io/repox/api/npm/npm/xml2js/-/xml2js-0.5.0.tgz",
+      "integrity": "sha512-drPFnkQJik/O+uPKpqSgr22mpuFHqKdbS835iAQrUC73L2F5WkboIRd63ai/2Yg6I1jzifPFKH2NTK+cfglkIA==",
       "dependencies": {
         "sax": ">=0.6.0",
         "xmlbuilder": "~11.0.0"
@@ -1040,9 +1046,9 @@
   },
   "dependencies": {
     "@vscode/vsce": {
-      "version": "2.17.0",
-      "resolved": "https://repox.jfrog.io/repox/api/npm/npm/@vscode/vsce/-/vsce-2.17.0.tgz",
-      "integrity": "sha512-W4HN5MtTVj/mroQU1d82bUEeWM3dUykMFnMYZPtZ6jrMiHN1PUoN3RGcS896N0r2rIq8KpWDtufcQHgK8VfgpA==",
+      "version": "2.19.0",
+      "resolved": "https://repox.jfrog.io/repox/api/npm/npm/@vscode/vsce/-/vsce-2.19.0.tgz",
+      "integrity": "sha512-dAlILxC5ggOutcvJY24jxz913wimGiUrHaPkk16Gm9/PGFbz1YezWtrXsTKUtJws4fIlpX2UIlVlVESWq8lkfQ==",
       "requires": {
         "azure-devops-node-api": "^11.0.1",
         "chalk": "^2.4.2",
@@ -1050,6 +1056,7 @@
         "commander": "^6.1.0",
         "glob": "^7.0.6",
         "hosted-git-info": "^4.0.2",
+        "jsonc-parser": "^3.2.0",
         "keytar": "^7.7.0",
         "leven": "^3.1.0",
         "markdown-it": "^12.3.2",
@@ -1061,7 +1068,7 @@
         "tmp": "^0.2.1",
         "typed-rest-client": "^1.8.4",
         "url-join": "^4.0.1",
-        "xml2js": "^0.4.23",
+        "xml2js": "^0.5.0",
         "yauzl": "^2.3.1",
         "yazl": "^2.2.2"
       }
@@ -1444,6 +1451,11 @@
         "ci-info": "^2.0.0"
       }
     },
+    "jsonc-parser": {
+      "version": "3.2.0",
+      "resolved": "https://repox.jfrog.io/repox/api/npm/npm/jsonc-parser/-/jsonc-parser-3.2.0.tgz",
+      "integrity": "sha512-gfFQZrcTc8CnKXp6Y4/CBT3fTc0OVuDofpre4aEeEpSBPV5X5v4+Vmx+8snU7RLPrNHPKSgLxGo9YuQzz20o+w=="
+    },
     "keytar": {
       "version": "7.9.0",
       "resolved": "https://repox.jfrog.io/repox/api/npm/npm/keytar/-/keytar-7.9.0.tgz",
@@ -1863,9 +1875,9 @@
       "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ=="
     },
     "xml2js": {
-      "version": "0.4.23",
-      "resolved": "https://repox.jfrog.io/repox/api/npm/npm/xml2js/-/xml2js-0.4.23.tgz",
-      "integrity": "sha512-ySPiMjM0+pLDftHgXY4By0uswI3SPKLDw/i3UXbnO8M/p28zqexCUoPmQFrYD+/1BzhGJSs2i1ERWKJAtiLrug==",
+      "version": "0.5.0",
+      "resolved": "https://repox.jfrog.io/repox/api/npm/npm/xml2js/-/xml2js-0.5.0.tgz",
+      "integrity": "sha512-drPFnkQJik/O+uPKpqSgr22mpuFHqKdbS835iAQrUC73L2F5WkboIRd63ai/2Yg6I1jzifPFKH2NTK+cfglkIA==",
       "requires": {
         "sax": ">=0.6.0",
         "xmlbuilder": "~11.0.0"