Add dependency to pin rexml at <= 3.3.1 as latest versions throw exec…

…ption when parsing invalid xml. Without the ping latest gem gets pulled in.

Signed-off-by: Neha Pansare <[email protected]>

knife-windows.gemspec

@@ -15,6 +15,7 @@ Gem::Specification.new do |s|
   s.required_ruby_version = ">= 2.7", "< 3.1"
   s.add_dependency "chef", "~> 17.10"
   s.add_dependency "winrm", "~> 2.1"
+  s.add_dependency "rexml", "<= 3.3.1" # A non xml string parsing will throw an error 3.3.2 onward. https://github.com/ruby/rexml/issues/180
   s.add_dependency "winrm-elevated", "~> 1.0"
 
   s.add_development_dependency "pry"