Update dependency on `core-http` (#971)

* core-http so that we can get updated version of xml2js
* update changelog, update package.json

ChangeLog.md

@@ -1,5 +1,10 @@
 # Change Log - oav
 
+# 04/12/2023 3.2.8
+- Dependency updates
+  - "@azure/core-http `^2.2.7` -> `^3.0.1`
+  - Upgrading core-http allows us to bump the dependency on `xmljs2` to one without a CVE
+
 ## 02/24/2023 3.2.7
 - Fix roundtrip validation model with circular reference
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "oav",
-  "version": "3.2.6",
+  "version": "3.2.8",
   "author": {
     "name": "Microsoft Corporation",
     "email": "azsdkteam@microsoft.com",
@@ -9,9 +9,10 @@
   "description": "Validate Azure REST API Specifications",
   "license": "MIT",
   "dependencies": {
+    "@apidevtools/swagger-parser": "10.0.3",
     "@autorest/schemas": "^1.3.4",
     "@azure-tools/openapi-tools-common": "^1.2.2",
-    "@azure/core-http": "^2.2.7",
+    "@azure/core-http": "^3.0.1",
     "@azure/openapi-markdown": "^0.9.4",
     "@ts-common/commonmark-to-markdown": "^2.0.2",
     "ajv": "^6.12.6",
@@ -40,7 +41,6 @@
     "path-to-regexp": "^6.2.1",
     "postman-collection": "^4.1.4",
     "reflect-metadata": "^0.1.13",
-    "@apidevtools/swagger-parser": "10.0.3",
     "toposort": "^2.0.2",
     "uuid": "^3.4.0",
     "winston": "^3.3.4",