release 2.0.0

[esarafianou]

Description

1. Prepares for release 2.0.0, which drops support for Node 8.
2. Also updates package lock file to version 2 which is backwards compatible to version 1

[radekk]

👍🏻

[gkwang]

Can we update this as well:

node-xml-encryption/package.json

Line 35 in 291f3f1

"node": ">=8"

[gkwang]

nit: Also do we still want to keep the package-lock file since this is a library and considering it was removed in the previous PR?

[esarafianou]

@gkwang was the package-lock file ever removed? Based on it's history here: https://github.com/auth0/node-xml-encryption/commits/master/package-lock.json, it's been around since Jan 2020.

[forty]

My 2 cents since I'm around ;) having or not a package lock is a recurring debate in npm modules.

It can still make sense to lock the dependencies of libraries, if only for the dev ones, as it makes CI build more reproducible (ie the build won't start failing when there is no change in the repository).

The lock will have no impact on the users of the library as it's not included in the package, and they should do their own locking

[gkwang]

Sounds good. I think we can leave the package-lock around to make some of our tools happy.