init

.circleci/config.yml

@@ -2,7 +2,7 @@ version: 2.1
 parameters:
   node-version:
     type: string
-    default: "18.13.0"
+    default: "24.10.0"
 orbs:
   node: circleci/node@5.0.0
   slack: circleci/slack@4.5.3
@@ -72,7 +72,7 @@ commands:
 jobs:
   test:
     docker: # run the steps with Docker
-      - image: cimg/node:18.13.0
+      - image: cimg/node:24.10.0
     steps:
       - checkout
       - node/install:
@@ -88,7 +88,7 @@ jobs:
           command: npm test
   build:
     docker:
-      - image: cimg/node:18.13.0
+      - image: cimg/node:24.10.0
         user: root
     steps:
       - checkout

.nsprc

@@ -1,17 +1,14 @@
 {
-  "GHSA-27h2-hvpr-p74q": {
+  "GHSA-fjxv-7rqg-78g4": {
     "active": true,
-     "notes": "We don't use verify function from jsonwebtoken, so not affected"
+    "notes": "This vulnerability is in form-data used transitively via deprecated 'request' library. We do not use form-data directly. Waiting on upstream libraries to upgrade."
   },
-  "GHSA-wc69-rhjr-hc9g": {
+  "GHSA-869p-cjfg-cm3x": {
     "active": true,
-    "notes": "Bunyan library set only new Date to momentjs as parameter"
+    "notes": "jws vulnerability in jsonwebtoken (via @elastic.io/maester-client -> elasticio-sailor-nodejs). This is a transitive dependency from sailor. Waiting on upstream libraries to upgrade."
   },
-  "GHSA-hrpp-h998-j3pp": {
+  "GHSA-6rw7-vpxm-498p": {
     "active": true,
-    "notes": "There is no query-string user input in sailor"
-  },
-  "GHSA-fjxv-7rqg-78g4": {
-    "active": true
+    "notes": "qs vulnerability in request (via co-request). This is a transitive dependency. The deprecated 'request' library is used by co-request. Waiting on upstream libraries to upgrade."
   }
 }

CHANGELOG.md

@@ -1,3 +1,11 @@
+## 1.0.2 (February 13, 2026)
+* Updated the following dependencies:
+ * Node.js version 22 -> 24
+ * axios 1.12.2 -> 1.13.5
+ * elasticio-sailor-nodejs 2.7.6 -> 2.7.8
+* Added `strong-soap` v5.0.7 lib support
+* Removed unused `elasticio-node` dependency
+
 ## 1.0.1 (September 26, 2025)
 * Updated the following dependencies:
  * Node.js version 18 -> 22

README.md

@@ -54,6 +54,7 @@ Built-in Node.js global objects are also supported.
 - [`axios`](https://github.com/axios/axios) - A well-known HTTP Client [Documentation](https://www.npmjs.com/package/axios)
 - [`request`](https://github.com/request/request) - Http Client (wrapped in `co` - [this library](https://www.npmjs.com/package/co-request) so that it is pre-promisified). We recommend using `axios`. Support for `request` is maintained for backward compatibility only.
 - `_` - [Lodash](https://lodash.com/)
+- [`strong-soap`](https://github.com/loopbackio/strong-soap) - SOAP client for invoking web services
 
 ## Credentials
 

actions/code.js

@@ -2,9 +2,9 @@
 const _ = require('lodash');
 const axios = require('axios');
 const vm = require('vm');
-const { messages } = require('elasticio-node');
 const co = require('co');
 const request = require('co-request');
+const { soap } = require('strong-soap');
 
 function wait(timeout) {
   return new Promise((ok) => {
@@ -16,6 +16,11 @@ function wait(timeout) {
   });
 }
 
+const messages = {
+  newMessageWithBody: (body) => ({ body, headers: {} }),
+  newEmptyMessage: () => ({ body: {}, headers: {} }),
+};
+
 // eslint-disable-next-line consistent-return,func-names
 exports.process = async function (msg, conf, snapshot) {
   const vmExports = {};
@@ -43,6 +48,7 @@ exports.process = async function (msg, conf, snapshot) {
     // Other Libraries
     _,
     axios,
+    soap,
     request,
     wait: wait.bind(this),
   });

component.json

@@ -1,6 +1,6 @@
 {
   "title": "Node.js Code with Credentials",
-  "version": "1.0.1",
+  "version": "1.0.2-dev.1",
   "description": "You can write your own code and deploy it as part of integration process. With the use of credentials.",
   "docsUrl": "https://docs.elastic.io/components/code-with-credentials/index.html",
   "authClientTypes": [