Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 1, 2024

Bumps xml-crypto from 3.0.1 to 6.0.0.

Release notes

Sourced from xml-crypto's releases.

v6.0.0

  • Bump github/codeql-action from 2 to 3 (#434) (627d83f)
  • Set getCertFromKeyInfo to noop (#445) (2120172)
  • Chore: Update README.md (#432) (f8cbbb7)

v5.1.1

  • fix: template literal (#443) (1ceedc8)

v5.1.0

  • Bump @​typescript-eslint/parser from 6.13.0 to 6.18.1 (#442) (ecbedd9)
  • Bump @​typescript-eslint/eslint-plugin from 6.13.0 to 6.18.1 (#441) (9eb9002)
  • Bump follow-redirects from 1.15.3 to 1.15.4 (#440) (6f363ab)
  • Bump eslint from 8.54.0 to 8.56.0 (#436) (bf163dd)
  • Bump @​types/node from 16.18.65 to 16.18.69 (#435) (4f98697)
  • Bump release-it from 16.2.1 to 16.3.0 (#428) (4d3711a)
  • Enhance derToPem to support XML pretty-print (#439) (6e95c60)

v5.0.0

  • Bump @​typescript-eslint/eslint-plugin from 5.62.0 to 6.13.0 (#422) (66d887b)
  • Bump @​prettier/plugin-xml from 3.2.1 to 3.2.2 (#423) (7410d2e)
  • Bump @​types/mocha from 10.0.2 to 10.0.6 (#421) (36bcf0e)
  • Bump @​types/chai from 4.3.6 to 4.3.11 (#419) (ef513da)
  • Bump prettier from 3.0.3 to 3.1.0 (#418) (09176a5)
  • Bump typescript from 5.2.2 to 5.3.2 (#415) (f3da589)
  • Bump eslint from 8.51.0 to 8.54.0 (#414) (b7c90f5)
  • Bump actions/setup-node from 3 to 4 (#413) (9602607)
  • Bump @​babel/traverse from 7.22.4 to 7.23.2 (#407) (552a6d6)
  • Bump actions/checkout from 3 to 4 (#392) (7ad9a5f)
  • Bump eslint-plugin-deprecation from 1.4.1 to 2.0.0 (#390) (0f11269)
  • Bump typescript from 5.1.6 to 5.2.2 (#383) (8cf4966)
  • Bump eslint-config-prettier from 8.8.0 to 9.0.0 (#381) (9584e48)
  • Mark getKeyInfo() private as it has no public consumers (#412) (1099f59)
  • Remove the default for getKeyInfoContent forcing a consumer to choose (#411) (468d674)
  • Remove default for transformation algorithm (#410) (741240f)
  • Remove default for signature algorithm (#408) (b0541b3)
  • Remove default for digest algorithm (#406) (b6cc9c0)
  • Remove default canonicalization algorithm (#405) (5629be4)
  • Update dependencies; move to @​xmldom-scoped is-dom-node package (#402) (e044d7a)
  • Clarify use of in signature validation (#401) (6f95f2e)
  • Ensure the X509Certificate tag is properly prefixed (#377) (073d4a6)
  • Add support for directly querying a node to see if it has passed validation (#389) (2aa2d13)
  • Improve code clarity; remove unused functions (#397) (f0237e9)
  • Move validation messages to each reference (#396) (d98128a)
  • Make references accessible only via get/set (#395) (0d01641)
  • Reduce public interface by making some methods private (#394) (c2b8cd6)
  • Use is-dom-node for DOM node checking and narrowing (#388) (c5d741f)
  • Update build to support Node@16 (#385) (b0f00d0)
  • Fix transform processing regression (#379) (110dd7c)
  • Enforce consistent transform processing (#380) (fa2922f)
  • Improve and simplify validation logic (#373) (2e32d50)

... (truncated)

Changelog

Sourced from xml-crypto's changelog.

6.0.0 (2024-01-26)

💣 Major Changes

  • [breaking-change] Set getCertFromKeyInfo to noop #445

🔗 Dependencies

  • [dependencies] [github_actions] Bump github/codeql-action from 2 to 3 #434

📚 Documentation

  • [documentation] Chore: Update README.md #432

v5.1.1 (2024-01-17)

🐛 Bug Fixes

  • [bug] fix: template literal #443

v5.1.0 (2024-01-07)

🚀 Minor Changes

  • [enhancement] Enhance derToPem to support XML pretty-print #439

🔗 Dependencies

  • [dependencies] [javascript] Bump @​typescript-eslint/parser from 6.13.0 to 6.18.1 #442
  • [dependencies] [javascript] Bump @​typescript-eslint/eslint-plugin from 6.13.0 to 6.18.1 #441
  • [dependencies] [javascript] Bump follow-redirects from 1.15.3 to 1.15.4 #440
  • [dependencies] [javascript] Bump eslint from 8.54.0 to 8.56.0 #436
  • [dependencies] [javascript] Bump @​types/node from 16.18.65 to 16.18.69 #435
  • [dependencies] [javascript] Bump release-it from 16.2.1 to 16.3.0 #428

v5.0.0 (2023-11-27)

💣 Major Changes

  • [breaking-change] Mark getKeyInfo() private as it has no public consumers #412
  • [breaking-change] Remove the default for getKeyInfoContent forcing a consumer to choose #411
  • [documentation] [breaking-change] Remove default for transformation algorithm #410
  • [breaking-change] Remove default for signature algorithm #408
  • [breaking-change] Remove default for digest algorithm #406

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by cjbarth, a new releaser for xml-crypto since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [xml-crypto](https://github.com/node-saml/xml-crypto) from 3.0.1 to 6.0.0.
- [Release notes](https://github.com/node-saml/xml-crypto/releases)
- [Changelog](https://github.com/node-saml/xml-crypto/blob/master/CHANGELOG.md)
- [Commits](node-saml/xml-crypto@v3.0.1...v6.0.0)

---
updated-dependencies:
- dependency-name: xml-crypto
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 1, 2024
@socket-security
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/[email protected] None +3 716 kB cjbarth

🚮 Removed packages: npm/[email protected]

View full report↗︎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant