semver CVE fixes part 3 (#20407)

* semver CVE fixes part 2

- Fixed semver CVEs
- bumped tasks versions

* AzureCLIV2 | Remove duplicate task-lib

Author: DmitriiBobreshev

Tasks/AzureAppServiceSettingsV1/_buildConfigs/Node20/package-lock.json

@@ -27,7 +27,7 @@
     "azure-pipelines-tasks-azure-arm-rest": "^3.242.2",
     "moment": "^2.29.4",
     "q": "1.4.1",
-    "xml2js": "0.4.13"
+    "xml2js": "^0.6.2"
   },
   "devDependencies": {
     "typescript": "5.1.6"

Tasks/AzureAppServiceSettingsV1/_buildConfigs/Node20/package.json

@@ -27,7 +27,7 @@
     "azure-pipelines-tasks-azure-arm-rest": "^3.242.2",
     "moment": "^2.29.4",
     "q": "1.4.1",
-    "xml2js": "0.4.13"
+    "xml2js": "^0.6.2"
   },
   "devDependencies": {
     "typescript": "4.0.2"

Tasks/AzureAppServiceSettingsV1/package-lock.json

@@ -17,8 +17,8 @@
     "author": "Microsoft Corporation",
     "version": {
         "Major": 1,
-        "Minor": 243,
-        "Patch": 4
+        "Minor": 246,
+        "Patch": 0
     },
     "minimumAgentVersion": "2.104.1",
     "groups": [

Tasks/AzureAppServiceSettingsV1/package.json

@@ -17,8 +17,8 @@
   "author": "Microsoft Corporation",
   "version": {
     "Major": 1,
-    "Minor": 243,
-    "Patch": 4
+    "Minor": 246,
+    "Patch": 0
   },
   "minimumAgentVersion": "2.104.1",
   "groups": [

Tasks/AzureAppServiceSettingsV1/task.json

@@ -21,8 +21,8 @@
     "@types/node": "^20.3.1",
     "@types/q": "1.0.7",
     "azure-devops-node-api": "14.0.2",
-    "azure-pipelines-task-lib": "^4.10.1",
-    "azure-pipelines-tasks-artifacts-common": "2.244.0"
+    "azure-pipelines-task-lib": "^4.17.2",
+    "azure-pipelines-tasks-artifacts-common": "^2.245.1"
   },
   "devDependencies": {
     "typescript": "5.1.6"