Release notes for 3.0.1 to 4.0.1

[donhcd]

I'd like to upgrade my version but I'm a bit nervous - why was the major version bumped?

[mcab]

The explicit version bumps houses the messages. I'll try to be clearer on the merge.

3.0.1: fca725b

Bumping up xmlbuilder to xmlbuilder2 revealed some differences in XML building.

This fixes create_metadata() to output correctly given these new changes.

3.1.0: c197310

• Closes Fix express sample so post_assert callback doesn't throw an error #183. Addresses some issues with using the example in strict mode.
• Closes use non-deprecated Buffer.from API #231. Replaces Buffer() with Buffer.from().
• Closes Addresses problems using saml2 with webpack and typescript #233. Uses underscore in a manner more compatible with TypeScript.
• Closes Update README.md #238. Replaces body-parser with urlencoded() for express >=4.
• Adds maintenance notice.

4.0.0: cfb5ce4

Updates some dependencies.

Closes [...].

From #261 (comment):

• xml-encryption was bumped up to ^2.0.0, which drops support for Node 8, and uses native crypto functions. Any user still on Node 8 will be unable to use 4.x and onwards.
• @xmldom/xmldom was bumped up to ^0.8.3. This has a security fix for prototype pollution and other cases, but more critically, changes how normalization and serialization of XML documents occur. This can potentially affect the parsing of XML documents, but shouldn't affect the majority of cases.
• xml-crypto was bumped up to ^3.0.0, which uses @xmldom/xmldom's 0.8.3. If you don't find issues with xmldom parsing, you should be fine.

4.0.1: fe30eee

Addresses GHSA-crh6-fp67-6883 [1] by updating @xmldom/xmldom explicitly,
and other dependencies that use such.

[1] GHSA-crh6-fp67-6883

[mcab]

In short, a lot of dependencies around normalization around XML parsing were updated, especially for critical dependencies that handle decryption and parsing. Major bumps might be overkill, but it's possible people are still using this on Node <10, and wanted to not break things for those users.

[donhcd]

Thanks a ton for the summary @mcab! Good to know where they are now :)