diff --git a/HISTORY.md b/HISTORY.md
index eed3bbe5..59d5b76d 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -6,10 +6,13 @@ All notable changes to this project will be documented in this file.
 
 <!-- unreleased changes go here -->
 
+* Dependencies
+  * Support `xmlbuilder2@^3.0.2||^4.0.0`, was `@^3.0.2` (via [#1368])
 * Build
   * Use _TypeScript_ `v5.9.3` now, was `v5.9.2` (via [#1356])
 
 [#1356]: https://github.com/CycloneDX/cyclonedx-node-npm/pull/1356
+[#1368]: https://github.com/CycloneDX/cyclonedx-node-npm/pull/1368
 
 ## 4.0.3 - 2025-09-22
 
diff --git a/package.json b/package.json
index bbc07c8b..7fa346a3 100644
--- a/package.json
+++ b/package.json
@@ -71,8 +71,8 @@
   "dependencies": {
     "@cyclonedx/cyclonedx-library": "^8.4.0||^9.0.0",
     "commander": "^14.0.0",
-    "normalize-package-data": "^7.0.0 || ^8.0.0",
-    "xmlbuilder2": "^3.0.2"
+    "normalize-package-data": "^7.0.0||^8.0.0",
+    "xmlbuilder2": "^3.0.2||^4.0.0"
   },
   "optionalDependencies": {
     "ajv": "^8.12.0",