[Snyk] Security upgrade passport-saml from 0.31.0 to 3.2.2

[liorkesos]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	656/1000 Why? Recently disclosed, Has a fix available, CVSS 7.4	Improper Verification of Cryptographic Signature SNYK-JS-PASSPORTSAML-3043103	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: passport-saml

The new version differs by 246 commits.

• 8b7e3f5 Merge pull request from GHSA-m974-647v-whv7
• 6ba76ba Release 3.2.1
• 8f3ffcd deps: upgrade release-it, npm dedupe
• b81c36c deps: npm audit fix
• ef1dcfc Export AuthenticateOptions type (fixed bug with using permissions service without context entity #657)
• 3e908fa test: update error message to match new xml-encryption format.
• b9de63b Update xml-encryption to get rid of vulnerable node-forge (fixed users service usage in submenu #667)
• d5ab7be Release 3.2.0
• e21a04b Update dependencies (folderslist hotfix #640)
• 9e88bba Release 3.1.2
• 9aef839 Update xmldom to 0.7.2 (added projects 'dueDate' support #633)
• a3174b4 Release 3.1.1
• d782971 Patch algorithm definitions (serial search truncates title #625)
• 3a13fb9 Release 3.1.0
• f1e00b6 Limit transforms for signed nodes (fixed issue #592 #595)
• 2a1699b Add assertion attributes to child object on profile (hotfix document preview #593)
• c7b7226 Rebuild changelog for 3.0.0 (The folder doesn't show in the document row #605)
• 522fe1d Fix typo OnBefore -> NotBefore (Attachments - remove unwanted buttons #611)
• 8cc0d8e Update README with new Cache Provider interface (fixed issue #605 now shows projects title in middlepane #608)
• bf41764 Fix validateInResponseTo null check (Responsive Fixes #596)
• 683f767 Release 3.0.0
• 4eff276 Remove deprecated field `privateCert` from README, tests (Add HTML tags to title #591)
• 6a7e476 Add support for more tags in the changelog (search menu item #592)
• 52ede4c Create codeql-analysis.yml

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.