repos/saml-oidc-bridge
5
0
Fork 0
Code Issues Pull Requests Actions Packages Releases 10 Activity

fix(deps): update module github.com/russellhaering/goxmldsig to v1.6.0 #32

Merged
luke merged 1 commits from renovate/github.com-russellhaering-goxmldsig-1.x into main 2026-03-21 10:38:08 +00:00
Conversation 0 Commits 1 Files Changed 2 +3 -1
renovate-bot commented 2026-03-18 06:02:31 +00:00
Member
Copy Link

This PR contains the following updates:

Package Change Age Confidence
github.com/russellhaering/goxmldsig v1.5.0 → v1.6.0 age confidence

Release Notes

russellhaering/goxmldsig (github.com/russellhaering/goxmldsig)

v1.6.0

Compare Source

What's Changed

  • Security: Fix possible signature validation bypass caused by loop variable capture in validateSignature (GHSA-479m-364c-43vc)
  • Bump minimum Go version to 1.23
  • Bump github.com/beevik/etree to v1.6.0
  • Add fuzz tests for XML signature validation and canonicalization

Full Changelog: https://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/russellhaering/goxmldsig](https://github.com/russellhaering/goxmldsig) | `v1.5.0` → `v1.6.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2frussellhaering%2fgoxmldsig/v1.6.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2frussellhaering%2fgoxmldsig/v1.5.0/v1.6.0?slim=true) | --- ### Release Notes <details> <summary>russellhaering/goxmldsig (github.com/russellhaering/goxmldsig)</summary> ### [`v1.6.0`](https://github.com/russellhaering/goxmldsig/releases/tag/v1.6.0) [Compare Source](https://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0) #### What's Changed - **Security:** Fix possible signature validation bypass caused by loop variable capture in `validateSignature` (GHSA-479m-364c-43vc) - Bump minimum Go version to 1.23 - Bump `github.com/beevik/etree` to v1.6.0 - Add fuzz tests for XML signature validation and canonicalization **Full Changelog**: <https://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43Ny44IiwidXBkYXRlZEluVmVyIjoiNDMuNzcuOCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9kZXBlbmRlbmNpZXMiXX0=-->
renovate-bot added 1 commit 2026-03-18 06:02:31 +00:00
fix(deps): update module github.com/russellhaering/goxmldsig to v1.6.0
All checks were successful
Validate PR Title / validate (pull_request) Successful in 4s
Details
d63c3b3b70
luke merged commit 33aff642b1 into main 2026-03-21 10:38:08 +00:00
luke deleted branch renovate/github.com-russellhaering-goxmldsig-1.x 2026-03-21 10:38:08 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
 Kind/Bug
Something is not working
 Kind/Documentation
Documentation changes
 Kind/Enhancement
Improve existing functionality
 Kind/Feature
New functionality
 Kind/Security
This is security issue
 Kind/Testing
Issue or pull request related to testing
Priority
Critical
The priority is critical
Priority
High
The priority is high
Priority
Low
The priority is low
Priority
Medium
The priority is medium
Reviewed
Confirmed
Issue has been confirmed
Reviewed
Duplicate
This issue or pull request already exists
Reviewed
Invalid
Invalid issue
Reviewed
Won't Fix
This issue won't be fixed
Status
Abandoned
Somebody has started to work on this but abandoned work
Status
Blocked
Something is blocking this issue or pull request
Status
Need More Info
Feedback is required to reproduce issue or to continue work
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
ai-review-bot gitea-actions-bot luke renovate-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: repos/saml-oidc-bridge#32
Delete Branch "renovate/github.com-russellhaering-goxmldsig-1.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?