Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump xml-crypto from 3.2.0 to 4.0.1 #9

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jul 24, 2023

Bumps xml-crypto from 3.2.0 to 4.0.1.

Release notes

Sourced from xml-crypto's releases.

v4.0.1

  • Use correct type for options (#360) (1b0629e)
  • Fix validationErrors type (#361) (af91bc2)

v4.0.0

  • Bump @​xmldom/xmldom from 0.8.8 to 0.8.10 (#358) (eab46e7)
  • Bump @​typescript-eslint/eslint-plugin from 5.60.1 to 5.62.0 (#357) (504915f)
  • Bump @​prettier/plugin-xml from 2.2.0 to 3.1.1 (#356) (aca3c71)
  • Bump prettier from 2.8.8 to 3.0.0 (#350) (66594ee)
  • Bump release-it from 15.11.0 to 16.1.3 (#352) (2c26d72)
  • Bump prettier-plugin-packagejson from 2.4.3 to 2.4.5 (#353) (c187787)
  • Bump @​typescript-eslint/parser from 5.60.1 to 5.62.0 (#354) (d982292)
  • Bump typescript from 5.1.5 to 5.1.6 (#351) (b3813f6)
  • Bump word-wrap from 1.2.3 to 1.2.4 (#348) (db1a6c0)
  • Bump eslint from 8.42.0 to 8.45.0 (#344) (90e11c7)
  • Enforce eslint no-unused-vars (#349) (a383c94)
  • Enforce eslint deprecation (#347) (3abd8eb)
  • Enforce eslint prefer-template (#346) (1eee0d0)
  • Enforce eslint no-this-alias (#345) (fa2a403)
  • Convert this project to TypeScript (#325) (5ba1d04)
  • Rename files in preparation for TS migration (#343) (b2da60e)
  • Don't force master branch when generating changelog (#342) (6f5280e)
  • Update gren for better support for branches (#340) (df37390)
  • Exports C14nCanonicalization, ExclusiveCanonicalization (#336) (42aea90)
  • Fix issue in case when namespace has no prefix (#330) (ec309ec)
  • Expand the options, move idmode into options, fix types (#323) (131bcf9)
  • Enforce eslint no-unused-vars (#322) (32795f3)
  • Enforce eslint no-prototype-builtins (#321) (4040b6a)
  • Enforce eslint eqeqeq rule (#320) (bba9f7c)
  • Update types (#319) (4bd9577)
  • Refactor classes into their own files (#318) (e11a9d8)
  • Convert from .prototype. to ES6 classes (#316) (41502e9)
  • Rename signingCert -> publicCert and signingKey -> privateKey (#315) (78329fb)
  • Add support for in ; remove KeyInfoProvider (#301) (c2b83f9)
  • Adjust code to pass eslint prefer-const (#312) (67b3a78)
  • Adjust code to pass eslint no-var (#311) (f9e2cfa)
  • Adjust code to pass eslint curly (#310) (b425626)
  • Adjust code to pass eslint one-var (#309) (329e427)
  • Use correct path for code coverage reports (#302) (20024c8)
  • Enhance typings (#295) (630ecad)
  • Lint code for new linting rules (#300) (9038099)
  • Make linting rules stricter (#293) (dedb9c3)
  • Bump codecov/codecov-action from 3.1.1 to 3.1.4 (#290) (b80fe8c)
  • Replace Nodeunit with Mocha (#294) (5a1ac33)
  • Target an LTS version of Node (#299) (d2e9ba1)
Changelog

Sourced from xml-crypto's changelog.

v4.0.1 (2023-07-22)

🐛 Bug Fixes

  • [bug] Use correct type for options #360
  • [bug] Fix validationErrors type #361

v4.0.0 (2023-07-21)

💣 Major Changes

  • [documentation] [breaking-change] Expand the options, move idmode into options, fix types #323
  • [breaking-change] Refactor classes into their own files #318
  • [breaking-change] Prefer ES6 classes to prototypical inheritance #316
  • [breaking-change] Rename signingCert -> publicCert and signingKey -> privateKey #315
  • [semver-major] [breaking-change] Add support for in ; remove KeyInfoProvider #301
  • [semver-major] Target an LTS version of Node #299

🚀 Minor Changes

  • [enhancement] Exports C14nCanonicalization, ExclusiveCanonicalization #336

🔗 Dependencies

  • [dependencies] [javascript] Bump @​xmldom/xmldom from 0.8.8 to 0.8.10 #358
  • [dependencies] [javascript] Bump @​typescript-eslint/eslint-plugin from 5.60.1 to 5.62.0 #357
  • [dependencies] [javascript] Bump @​prettier/plugin-xml from 2.2.0 to 3.1.1 #356
  • [dependencies] [javascript] Bump prettier from 2.8.8 to 3.0.0 #350
  • [dependencies] [javascript] Bump release-it from 15.11.0 to 16.1.3 #352
  • [dependencies] [javascript] Bump prettier-plugin-packagejson from 2.4.3 to 2.4.5 #353
  • [dependencies] [javascript] Bump @​typescript-eslint/parser from 5.60.1 to 5.62.0 #354
  • [dependencies] [javascript] Bump typescript from 5.1.5 to 5.1.6 #351
  • [dependencies] [javascript] Bump word-wrap from 1.2.3 to 1.2.4 #348
  • [dependencies] [javascript] Bump eslint from 8.42.0 to 8.45.0 #344
  • [dependencies] Update gren for better support for branches #340
  • [dependencies] [github_actions] Bump codecov/codecov-action from 3.1.1 to 3.1.4 #290

🐛 Bug Fixes

  • [bug] Fix issue in case when namespace has no prefix #330
  • [bug] Use correct path for code coverage reports #302

⚙️ Technical Tasks

  • [chore] Enforce eslint no-unused-vars #349
  • [chore] Enforce eslint deprecation #347
  • [chore] Enforce eslint prefer-template #346
  • [chore] Enforce eslint no-this-alias #345

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 24, 2023
Bumps [xml-crypto](https://github.com/node-saml/xml-crypto) from 3.2.0 to 4.0.1.
- [Release notes](https://github.com/node-saml/xml-crypto/releases)
- [Changelog](https://github.com/node-saml/xml-crypto/blob/master/CHANGELOG.md)
- [Commits](node-saml/xml-crypto@v3.2.0...v4.0.1)

---
updated-dependencies:
- dependency-name: xml-crypto
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/xml-crypto-4.0.1 branch from 5551f2b to 80370ba Compare July 24, 2023 18:59
@darioackermann
Copy link
Owner

Needs work: KeyInfoProvider is removed (node-saml/xml-crypto#301) but used in current version (https://github.com/darioackermann/saml2-js/blob/master/lib/saml2.coffee#L249)

Copy link
Owner

@darioackermann darioackermann left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Needs work to replace KeyInfoProvider

@darioackermann darioackermann self-assigned this Jul 24, 2023
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jul 31, 2023

Superseded by #12.

@dependabot dependabot bot closed this Jul 31, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/xml-crypto-4.0.1 branch July 31, 2023 16:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant