chore(deps): update rust crate quick-xml to 0.41.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
quick-xml	workspace.dependencies	minor	0.40.1 → 0.41.0

---

Release Notes

tafia/quick-xml (quick-xml)

v0.41.0

Compare Source

New Features

• #​970: Add NsReader::resolver_mut() and
  NamespaceResolver::{max_declarations_per_element, set_max_declarations_per_element}.

Bug Fixes

• #​969: Attributes (and anything that iterates BytesStart::attributes()
  with the default with_checks(true)) no longer takes O(N²) time on a start
  tag with a large number of attributes. Small tags keep the previous linear
  scan; larger ones switch to a 64-bit hash pre-filter, so the whole tag is
  O(N). The exact AttrError::Duplicated(new, prev) positions are unchanged.
• #​970: NamespaceResolver::push (and hence every NsReader Start/Empty
  event) now rejects a start tag that declares more than
  DEFAULT_MAX_DECLARATIONS_PER_ELEMENT (256) xmlns / xmlns:* namespace
  bindings, returning the new NamespaceError::TooManyDeclarations. Previously
  push allocated one NamespaceBinding per declaration with no upper bound,
  before the event was returned to the caller, so an NsReader consumer could
  not bound its memory exposure on untrusted input. The limit is configurable
  via NamespaceResolver::set_max_declarations_per_element (use usize::MAX
  to disable).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.