Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade xml-encryption from 1.2.1 to 1.2.2 #3

Closed
wants to merge 125 commits into from

Conversation

vid
Copy link

@vid vid commented Mar 5, 2021

Snyk has created this PR to upgrade xml-encryption from 1.2.1 to 1.2.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 24 days ago, on 2021-02-09.
Release notes
Package name: xml-encryption
  • 1.2.2 - 2021-02-09
    • Dev
      Remove test files to prevent false positive from SAST checks.
  • 1.2.1 - 2020-09-09
from xml-encryption GitHub release notes
Commit messages
Package name: xml-encryption

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

markstos and others added 30 commits February 12, 2020 14:55
* Fix multi saml strategy race conditions

node-saml#425

* Add warning for MultiSaml in Readme
* Return XML object for AttributeValue if not a string

* Test XML-valued AttributeValue returns object
Bumps [acorn](https://github.com/acornjs/acorn) from 7.1.0 to 7.4.0.
- [Release notes](https://github.com/acornjs/acorn/releases)
- [Commits](acornjs/acorn@7.1.0...7.4.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.20.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.15...4.17.20)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Fix duplicate bug report templates.
…lue-regression-some

Only make an attribute an object if it has child elements
…pto-upgrade

Upgrade xml-crypto dependancy
gugu and others added 27 commits January 7, 2021 15:48
* Added in npmignore to ignore any pems, certs or keys

* 2.0.5

* Updated pr to not include in bundle and added DS_Store to .gitignore

Co-authored-by: Daniel O'Sullivan <daniel.o'sullivan@lloydsbanking.com>
* one method uses async/await

* async/await for saml.ts, deprecate callback functions
* Format code and enforce code style on PR

* Use line length of 100
passport-saml/multiSamlStrategy.js is something I'd like to remove:
1. it contains nothing, just import
2. it is outside of the source root and tsc/other tools don't include this file
3. old import depends on internal structure of the project
4. it uses module-level export

For now let's keep the file for compatibility, but let's update README so new people will not use the old way
…adme

Update readme on using multiSamlStrategy
* async / await in cache interface
* eslint warnings fixed for cache, remove comments and checks for node < 0.9
Co-authored-by: Mike Hesler <mhesler@grapevine6.com>
Co-authored-by: Mike Hesler <mhesler@seismic.com>
Co-authored-by: Chris Barth <chrisjbarth@hotmail.com>
Co-authored-by: Chris Barth <chrisjbarth@hotmail.com>
@vid vid closed this Apr 9, 2021
@vid vid deleted the snyk-upgrade-0d2ce6e16989a4dba6ef5769c7acd14a branch April 9, 2021 16:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet