repos/saml-oidc-bridge
5
0
Fork 0
Code Issues Pull Requests Actions Packages Releases 10 Activity

Compare commits

base: repos:v0.2.2
Branches Tags
repos:main
repos:v0.2.4 repos:v0.2.3 repos:v0.2.2 repos:v0.2.1 repos:v0.2.0 repos:v0.1.4 repos:v0.1.3 repos:v0.1.2 repos:v0.1.1 repos:v0.1.0
...
compare: repos:v0.2.4
Branches Tags
repos:main
repos:v0.2.4 repos:v0.2.3 repos:v0.2.2 repos:v0.2.1 repos:v0.2.0 repos:v0.1.4 repos:v0.1.3 repos:v0.1.2 repos:v0.1.1 repos:v0.1.0

2 Commits
v0.2.2 ... v0.2.4

Author SHA1 Message Date
renovate[bot]
364e543e8c fix(deps): update module github.com/coreos/go-oidc/v3 to v3.18.0 (#34)
Some checks failed
Release / Create Release (push) Has been skipped
Details
Release / Publish Docker Images (push) Has been skipped
Details
Release / Tag release (push) Failing after 18s
Details 
This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `v3.17.0` → `v3.18.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcoreos%2fgo-oidc%2fv3/v3.18.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fcoreos%2fgo-oidc%2fv3/v3.17.0/v3.18.0?slim=true) |

---

### Release Notes

<details>
<summary>coreos/go-oidc (github.com/coreos/go-oidc/v3)</summary>

### [`v3.18.0`](https://github.com/coreos/go-oidc/releases/tag/v3.18.0)

[Compare Source](https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0)

#### What's Changed

- .github: configure dependabot by [@&#8203;ericchiang](https://github.com/ericchiang) in [#&#8203;477](https://github.com/coreos/go-oidc/pull/477)
- .github: update go versions in CI by [@&#8203;ericchiang](https://github.com/ericchiang) in [#&#8203;480](https://github.com/coreos/go-oidc/pull/480)
- build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;478](https://github.com/coreos/go-oidc/pull/478)
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;479](https://github.com/coreos/go-oidc/pull/479)

**Full Changelog**: <https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDkuMyIsInVwZGF0ZWRJblZlciI6IjQzLjEwOS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->

Reviewed-on: #34
Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
Co-committed-by: renovate[bot] <renovate-bot@git.tainton.uk>
 2026-04-09 21:04:04 +00:00
renovate[bot]
33aff642b1 fix(deps): update module github.com/russellhaering/goxmldsig to v1.6.0 (#32)
Some checks failed
Release / Create Release (push) Has been skipped
Details
Release / Publish Docker Images (push) Has been skipped
Details
Release / Tag release (push) Failing after 6s
Details 
This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/russellhaering/goxmldsig](https://github.com/russellhaering/goxmldsig) | `v1.5.0` → `v1.6.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2frussellhaering%2fgoxmldsig/v1.6.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2frussellhaering%2fgoxmldsig/v1.5.0/v1.6.0?slim=true) |

---

### Release Notes

<details>
<summary>russellhaering/goxmldsig (github.com/russellhaering/goxmldsig)</summary>

### [`v1.6.0`](https://github.com/russellhaering/goxmldsig/releases/tag/v1.6.0)

[Compare Source](https://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0)

#### What's Changed

- **Security:** Fix possible signature validation bypass caused by loop variable capture in `validateSignature` (GHSA-479m-364c-43vc)
- Bump minimum Go version to 1.23
- Bump `github.com/beevik/etree` to v1.6.0
- Add fuzz tests for XML signature validation and canonicalization

**Full Changelog**: <https://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ny44IiwidXBkYXRlZEluVmVyIjoiNDMuNzcuOCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9kZXBlbmRlbmNpZXMiXX0=-->

Reviewed-on: #32
Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
Co-committed-by: renovate[bot] <renovate-bot@git.tainton.uk>
 2026-03-21 10:38:08 +00:00
2 changed files with 9 additions and 3 deletions
Expand all files Collapse all files

6
go.mod
View File

@@ -4,16 +4,16 @@ go 1.25.0
require (
github.com/beevik/etree v1.6.0
github.com/coreos/go-oidc/v3 v3.17.0
github.com/coreos/go-oidc/v3 v3.18.0
github.com/crewjam/saml v0.5.1
github.com/fsnotify/fsnotify v1.9.0
github.com/russellhaering/goxmldsig v1.5.0
github.com/russellhaering/goxmldsig v1.6.0
golang.org/x/oauth2 v0.36.0
gopkg.in/yaml.v3 v3.0.1
)
require (
github.com/go-jose/go-jose/v4 v4.1.3 // indirect
github.com/go-jose/go-jose/v4 v4.1.4 // indirect
github.com/jonboulle/clockwork v0.5.0 // indirect
github.com/mattermost/xml-roundtrip-validator v0.1.0 // indirect
golang.org/x/crypto v0.33.0 // indirect

6
go.sum
View File

@@ -10,6 +10,8 @@ github.com/coreos/go-oidc/v3 v3.16.0 h1:qRQUCFstKpXwmEjDQTIbyY/5jF00+asXzSkmkoa/
github.com/coreos/go-oidc/v3 v3.16.0/go.mod h1:wqPbKFrVnE90vty060SB40FCJ8fTHTxSwyXJqZH+sI8=
github.com/coreos/go-oidc/v3 v3.17.0 h1:hWBGaQfbi0iVviX4ibC7bk8OKT5qNr4klBaCHVNvehc=
github.com/coreos/go-oidc/v3 v3.17.0/go.mod h1:wqPbKFrVnE90vty060SB40FCJ8fTHTxSwyXJqZH+sI8=
github.com/coreos/go-oidc/v3 v3.18.0 h1:V9orjXynvu5wiC9SemFTWnG4F45v403aIcjWo0d41+A=
github.com/coreos/go-oidc/v3 v3.18.0/go.mod h1:DYCf24+ncYi+XkIH97GY1+dqoRlbaSI26KVTCI9SrY4=
github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
github.com/crewjam/saml v0.4.14 h1:g9FBNx62osKusnFzs3QTN5L9CVA/Egfgm+stJShzw/c=
github.com/crewjam/saml v0.4.14/go.mod h1:UVSZCf18jJkk6GpWNVqcyQJMD5HsRugBPf4I1nl2mME=
@@ -24,6 +26,8 @@ github.com/go-jose/go-jose/v4 v4.0.2 h1:R3l3kkBds16bO7ZFAEEcofK0MkrAJt3jlJznWZG0
github.com/go-jose/go-jose/v4 v4.0.2/go.mod h1:WVf9LFMHh/QVrmqrOfqun0C45tMe3RoiKJMPvgWwLfY=
github.com/go-jose/go-jose/v4 v4.1.3 h1:CVLmWDhDVRa6Mi/IgCgaopNosCaHz7zrMeF9MlZRkrs=
github.com/go-jose/go-jose/v4 v4.1.3/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08=
github.com/go-jose/go-jose/v4 v4.1.4 h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA=
github.com/go-jose/go-jose/v4 v4.1.4/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08=
github.com/jonboulle/clockwork v0.2.2 h1:UOGuzwb1PwsrDAObMuhUnj0p5ULPj8V/xJ7Kx9qUBdQ=
github.com/jonboulle/clockwork v0.2.2/go.mod h1:Pkfl5aHPm1nk2H9h0bjmnJD/BcgbGXUBGnn1kMkgxc8=
github.com/jonboulle/clockwork v0.5.0 h1:Hyh9A8u51kptdkR+cqRpT1EebBwTn1oK9YfGYbdFz6I=
@@ -46,6 +50,8 @@ github.com/russellhaering/goxmldsig v1.4.0 h1:8UcDh/xGyQiyrW+Fq5t8f+l2DLB1+zlhYz
github.com/russellhaering/goxmldsig v1.4.0/go.mod h1:gM4MDENBQf7M+V824SGfyIUVFWydB7n0KkEubVJl+Tw=
github.com/russellhaering/goxmldsig v1.5.0 h1:AU2UkkYIUOTyZRbe08XMThaOCelArgvNfYapcmSjBNw=
github.com/russellhaering/goxmldsig v1.5.0/go.mod h1:x98CjQNFJcWfMxeOrMnMKg70lvDP6tE0nTaeUnjXDmk=
github.com/russellhaering/goxmldsig v1.6.0 h1:8fdWXEPh2k/NZNQBPFNoVfS3JmzS4ZprY/sAOpKQLks=
github.com/russellhaering/goxmldsig v1.6.0/go.mod h1:TrnaquDcYxWXfJrOjeMBTX4mLBeYAqaHEyUeWPxZlBM=
github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
golang.org/x/crypto v0.25.0 h1:ypSNr+bnYL2YhwoMt2zPxHFmbAN1KZs/njMG3hxUp30=