Bump xml2js dependency for security purpose

[nicooprat]

We have this security issue detected by Renovate:

xml2js is vulnerable to prototype pollution
xml2js versions before 0.5.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the proto property to be edited.

Can we upgrade xms2js to fix this?

Thanks.

[PeterAlfredLee]

Thanks for your contribution @nicooprat
It looks there is something wrong with the Actions build. I will try to fix this.

[PeterAlfredLee]

fixed with commit 3961275

[nicooprat]

Thanks! Any ETA for the next release? 🙏