diff --git a/CHANGELOG.md b/CHANGELOG.md
index ec91492df..121f327f9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@
 * [#3050](https://github.com/ruby-grape/grape/pull/3050): Remove the unused `ParamsScope#root?` and cover the placeholder skip in `validate_elements!` - [@ericproulx](https://github.com/ericproulx).
 * [#3051](https://github.com/ruby-grape/grape/pull/3051): Look up the validation error format once per response instead of once per message - [@ericproulx](https://github.com/ericproulx).
 * [#3055](https://github.com/ruby-grape/grape/pull/3055): Stop a 405 behind `Rack::Cascade` from making the next app answer 405 too - [@ericproulx](https://github.com/ericproulx).
+* [#3058](https://github.com/ruby-grape/grape/pull/3058): Declare `rexml` in the test bundle instead of relying on Danger to bring it in - [@ericproulx](https://github.com/ericproulx).
 * Your contribution here.
 
 ### 4.1.0 (2026-10-31)
diff --git a/Gemfile b/Gemfile
index fb2e756c0..ec6eac2ba 100644
--- a/Gemfile
+++ b/Gemfile
@@ -28,6 +28,9 @@ group :test do
   gem 'git', '< 6', require: false
   gem 'rack-contrib', require: false
   gem 'rack-test', '~> 2.1'
+  # ActiveSupport::XmlMini, Grape's XML backend without multi_xml, parses with
+  # REXML, a bundled gem rather than a default one.
+  gem 'rexml', require: false
   gem 'rspec', '~> 3.13'
   gem 'simplecov', '~> 1.1', require: false
 end