From 297f74795dd61c7397cc9f45d851e8b8c8ae4e00 Mon Sep 17 00:00:00 2001
From: stevenhorsman <steven@uk.ibm.com>
Date: Fri, 10 Jul 2026 09:44:17 -0700
Subject: [PATCH] =?UTF-8?q?kata-ctl:=20bump=20quick-xml=200.28.2=20?=
 =?UTF-8?q?=E2=86=92=200.41.0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fixes RUSTSEC-2026-0194 and RUSTSEC-2026-0195 reported against
quick-xml < 0.37.2.  The quick-xml se::to_string API used by kata-ctl's
log-parser is unchanged between 0.28 and 0.41, so no call-site edits
are needed.

Ref: https://osv.dev/RUSTSEC-2026-0194
Ref: https://osv.dev/RUSTSEC-2026-0195

Generated-by: IBM Bob
Signed-off-by: stevenhorsman <steven@uk.ibm.com>
---
 Cargo.lock                    | 4 ++--
 src/tools/kata-ctl/Cargo.toml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 9625430ef1..8b4f3b881b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -6038,9 +6038,9 @@ dependencies = [
 
 [[package]]
 name = "quick-xml"
-version = "0.28.2"
+version = "0.41.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0ce5e73202a820a31f8a0ee32ada5e21029c81fd9e3ebf668a40832e4219d9d1"
+checksum = "e660451e55124f798a69a5af3f49ccfbefbd41910eefd25caf2393e1f3473ec1"
 dependencies = [
  "memchr",
  "serde",
diff --git a/src/tools/kata-ctl/Cargo.toml b/src/tools/kata-ctl/Cargo.toml
index e0db9ba096..16703d2fd9 100644
--- a/src/tools/kata-ctl/Cargo.toml
+++ b/src/tools/kata-ctl/Cargo.toml
@@ -54,7 +54,7 @@ lazy_static.workspace = true
 # for log-parser
 serde_yaml = "0.9"
 ron = "0.8"
-quick-xml = { version = "0.28", features = ["serialize"] }
+quick-xml = { version = "0.41.0", features = ["serialize"] }
 csv = "1.2"
 serde_with = "2.3"
 chrono = { version = "0.4", features = ["serde"] }