Dependabot updates (#404)

* chore(deps): bump mocha from 10.0.0 to 10.1.0 (#401)

Bumps [mocha](https://github.com/mochajs/mocha) from 10.0.0 to 10.1.0.
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md)
- [Commits](mochajs/mocha@v10.0.0...v10.1.0)

---
updated-dependencies:
- dependency-name: mocha
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix: package.json & package-lock.json to reduce vulnerabilities (#403)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-XMLDOMXMLDOM-3042243

Co-authored-by: snyk-bot <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Yuan Ruo <[email protected]>
Co-authored-by: snyk-bot <[email protected]>

package.json

@@ -33,7 +33,7 @@
     "jsonwebtoken": "^8.3.0",
     "lodash": "^4.17.21",
     "xml-crypto": "^3.0.0",
-    "xml-encryption": "^2.0.0",
+    "xml-encryption": "^3.0.0",
     "xml2json-light": "^1.0.6",
     "xpath": "0.0.32"
   },
@@ -53,7 +53,7 @@
     "eslint-plugin-node": "11.1.0",
     "eslint-plugin-promise": "5.2.0",
     "eslint-plugin-standard": "5.0.0",
-    "mocha": "10.0.0",
+    "mocha": "10.1.0",
     "mustache": "4.2.0",
     "nyc": "15.1.0",
     "sinon": "^14.0.1",