passport-saml 4.0.5 release

[markstos]

@cjbarth I see passport-saml 4.0.5 was tagged 3 days ago, but I don't see it on NPM yet: https://www.npmjs.com/search?q=%40node-saml%2Fpassport-saml

Would you like me to do the publishing step?

[cjbarth]

It seems like it is published to me. release-it does that automatically; I didn't see errors, and this screenshot seems to indicate it worked fine:

[markstos]

You are right. I was looking at passport-saml. Should we also release a new version of passport-saml just to explicitly bump the minimum version of node-saml we depend on to increase the odds that users will get the most secure version?

[cjbarth]

They should be able to get an updated version automatically. Out package.json has a version that will pick this up. Once I sort out the xml-crypto stuff, I'll do a release that updates this to specify a minimum required version.

[markstos]

I was able to force the upgrade by adding this to my package.json, which forced Yarn to upgrade the node-saml sub-dependency:

  "resolutions": {
    "@node-saml/node-saml": "4.0.5"
  },