diff --git a/Gemfile.lock.aarch64 b/Gemfile.lock.aarch64
index 7f32bd0..3853f60 100644
--- a/Gemfile.lock.aarch64
+++ b/Gemfile.lock.aarch64
@@ -476,7 +476,7 @@ GEM
     websocket-driver (0.7.5)
       websocket-extensions (>= 0.1.0)
     websocket-extensions (0.1.5)
-    xmlhash (1.3.7)
+    xmlhash (1.3.8)
       pkg-config
     xmlrpc (0.3.2)
       webrick
diff --git a/Gemfile.lock.x86 b/Gemfile.lock.x86
index 4357e5a..adaaf2a 100644
--- a/Gemfile.lock.x86
+++ b/Gemfile.lock.x86
@@ -476,7 +476,7 @@ GEM
     websocket-driver (0.7.5)
       websocket-extensions (>= 0.1.0)
     websocket-extensions (0.1.5)
-    xmlhash (1.3.7)
+    xmlhash (1.3.8)
       pkg-config
     xmlrpc (0.3.2)
       webrick
diff --git a/obs-bundled-gems.spec b/obs-bundled-gems.spec
index 252f40c..5fad7fd 100644
--- a/obs-bundled-gems.spec
+++ b/obs-bundled-gems.spec
@@ -19,7 +19,7 @@
 %global rack_version 2.2.3
 Name:           obs-bundled-gems
 Version:        2.10.1
-Release:        4
+Release:        5
 Summary:        The Open Build Service -- Bundled Gems
 License:        GPL-2.0-only OR GPL-3.0-only
 URL:            http://www.openbuildservice.org
@@ -139,6 +139,9 @@ done
 %doc README
 
 %changelog
+* Thu May 12 2022 wangkai <wangkai385@h-partners.com> 2.10.1-5
+- Update xmlhash to 1.3.8
+
 * Mon Mar 21 2022 Ge Wang <wangge20@huawei.com> 2.10.1-4
 - Fix compilation failed due to ruby and some rubygems upgraded
 
diff --git a/verdor.obscpio b/verdor.obscpio
index b02af23..2dfc908 100644
Binary files a/verdor.obscpio and b/verdor.obscpio differ