chore: Bump @xmldom/xmldom 0.8.13 → 0.8.14 (patch) to clear 2 Aikido findings (#36358)

Co-authored-by: n8n-cat-bot[bot] <n8n-cat-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 <[email protected]>

package.json

@@ -178,7 +178,7 @@
       "picomatch@4": "4.0.4",
       "avsc": "5.7.9",
       "brace-expansion@<2.1.4": "2.1.4",
-      "@xmldom/xmldom": "0.8.13",
+      "@xmldom/xmldom": "0.8.14",
       "yaml@<=2.8.3": "2.8.3",
       "axios": "catalog:",
       "fast-xml-builder": "1.2.1",

pnpm-lock.yaml

@@ -772,7 +772,7 @@ overrides:
   picomatch@4: 4.0.4
   avsc: 5.7.9
   brace-expansion@<2.1.4: 2.1.4
-  '@xmldom/xmldom': 0.8.13
+  '@xmldom/xmldom': 0.8.14
   yaml@<=2.8.3: 2.8.3
   axios: 1.18.0
   fast-xml-builder: 1.2.1
@@ -13858,8 +13858,8 @@ packages:
     resolution: {integrity: sha512-CJDxIgE5I0FH+ttq/Fxy6nRpxP70+e2O048EPe85J2use3XKdatVM7dDVvFNjQudd9B49NPoZ+8PG49zj4Er8Q==}
     engines: {node: '>= 16'}
 
-  '@xmldom/[email protected]3':
-    resolution: {integrity: sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==}
+  '@xmldom/[email protected]4':
+    resolution: {integrity: sha512-T4EDRUBVZYRldYApjEJiU0e1stYWaRAX7CuSnKzrpwdZKo53zGV8/pqfzV6FfwNl9YThD2OumQYvqtvjvgG7aQ==}
     engines: {node: '>=10.0.0'}
 
   '@yuku-codegen/[email protected]':
@@ -23531,7 +23531,7 @@ snapshots:
 
   '@authenio/[email protected]':
     dependencies:
-      '@xmldom/xmldom': 0.8.13
+      '@xmldom/xmldom': 0.8.14
       escape-html: 1.0.3
       xpath: 0.0.32
 
@@ -31913,7 +31913,7 @@ snapshots:
 
   '@xmldom/[email protected]': {}
 
-  '@xmldom/[email protected]3': {}
+  '@xmldom/[email protected]4': {}
 
   '@yuku-codegen/[email protected]':
     optional: true
@@ -37221,7 +37221,7 @@ snapshots:
 
   [email protected]:
     dependencies:
-      '@xmldom/xmldom': 0.8.13
+      '@xmldom/xmldom': 0.8.14
       argparse: 1.0.10
       base64-js: 1.5.1
       bluebird: 3.4.7
@@ -39206,7 +39206,7 @@ snapshots:
 
   [email protected]:
     dependencies:
-      '@xmldom/xmldom': 0.8.13
+      '@xmldom/xmldom': 0.8.14
       base64-js: 1.5.1
       xmlbuilder: 15.1.1
 
@@ -40418,7 +40418,7 @@ snapshots:
   [email protected]:
     dependencies:
       '@authenio/xml-encryption': 2.0.2
-      '@xmldom/xmldom': 0.8.13
+      '@xmldom/xmldom': 0.8.14
       node-rsa: 2.0.0
       xml: 1.0.1
       xml-crypto: 6.1.2
@@ -43000,7 +43000,7 @@ snapshots:
   [email protected]:
     dependencies:
       '@xmldom/is-dom-node': 1.0.1
-      '@xmldom/xmldom': 0.8.13
+      '@xmldom/xmldom': 0.8.14
       xpath: 0.0.33
 
   [email protected]: {}

pnpm-workspace.yaml

@@ -296,3 +296,5 @@ minimumReleaseAgeExclude:
   # installing before the 3-day minimumReleaseAge so agents/evals aren't stuck on
   # the unknown-model 4096 max_tokens default.
   - '@ai-sdk/anthropic'
+  # Security patch (Aikido) newer than the minimumReleaseAge window; allow it in.
+  - '@xmldom/xmldom'