v3: Bump xml2js from 0.4.23 to 0.5.0

[seromenho]

Description

This node-saml/node-saml#268 for v3

Checklist:

• Issue Addressed: [ ]
• Link to SAML spec: [ ]
• Tests included? [ ]
• Documentation updated? [ ]

[seromenho]

@cjbarth Hi, can we still add security fixes to previous versions? If so this is the xml2js fix for v3. What do you think?
Thanks

[cjbarth]

I'll land it, but that package is marked as Deprecated, so I'm not inclined to make a release. At some point everyone is going to have to update to get continuing security fixes.

[seromenho]

@cjbarth It makes sense. I've seen you have merged.
Why you are not inclined to make a release? Is it because the package is already marked as deprecated? Let me know if I can help somehow create the release.

[cjbarth]

Yes, that is correct. At what point should we stop supporting a deprecated package? You can always point your package.json to a GitHub branch (or commit) if you need more time to migrate.

npm install "https://github.com/node-saml/passport-saml.git#3.x" --save