express 5.x. move types to devDependencies

[charlie-harvey]

Description

Express 5 is out! NestJS 11 is out! It relies on Express 5. But I can't do cool saml things because this library pushes @types/express on me at version 4. So I updated the package.json. That's all.

Checklist:

• Issue Addressed: [Express 5 ]

[shlomisas]

Any update on this one?? it also holds up back merge an important PR

[markstos]

I'm aligned with this.

It should not be the job of this project to ship the types for Express, Passport or Passport-Strategy.

Also, fine to use Express 5 instead of 4 for testing.

[cjbarth]

This is not an appropriate change because we export types that inherit from other types, so we have to export them for this all to work. As an example see

passport-saml/src/strategy.ts

Line 16 in 113412a

export abstract class AbstractStrategy extends PassportStrategy {

.

[cjbarth]

We're also not going to take on a semver major bump for a single update. We'll do it with the deprecation of a Node version and other updates to dependencies all around.

[cjbarth]

We are preparing a round of major releases starting with the xml-crypto library. We'll roll that up to node-saml with its semver major release, then we'll do the same here with passport-saml. If this is really blocking you, I suggest temporarily using a fork until this work is completed.