chore(thirdpaty): bump expat to resolve CVE-2024-50602

ThirdParty/expat/CMakeLists.txt

@@ -8,9 +8,9 @@ vtk_module_third_party(
       "Copyright (c) 1998-2000 Thai Open Source Software Center Ltd and Clark Cooper"
       "Copyright (c) 2001-2019 Expat maintainers"
     SPDX_DOWNLOAD_LOCATION
-      "git+https://gitlab.kitware.com/third-party/expat.git@for/vtk-20220921-2.4.8"
+      "git+https://gitlab.kitware.com/third-party/expat.git@for/vtk-20241030-2.4.8"
     VERSION
-      "2.4.1"
+    "2.4.8" # CVE-2024-50602 fix manually added.
     STANDARD_INCLUDE_DIRS
   EXTERNAL
     PACKAGE EXPAT

ThirdParty/expat/update.sh

@@ -8,7 +8,7 @@ readonly name="expat"
 readonly ownership="Expat Upstream <kwrobot@kitware.com>"
 readonly subtree="ThirdParty/$name/vtk$name"
 readonly repo="https://gitlab.kitware.com/third-party/expat.git"
-readonly tag="for/vtk-20231030-2.4.8"
+readonly tag="for/vtk-20241030-2.4.8"
 readonly paths="
 expat/.gitattributes
 expat/CMakeLists.txt