search

socialtables / saml-protocol

A framework-agnostic SAML protocol implementation for service and identity providers
16 stars 5 forks source link

Update dependency @xmldom/xmldom to ^0.8.0 - autoclosed #54

Closed mend-app-cvent[bot] closed 2 years ago

mend-app-cvent[bot] commented 2 years ago

This PR contains the following updates:

Package Type Update Change
@xmldom/xmldom dependencies minor ^0.7.0 -> ^0.8.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 9.8 CVE-2022-37616 #52

Release Notes

xmldom/xmldom ### [`v0.8.3`](https://togithub.com/xmldom/xmldom/blob/HEAD/CHANGELOG.md#​083-httpsgithubcomxmldomxmldomcompare083082) [Compare Source](https://togithub.com/xmldom/xmldom/compare/0.8.2...0.8.3) ##### Fixed - Avoid iterating over prototype properties [`#437`](https://togithub.com/xmldom/xmldom/pull/437) / [`#436`](https://togithub.com/xmldom/xmldom/issues/436) Thank you, [@​Supraja9726](https://togithub.com/Supraja9726) for your contributions ### [`v0.8.2`](https://togithub.com/xmldom/xmldom/blob/HEAD/CHANGELOG.md#​082-httpsgithubcomxmldomxmldomcompare081082) [Compare Source](https://togithub.com/xmldom/xmldom/compare/0.8.1...0.8.2) ##### Fixed - fix(dom): Serialize `>` as specified ([#​395](https://togithub.com/xmldom/xmldom/issues/395)) [`#58`](https://togithub.com/xmldom/xmldom/issues/58) ##### Other - docs: Add `nodeType` values to public interface description [`#396`](https://togithub.com/xmldom/xmldom/pull/396) - test: Add executable examples for node and typescript [`#317`](https://togithub.com/xmldom/xmldom/pull/317) - fix(dom): Serialize `>` as specified [`#395`](https://togithub.com/xmldom/xmldom/pull/395) - chore: Add minimal `Object.assign` ponyfill [`#379`](https://togithub.com/xmldom/xmldom/pull/379) - docs: Refine release documentation [`#378`](https://togithub.com/xmldom/xmldom/pull/378) - chore: update various dev dependencies Thank you [@​niklasl](https://togithub.com/niklasl), [@​cburatto](https://togithub.com/cburatto), [@​SheetJSDev](https://togithub.com/SheetJSDev), [@​pyrsmk](https://togithub.com/pyrsmk) for your contributions ### [`v0.8.1`](https://togithub.com/xmldom/xmldom/blob/HEAD/CHANGELOG.md#​081-httpsgithubcomxmldomxmldomcompare080081) [Compare Source](https://togithub.com/xmldom/xmldom/compare/0.8.0...0.8.1) ##### Fixes - Only use own properties in entityMap [`#374`](https://togithub.com/xmldom/xmldom/pull/374) ##### Docs - Add security policy [`#365`](https://togithub.com/xmldom/xmldom/pull/365) - changelog: Correct contributor name and link [`#366`](https://togithub.com/xmldom/xmldom/pull/366) - Describe release/publish steps [`#358`](https://togithub.com/xmldom/xmldom/pull/358), [`#376`](https://togithub.com/xmldom/xmldom/pull/376) - Add snyk package health badge [`#360`](https://togithub.com/xmldom/xmldom/pull/360) ### [`v0.8.0`](https://togithub.com/xmldom/xmldom/blob/HEAD/CHANGELOG.md#​080-httpsgithubcomxmldomxmldomcompare075080) [Compare Source](https://togithub.com/xmldom/xmldom/compare/0.7.6...0.8.0) ##### Fixed - Normalize all line endings according to XML specs [1.0](https://w3.org/TR/xml/#sec-line-ends) and [1.1](https://www.w3.org/TR/xml11/#sec-line-ends) \ BREAKING CHANGE: Certain combination of line break characters are normalized to a single `\n` before parsing takes place and will no longer be preserved. - [`#303`](https://togithub.com/xmldom/xmldom/issues/303) / [`#307`](https://togithub.com/xmldom/xmldom/pull/307) - [`#49`](https://togithub.com/xmldom/xmldom/issues/49), [`#97`](https://togithub.com/xmldom/xmldom/issues/97), [`#324`](https://togithub.com/xmldom/xmldom/issues/324) / [`#314`](https://togithub.com/xmldom/xmldom/pull/314) - XMLSerializer: Preserve whitespace character references [`#284`](https://togithub.com/xmldom/xmldom/issues/284) / [`#310`](https://togithub.com/xmldom/xmldom/pull/310) \ BREAKING CHANGE: If you relied on the not spec compliant preservation of literal `\t`, `\n` or `\r` in **attribute values**. To preserve those you will have to create XML that instead contains the correct numerical (or hexadecimal) equivalent (e.g. ` `, ` `, ` `). - Drop deprecated exports `DOMImplementation` and `XMLSerializer` from `lib/dom-parser.js` [#​53](https://togithub.com/xmldom/xmldom/issues/53) / [`#309`](https://togithub.com/xmldom/xmldom/pull/309) BREAKING CHANGE: Use the one provided by the main package export. - dom: Remove all links as part of `removeChild` [`#343`](https://togithub.com/xmldom/xmldom/issues/343) / [`#355`](https://togithub.com/xmldom/xmldom/pull/355) ##### Chore - ci: Restore latest tested node version to 16.x [`#325`](https://togithub.com/xmldom/xmldom/pull/325) - ci: Split test and lint steps into jobs [`#111`](https://togithub.com/xmldom/xmldom/issues/111) / [`#304`](https://togithub.com/xmldom/xmldom/pull/304) - Pinned and updated devDependencies Thank you [@​marrus-sh](https://togithub.com/marrus-sh), [@​victorandree](https://togithub.com/victorandree), [@​mdierolf](https://togithub.com/mdierolf), [@​tsabbay](https://togithub.com/tsabbay), [@​fatihpense](https://togithub.com/fatihpense) for your contributions ### [`v0.7.6`](https://togithub.com/xmldom/xmldom/blob/HEAD/CHANGELOG.md#​076-httpsgithubcomxmldomxmldomcompare075076) [Compare Source](https://togithub.com/xmldom/xmldom/compare/0.7.5...0.7.6) ##### Fixed - Avoid iterating over prototype properties [`#441`](https://togithub.com/xmldom/xmldom/pull/441) / [`#437`](https://togithub.com/xmldom/xmldom/pull/437) / [`#436`](https://togithub.com/xmldom/xmldom/issues/436) Thank you, [@​jftanner](https://togithub.com/jftanner), [@​Supraja9726](https://togithub.com/Supraja9726) for your contributions ### [`v0.7.5`](https://togithub.com/xmldom/xmldom/blob/HEAD/CHANGELOG.md#​075) [Compare Source](https://togithub.com/xmldom/xmldom/compare/0.7.4...0.7.5) [Commits](https://togithub.com/xmldom/xmldom/compare/0.7.4...0.7.5) ##### Fixes: - Preserve default namespace when serializing [`#319`](https://togithub.com/xmldom/xmldom/issues/319) / [`#321`](https://togithub.com/xmldom/xmldom/pull/321) Thank you, [@​lupestro](https://togithub.com/lupestro) ### [`v0.7.4`](https://togithub.com/xmldom/xmldom/blob/HEAD/CHANGELOG.md#​074) [Compare Source](https://togithub.com/xmldom/xmldom/compare/0.7.3...0.7.4) [Commits](https://togithub.com/xmldom/xmldom/compare/0.7.3...0.7.4) ##### Fixes: - Restore ability to parse `__prototype__` attributes [`#315`](https://togithub.com/xmldom/xmldom/pull/315) Thank you, [@​dsimpsonOMF](https://togithub.com/dsimpsonOMF) ### [`v0.7.3`](https://togithub.com/xmldom/xmldom/blob/HEAD/CHANGELOG.md#​073) [Compare Source](https://togithub.com/xmldom/xmldom/compare/0.7.2...0.7.3) [Commits](https://togithub.com/xmldom/xmldom/compare/0.7.2...0.7.3) ##### Fixes: - Add doctype when parsing from string [`#277`](https://togithub.com/xmldom/xmldom/issues/277) / [`#301`](https://togithub.com/xmldom/xmldom/pull/301) - Correct typo in error message [`#294`](https://togithub.com/xmldom/xmldom/pull/294) Thank you, [@​rrthomas](https://togithub.com/rrthomas) ##### Refactor: - Improve exports & require statements, new main package entry [`#233`](https://togithub.com/xmldom/xmldom/pull/233) ##### Docs: - Fix Stryker badge [`#298`](https://togithub.com/xmldom/xmldom/pull/298) - Fix link to help-wanted issues [`#299`](https://togithub.com/xmldom/xmldom/pull/299) ##### Chore: - Execute stryker:dry-run on branches [`#302`](https://togithub.com/xmldom/xmldom/pull/302) - Fix stryker config [`#300`](https://togithub.com/xmldom/xmldom/pull/300) - Split test and lint scripts [`#297`](https://togithub.com/xmldom/xmldom/pull/297) - Switch to stryker dashboard owned by org [`#292`](https://togithub.com/xmldom/xmldom/pull/292) ### [`v0.7.2`](https://togithub.com/xmldom/xmldom/blob/HEAD/CHANGELOG.md#​072) [Compare Source](https://togithub.com/xmldom/xmldom/compare/0.7.1...0.7.2) [Commits](https://togithub.com/xmldom/xmldom/compare/0.7.1...0.7.2) ##### Fixes: - Types: Add index.d.ts to packaged files [`#288`](https://togithub.com/xmldom/xmldom/pull/288) Thank you, [@​forty](https://togithub.com/forty) ### [`v0.7.1`](https://togithub.com/xmldom/xmldom/blob/HEAD/CHANGELOG.md#​071) [Compare Source](https://togithub.com/xmldom/xmldom/compare/v0.7.0...0.7.1) [Commits](https://togithub.com/xmldom/xmldom/compare/0.7.0...0.7.1) ##### Fixes: - Types: Copy types from DefinitelyTyped [`#283`](https://togithub.com/xmldom/xmldom/pull/283) Thank you, [@​kachkaev](https://togithub.com/kachkaev) ##### Chore: - package.json: remove author, maintainers, etc. [`#279`](https://togithub.com/xmldom/xmldom/pull/279)