[Snyk] Security upgrade soap from 0.19.2 to 0.35.0

[jwarkentin]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	556/1000 Why? Recently disclosed, Has a fix available, CVSS 5.4	XML External Entity (XXE) Injection SNYK-JS-XMLDOM-1084960	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: soap

The new version differs by 160 commits.

• daea0b0 Release v0.35.0
• 2fef944 upgraded xml-crypto to latest version (#1131)
• 9be0b74 Release v0.34.0
• d1790b5 fix non lower case ?wsdl handling (#1129)
• ec53c51 Fixing bug: if options.signatureAlgorithm = ..sha256 => will be generated two Reference to Body. (#1128)
• ac6db98 Remove constructor overload (#1127)
• 5fc0710 Drop bluebird (#1125)
• 4fc5b05 Upgrade uuid (#1124)
• 2120a1a Avoid lodash where possible (#1122)
• 3e49710 Move static-serve to dev dependencies (#1121)
• 471073b Replace concat-stream with get-stream (#1123)
• 8884a96 Release v0.33.0
• 1f58e6e Added an option to directly return the underlying sax stream (#1120)
• ee59f86 Convert decimals (#1118)
• 069276b bump lodash to 14.17.19 (#1117)
• 11bcc3e Release v0.32.0
• 5c3c810 Bug where no prototypical inheritence chain exists (#1110)
• 55e51fb replace === with startsWith (#1116)
• 7f5cf4c Add overrideImportLocation option (#1114)
• 1a8bcb7 Move @ types/requests dependency into devDependencies (#1111)
• 699b984 Clear http client header (#1103)
• cd8a852 Escape username and password in wss (#1107)
• e2b69b1 Release v0.31.0
• 5356c94 Fixes bug when envelopeKey is changed and WSSecurityCert is set (#1106)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic