diff --git a/.gitignore b/.gitignore
index 9dce816..b52fee7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -22,3 +22,4 @@
 /nodejs-xml2js-f7e53de387f8d614e301219ca17c2094ef0a02f9.tar.gz
 /nodejs-xml2js-0.4.16.tar.gz
 /nodejs-xml2js-0.4.17.tar.gz
+/nodejs-xml2js-0.4.18.tar.gz
diff --git a/nodejs-xml2js.spec b/nodejs-xml2js.spec
index 3586620..42f1707 100644
--- a/nodejs-xml2js.spec
+++ b/nodejs-xml2js.spec
@@ -1,13 +1,11 @@
-%global commit 129ebba8b313e92389c111c0b477c89fb78b37ad
-
 Name:           nodejs-xml2js
-Version:        0.4.17
-Release:        3%{?dist}
+Version:        0.4.18
+Release:        1%{?dist}
 Summary:        Simple XML to JavaScript object converter
 
 License:        MIT
 URL:            https://github.com/Leonidas-from-XIV/node-xml2js
-Source0:        https://github.com/Leonidas-from-XIV/node-xml2js/archive/%{commit}/%{name}-%{version}.tar.gz
+Source0:        https://github.com/Leonidas-from-XIV/node-xml2js/archive/%{version}/%{name}-%{version}.tar.gz
 
 BuildArch:      noarch
 ExclusiveArch:  %{nodejs_arches} noarch
@@ -27,8 +25,9 @@ reason? Then xml2js is what you're looking for!
 
 
 %prep
-%autosetup -p 1 -n node-xml2js-%{commit}
+%autosetup -p 1 -n node-xml2js-%{version}
 %nodejs_fixdep sax "~0.5"
+%nodejs_fixdep xmlbuilder "^4.2.1"
 rm -rf node_modules
 
 
@@ -53,6 +52,9 @@ cp -pr package.json lib %{buildroot}/%{nodejs_sitelib}/xml2js
 
 
 %changelog
+* Tue Aug 15 2017 Tom Hughes <tom@compton.nu> - 0.4.18-1
+- Update to 0.4.18 upstream release
+
 * Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.4.17-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
 
diff --git a/sources b/sources
index 4b03609..3fde1a1 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-907511d3a5c0b00f37142f5d234a9d6f  nodejs-xml2js-0.4.17.tar.gz
+SHA512 (nodejs-xml2js-0.4.18.tar.gz) = f647a656cb2b20e8f86b696a47cb2712103f4898b05e817be7b43860773a88f2d25e483f07979973e81569d87dc99f67a059bdfc3034711089e3d5b6c28c6a1a