Removes xmldom. It's no longer used after updating ancestor dependencies xmldom, passport-saml and xml-encryption. These dependencies need to be updated together.
This release has some breaking changes and some significant refactors. Please read the CHANGELOG.md carefully to note what few things may need to change in your code before taking this version. There are deprecation notices in the latest 2.x releases, so it is strongly advised that you upgrade to those versions and clear up the warnings before taking this release.
Also, this release contains significant work to separate the SAML parts out from the Passport parts in preparation for a complete split of these two parts. If you are using the SAML part apart from the Passport part, this release will be much easier for you to use.
Changes
Remove deprecated field privateCert from README, tests (#591) (4eff276)
Add support for more tags in the changelog (#592) (6a7e476)
This version was pushed to npm by auth0npm, a new releaser for xml-encryption since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/USDAForestService/fs-open-forest-platform/network/alerts).
Removes xmldom. It's no longer used after updating ancestor dependencies xmldom, passport-saml and xml-encryption. These dependencies need to be updated together.
Removes
xmldom
Updates
passport-saml
from 1.1.0 to 3.2.2Release notes
Sourced from passport-saml's releases.
... (truncated)
Changelog
Sourced from passport-saml's changelog.
... (truncated)
Commits
8b6b2f2
Release 3.2.28b7e3f5
Merge pull request from GHSA-m974-647v-whv76ba76ba
Release 3.2.18f3ffcd
deps: upgrade release-it, npm dedupeb81c36c
deps: npm audit fixef1dcfc
Export AuthenticateOptions type (#657)3e908fa
test: update error message to match new xml-encryption format.b9de63b
Update xml-encryption to get rid of vulnerable node-forge (#667)d5ab7be
Release 3.2.0e21a04b
Update dependencies (#640)Maintainer changes
This version was pushed to npm by cjbarth, a new releaser for passport-saml since your current version.
Updates
xml-encryption
from 0.11.2 to 2.0.0Release notes
Sourced from xml-encryption's releases.
Commits
Maintainer changes
This version was pushed to npm by auth0npm, a new releaser for xml-encryption since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/USDAForestService/fs-open-forest-platform/network/alerts).