From 633cd023d9e36d5b1a935589ed3d61ef911de1a9 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 2 Feb 2026 19:28:15 +0000
Subject: [PATCH] fix(deps): update dependency fast-xml-parser to v5 [security]

---
 packages/tools-apple/package.json   |  2 +-
 packages/tools-windows/package.json |  2 +-
 yarn.lock                           | 22 ++++++++++++++++++++--
 3 files changed, 22 insertions(+), 4 deletions(-)

diff --git a/packages/tools-apple/package.json b/packages/tools-apple/package.json
index 8ae8b0abd..234ce3ca8 100644
--- a/packages/tools-apple/package.json
+++ b/packages/tools-apple/package.json
@@ -55,7 +55,7 @@
   },
   "dependencies": {
     "@rnx-kit/tools-shell": "^0.2.2",
-    "fast-xml-parser": "^4.0.0"
+    "fast-xml-parser": "^5.0.0"
   },
   "devDependencies": {
     "@rnx-kit/eslint-config": "*",
diff --git a/packages/tools-windows/package.json b/packages/tools-windows/package.json
index 91c987506..5ccbafc2e 100644
--- a/packages/tools-windows/package.json
+++ b/packages/tools-windows/package.json
@@ -35,7 +35,7 @@
   },
   "dependencies": {
     "@rnx-kit/tools-shell": "^0.2.0",
-    "fast-xml-parser": "^4.0.0"
+    "fast-xml-parser": "^5.0.0"
   },
   "devDependencies": {
     "@rnx-kit/eslint-config": "*",
diff --git a/yarn.lock b/yarn.lock
index 2d57cebf3..b4f8bc858 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5453,7 +5453,7 @@ __metadata:
     "@rnx-kit/tools-shell": "npm:^0.2.2"
     "@rnx-kit/tsconfig": "npm:*"
     "@types/node": "npm:^24.0.0"
-    fast-xml-parser: "npm:^4.0.0"
+    fast-xml-parser: "npm:^5.0.0"
   languageName: unknown
   linkType: soft
 
@@ -5563,7 +5563,7 @@ __metadata:
     "@rnx-kit/tools-shell": "npm:^0.2.0"
     "@rnx-kit/tsconfig": "npm:*"
     "@types/node": "npm:^24.0.0"
-    fast-xml-parser: "npm:^4.0.0"
+    fast-xml-parser: "npm:^5.0.0"
   languageName: unknown
   linkType: soft
 
@@ -9580,6 +9580,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"fast-xml-parser@npm:^5.0.0":
+  version: 5.3.4
+  resolution: "fast-xml-parser@npm:5.3.4"
+  dependencies:
+    strnum: "npm:^2.1.0"
+  bin:
+    fxparser: src/cli/cli.js
+  checksum: 10c0/d77866ca860ad185153e12f6ba12274d32026319ad8064e4681342b8a8e1ffad3f1f98daf04d77239fb12eb1d906ee7185fd328deda74529680e8dae0f3e9327
+  languageName: node
+  linkType: hard
+
 "fastest-levenshtein@npm:^1.0.7":
   version: 1.0.12
   resolution: "fastest-levenshtein@npm:1.0.12"
@@ -16178,6 +16189,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"strnum@npm:^2.1.0":
+  version: 2.1.2
+  resolution: "strnum@npm:2.1.2"
+  checksum: 10c0/4e04753b793540d79cd13b2c3e59e298440477bae2b853ab78d548138385193b37d766d95b63b7046475d68d44fb1fca692f0a3f72b03f4168af076c7b246df9
+  languageName: node
+  linkType: hard
+
 "sudo-prompt@npm:^9.0.0":
   version: 9.2.1
   resolution: "sudo-prompt@npm:9.2.1"