From 1ecd258f1965c9d385615ccbb37f9ddbd09aff81 Mon Sep 17 00:00:00 2001
From: Matthew Donoughe <mdonoughe@veracode.com>
Date: Mon, 6 Jul 2026 08:48:11 -0400
Subject: [PATCH] update quick-xml

---
 Cargo.lock          | 4 ++--
 lockfile/Cargo.toml | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index c3a10a217..22398cb85 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5125,9 +5125,9 @@ dependencies = [
 
 [[package]]
 name = "quick-xml"
-version = "0.38.4"
+version = "0.41.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b66c2058c55a409d601666cffe35f04333cf1013010882cec174a7467cd4e21c"
+checksum = "e660451e55124f798a69a5af3f49ccfbefbd41910eefd25caf2393e1f3473ec1"
 dependencies = [
  "encoding_rs",
  "memchr",
diff --git a/lockfile/Cargo.toml b/lockfile/Cargo.toml
index 416bc8759..f77ffc1bf 100644
--- a/lockfile/Cargo.toml
+++ b/lockfile/Cargo.toml
@@ -19,10 +19,10 @@ nom = "8.0.0"
 nom-language = "0.1.0"
 phylum_types = { git = "https://github.com/phylum-dev/phylum-types", branch = "development" }
 purl = "0.1.1"
-quick-xml = { version = "0.38.3", features = [
-    "encoding",
-    "overlapped-lists",
-    "serialize",
+quick-xml = { version = "0.41.0", features = [
+  "encoding",
+  "overlapped-lists",
+  "serialize",
 ] }
 serde = { version = "1.0.144", features = ["derive"] }
 serde_json = "1.0.85"