Bump xml2js@0.4.0 & request@2.29.0