From 01a1511215177ce4a75a9c8a1393c84d02bdeee7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 5 Oct 2026 22:16:15 +0000
Subject: [PATCH] deps: bump quick-xml from 0.41.0 to 0.42.0

Bumps [quick-xml](https://github.com/tafia/quick-xml) from 0.41.0 to 0.42.0.
- [Release notes](https://github.com/tafia/quick-xml/releases)
- [Changelog](https://github.com/tafia/quick-xml/blob/master/Changelog.md)
- [Commits](https://github.com/tafia/quick-xml/compare/v0.41.0...v0.42.0)

---
updated-dependencies:
- dependency-name: quick-xml
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock | 2 +-
 Cargo.toml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 8139bf6..0722509 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1914,7 +1914,7 @@ dependencies = [
  "pdf-extract",
  "png 0.17.16",
  "ppt-rs",
- "quick-xml 0.41.0",
+ "quick-xml 0.42.0",
  "serde_json",
  "tinydocs-bus",
  "zip 8.6.0",
diff --git a/Cargo.toml b/Cargo.toml
index 636d177..c556e4a 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -62,7 +62,7 @@ pdf-extract = { version = "0.12", optional = true }
 # Bounded OOXML intake reads only selected XML parts, never extracts files.
 zip = { version = "8", default-features = false, features = ["deflate"], optional = true }
 # Streaming XML events avoid building attacker-controlled DOM trees.
-quick-xml = { version = "0.41", optional = true }
+quick-xml = { version = "0.42", optional = true }
 # Pure Rust PDF rasterization, isolated from the default extraction build.
 hayro = { version = "0.5", optional = true }