@techspokes/typescript-wsdl-client 1.0.2 → 1.0.4

package/dist/app/generateApp.js

@@ -528,11 +528,11 @@ function generatePackageJson(appDir, force) {
             fastify: "^5.10.0",
             "fastify-plugin": "^6.0.0",
             saxes: "^6.0.0",
-            soap: "^1.9.3",
+            soap: "^1.10.0",
         },
         devDependencies: {
             "@types/node": "^26.1.1",
-            tsx: "^4.23.0",
+            tsx: "^4.23.1",
             typescript: "^6.0.3",
         },
     };

package/docs/releases/v1.0.3.md

@@ -0,0 +1,37 @@
+# TypeScript WSDL Client v1.0.3
+
+## Stable Dependency Tooling
+
+Version 1.0.3 refreshes the SOAP runtime and TypeScript execution tooling while preserving the compiler compatibility required by repository validation and generated projects.
+
+## What This Improves
+
+The package and generated app scaffold now use `soap` 1.10.0 and `tsx` 4.23.1. These updates keep runtime SOAP integration and TypeScript execution current without changing generated client, OpenAPI, gateway, or app behavior.
+
+TypeScript remains on the supported 6.x line because TypeScript 7 changes the compiler package exports and JavaScript API used by validation and conformance tests. Dependabot now defers only TypeScript 7.x updates until that compiler migration is implemented and validated separately.
+
+## Highlights
+
+- Updates the `soap` runtime dependency minimum to 1.10.0.
+- Updates the `tsx` development dependency minimum to 4.23.1.
+- Aligns generated app dependency pins with the refreshed root dependencies.
+- Retains TypeScript 6.0.3 compatibility for compiler API and CLI validation.
+- Defers TypeScript 7.x Dependabot updates pending a dedicated migration.
+
+## Upgrade Notes
+
+No generated-code or public API changes are introduced. Existing consumers can update normally, and newly generated apps receive the refreshed `soap` and `tsx` dependency ranges.
+
+## Validation
+
+- CI passed.
+- The complete WSDL capability conformance suite passed.
+- NPM package contents were validated.
+- Agent skill artifact was validated and packaged.
+- Release preflight passed against the target tag.
+
+## Notes
+
+Release tag: `v1.0.3`.
+
+TypeScript 7 adoption remains a separate maintenance task because its native compiler package does not preserve the TypeScript 6 JavaScript compiler API and CLI export behavior used by this repository.

package/docs/releases/v1.0.4.md

@@ -0,0 +1,45 @@
+# TypeScript WSDL Client v1.0.4
+
+## Secure Dependency Delivery
+
+Version 1.0.4 is the next public patch after the retired v1.0.3 candidate. It refreshes SOAP and TypeScript execution tooling, remediates vulnerable direct and transitive dependencies, and updates release workflows without changing generated client, OpenAPI, gateway, or app behavior.
+
+## What This Improves
+
+The package and generated app scaffold now use `soap` 1.10.0 and `tsx` 4.23.1. The direct `fast-xml-parser` and `js-yaml` dependency floors are updated to secure versions, while the refreshed lockfile resolves the reported Axios, brace expansion, routing, URI, and YAML advisories.
+
+TypeScript remains on the supported 6.x line because TypeScript 7 changes compiler package exports and JavaScript APIs used by validation and conformance tests. Dependabot continues to defer only TypeScript 7.x updates until that compiler migration is implemented and validated separately.
+
+GitHub Actions workflows now use `actions/setup-node` v7. Security reporting guidance is aligned with Node.js 24 and GitHub private vulnerability reporting.
+
+## Highlights
+
+- Updates the `soap` runtime dependency minimum to 1.10.0.
+- Updates the `tsx` development dependency minimum to 4.23.1.
+- Updates `fast-xml-parser` to 5.10.1 and `js-yaml` to 5.2.2 or newer compatible releases.
+- Refreshes transitive HTTP, brace expansion, routing, URI, and YAML dependencies.
+- Aligns generated app dependency pins with the refreshed root dependencies.
+- Retains TypeScript 6.0.3 compatibility for compiler API and CLI validation.
+- Defers TypeScript 7.x Dependabot updates pending a dedicated migration.
+- Upgrades GitHub workflows to `actions/setup-node` v7.
+
+## Upgrade Notes
+
+No generated-code or public API changes are introduced. Existing consumers can update normally, and newly generated apps receive the refreshed `soap` and `tsx` dependency ranges.
+
+Users upgrading from v1.0.2 receive the dependency tooling changes originally planned for v1.0.3 together with the security remediation in this release. Version 1.0.3 was retired before publication and never shipped to npm.
+
+## Validation
+
+- CI passed.
+- The complete WSDL capability conformance suite passed.
+- npm package contents were validated.
+- `npm audit` reported zero vulnerabilities.
+- The agent skill artifact was validated and packaged.
+- Release preflight passed against the target tag.
+
+## Notes
+
+Release tag: `v1.0.4`.
+
+Version 1.0.3 remains permanently marked as an abandoned release candidate and was never published to npm.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@techspokes/typescript-wsdl-client",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Turn legacy WSDL/SOAP services into typed TypeScript clients, OpenAPI 3.1 specs, and production-ready Fastify REST gateways. Built for enterprise SOAP modernization.",
   "keywords": [
     "wsdl",
@@ -109,16 +109,16 @@
     "fastify": "^5.10.0",
     "fastify-plugin": "^6.0.0",
     "rimraf": "^6.1.3",
-    "tsx": "^4.23.0",
+    "tsx": "^4.23.1",
     "typescript": "^6.0.3",
     "vitest": "^4.1.10"
   },
   "dependencies": {
     "@apidevtools/swagger-parser": "^12.1.0",
-    "fast-xml-parser": "^5.10.0",
-    "js-yaml": "^5.2.1",
+    "fast-xml-parser": "^5.10.1",
+    "js-yaml": "^5.2.2",
     "saxes": "^6.0.0",
-    "soap": "^1.9.3",
+    "soap": "^1.10.0",
     "yargs": "^18.0.0"
   },
   "funding": {