From 2afc867f20d689891b516c0458d627bc52c979fd Mon Sep 17 00:00:00 2001
From: "n8n-cat-bot[bot]" <283985454+n8n-cat-bot[bot]@users.noreply.github.com>
Date: Sat, 15 Aug 2026 00:00:29 +0000
Subject: [PATCH] =?UTF-8?q?chore:=20Bump=20@xmldom/xmldom=200.8.13=20?=
 =?UTF-8?q?=E2=86=92=200.8.14=20(patch)=20to=20clear=202=20Aikido=20findin?=
 =?UTF-8?q?gs=20(#36358)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: n8n-cat-bot[bot] <n8n-cat-bot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
---
 package.json        |  2 +-
 pnpm-lock.yaml      | 18 +++++++++---------
 pnpm-workspace.yaml |  2 ++
 3 files changed, 12 insertions(+), 10 deletions(-)

diff --git a/package.json b/package.json
index bb83f303be1..7578b6e49f1 100644
--- a/package.json
+++ b/package.json
@@ -178,7 +178,7 @@
       "picomatch@4": "4.0.4",
       "avsc": "5.7.9",
       "brace-expansion@<2.1.4": "2.1.4",
-      "@xmldom/xmldom": "0.8.13",
+      "@xmldom/xmldom": "0.8.14",
       "yaml@<=2.8.3": "2.8.3",
       "axios": "catalog:",
       "fast-xml-builder": "1.2.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 694f48b2625..1399d4bc951 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -772,7 +772,7 @@ overrides:
   picomatch@4: 4.0.4
   avsc: 5.7.9
   brace-expansion@<2.1.4: 2.1.4
-  '@xmldom/xmldom': 0.8.13
+  '@xmldom/xmldom': 0.8.14
   yaml@<=2.8.3: 2.8.3
   axios: 1.18.0
   fast-xml-builder: 1.2.1
@@ -13858,8 +13858,8 @@ packages:
     resolution: {integrity: sha512-CJDxIgE5I0FH+ttq/Fxy6nRpxP70+e2O048EPe85J2use3XKdatVM7dDVvFNjQudd9B49NPoZ+8PG49zj4Er8Q==}
     engines: {node: '>= 16'}
 
-  '@xmldom/xmldom@0.8.13':
-    resolution: {integrity: sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==}
+  '@xmldom/xmldom@0.8.14':
+    resolution: {integrity: sha512-T4EDRUBVZYRldYApjEJiU0e1stYWaRAX7CuSnKzrpwdZKo53zGV8/pqfzV6FfwNl9YThD2OumQYvqtvjvgG7aQ==}
     engines: {node: '>=10.0.0'}
 
   '@yuku-codegen/binding-darwin-arm64@0.6.1':
@@ -23531,7 +23531,7 @@ snapshots:
 
   '@authenio/xml-encryption@2.0.2':
     dependencies:
-      '@xmldom/xmldom': 0.8.13
+      '@xmldom/xmldom': 0.8.14
       escape-html: 1.0.3
       xpath: 0.0.32
 
@@ -31913,7 +31913,7 @@ snapshots:
 
   '@xmldom/is-dom-node@1.0.1': {}
 
-  '@xmldom/xmldom@0.8.13': {}
+  '@xmldom/xmldom@0.8.14': {}
 
   '@yuku-codegen/binding-darwin-arm64@0.6.1':
     optional: true
@@ -37221,7 +37221,7 @@ snapshots:
 
   mammoth@1.12.0:
     dependencies:
-      '@xmldom/xmldom': 0.8.13
+      '@xmldom/xmldom': 0.8.14
       argparse: 1.0.10
       base64-js: 1.5.1
       bluebird: 3.4.7
@@ -39206,7 +39206,7 @@ snapshots:
 
   plist@3.1.0:
     dependencies:
-      '@xmldom/xmldom': 0.8.13
+      '@xmldom/xmldom': 0.8.14
       base64-js: 1.5.1
       xmlbuilder: 15.1.1
 
@@ -40418,7 +40418,7 @@ snapshots:
   samlify@2.13.0:
     dependencies:
       '@authenio/xml-encryption': 2.0.2
-      '@xmldom/xmldom': 0.8.13
+      '@xmldom/xmldom': 0.8.14
       node-rsa: 2.0.0
       xml: 1.0.1
       xml-crypto: 6.1.2
@@ -43000,7 +43000,7 @@ snapshots:
   xml-crypto@6.1.2:
     dependencies:
       '@xmldom/is-dom-node': 1.0.1
-      '@xmldom/xmldom': 0.8.13
+      '@xmldom/xmldom': 0.8.14
       xpath: 0.0.33
 
   xml-escape@1.1.0: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index ee50e99a3cc..e64df9b8606 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -296,3 +296,5 @@ minimumReleaseAgeExclude:
   # installing before the 3-day minimumReleaseAge so agents/evals aren't stuck on
   # the unknown-model 4096 max_tokens default.
   - '@ai-sdk/anthropic'
+  # Security patch (Aikido) newer than the minimumReleaseAge window; allow it in.
+  - '@xmldom/xmldom'