[Snyk] Security upgrade wicked-saml2-js from 3.0.0 to 4.0.1

[DonMartin76]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	461/1000 Why? Recently disclosed, Has a fix available, CVSS 3.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-DEBUG-3227433	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: wicked-saml2-js

The new version differs by 88 commits.

• 87f88f1 Add lock file, update mocha
• 69ecf79 Merge remote-tracking branch 'upstream/master' into merge-from-upstream
• 8d726a6 Merge pull request #265 from Clever/mcab/explicitly-update-dependency
• fe30eee 4.0.1
• 015be26 chore: Bump xml-encryption from ^2.0.0 to ^3.0.2
• 35e3b9a chore: Bump xml-crypto from ^3.0.0 to ^3.0.1
• 80f5c7b chore: Bump @ xmldom/xmldom from ^0.8.3 to ^0.8.6
• fe5925d ci: Readd build step
• 13359fb Merge pull request #262 from Clever/mcab/fix-ci-majors
• 477e7b4 ci: Override installing packages command
• a5388b8 ci: Update pipeline to support major versions sanely
• 9900264 Merge pull request #261 from Clever/SECNG-1381/update-dependencies
• cfb5ce4 4.0.0
• 50e8ce6 chore: Remove whitespace normalization before xml-crypto calls
• beeb396 deps: Update mocha from ^8.2.0 to ^8.4.0
• b13ee9d chore: Tidy dependencies
• 3de2fd6 deps: Update xml-crypto from ^2.0.0 to ^3.0.0
• 9299ffa deps: Update xmldom ^0.4.0 to @ xmldom/xmldom ^0.8.3
• 964a5a0 deps: Update xml-encryption from ^1.2.1 to ^2.0.0
• 5e25e09 chore: Ignore additional files for npm
• 6da3e9c ci: Fix publishing
• 46df4ae Merge pull request #260 from Clever/SECNG-1381/update-modernize-rebuild
• c197310 3.1.0
• 9e19c65 docs: Maintenance notice

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}