From 7b6e5664b589b65f3bd4e38056d0cf8f4dad0ba8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 24 Oct 2026 20:49:57 +0000
Subject: [PATCH] build(deps): bump @boxyhq/saml20 from 1.20.1 to 1.22.0

Bumps [@boxyhq/saml20](https://github.com/ory/saml20) from 1.20.1 to 1.22.0.
- [Release notes](https://github.com/ory/saml20/releases)
- [Commits](https://github.com/ory/saml20/compare/1.20.1...1.22.0)

---
updated-dependencies:
- dependency-name: "@boxyhq/saml20"
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 27 +++++++++++++++------------
 package.json      |  2 +-
 2 files changed, 16 insertions(+), 13 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 6bafd855..8271a197 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
       "version": "1.4.2",
       "license": "Apache 2.0",
       "dependencies": {
-        "@boxyhq/saml20": "1.20.1",
+        "@boxyhq/saml20": "1.22.0",
         "next": "16.4.2",
         "react": "19.3.0",
         "react-dom": "19.3.0",
@@ -334,17 +334,20 @@
       }
     },
     "node_modules/@boxyhq/saml20": {
-      "version": "1.20.1",
-      "resolved": "https://registry.npmjs.org/@boxyhq/saml20/-/saml20-1.20.1.tgz",
-      "integrity": "sha512-PxobcNy278Nt0uBAG+3QZpk1hgY4z2aUyhX+ATBR9PryLK+kVV9ehscps+crDpcZxaILNxh2shCxI3AHmqjXSA==",
+      "version": "1.22.0",
+      "resolved": "https://registry.npmjs.org/@boxyhq/saml20/-/saml20-1.22.0.tgz",
+      "integrity": "sha512-B0yPUdPDIvivVVFSS5k4EOtwwfk406mGrEcF2ogYym4CNEm7UwFbkDsc6jKvwsz71sjrWvhXl/iZtXv3+EDljA==",
       "license": "MIT",
       "dependencies": {
         "@xmldom/xmldom": "0.9.12",
-        "xml-crypto": "6.3.0",
+        "xml-crypto": "6.3.3",
         "xml-encryption": "6.0.1",
         "xml2js": "0.6.2",
         "xmlbuilder": "15.1.1",
-        "xpath": "0.0.34"
+        "xpath": "0.0.35"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
       }
     },
     "node_modules/@cacheable/memory": {
@@ -8847,9 +8850,9 @@
       }
     },
     "node_modules/xml-crypto": {
-      "version": "6.3.0",
-      "resolved": "https://registry.npmjs.org/xml-crypto/-/xml-crypto-6.3.0.tgz",
-      "integrity": "sha512-UOFXhZf/paMcBYA9Gvr+XQQxLxfqoKTjfMkWJnPS0PcVEPcXdEn7etTbqONj0rwOtgBOlOAgB/0v4cNsR/hLWg==",
+      "version": "6.3.3",
+      "resolved": "https://registry.npmjs.org/xml-crypto/-/xml-crypto-6.3.3.tgz",
+      "integrity": "sha512-qJnp4Dv5tH8CPzXKitFcLiCxPcy3SnPVQ9eY4qKKsHahf7/Ri7zDwjWaBACarMkT0T6FP+LWzdibO+19b136rg==",
       "license": "MIT",
       "dependencies": {
         "@xmldom/is-dom-node": "^1.0.1",
@@ -8929,9 +8932,9 @@
       }
     },
     "node_modules/xpath": {
-      "version": "0.0.34",
-      "resolved": "https://registry.npmjs.org/xpath/-/xpath-0.0.34.tgz",
-      "integrity": "sha512-FxF6+rkr1rNSQrhUNYrAFJpRXNzlDoMxeXN5qI84939ylEv3qqPFKa85Oxr6tDaJKqwW6KKyo2v26TSv3k6LeA==",
+      "version": "0.0.35",
+      "resolved": "https://registry.npmjs.org/xpath/-/xpath-0.0.35.tgz",
+      "integrity": "sha512-8O+m2N04SwLpGw/1Grz2HD8ejnWDV7M1dMPgKKuOjhYh5W9H4pel/+06kInohIdpS2FeSbL4i8ID8c4tpxwq9Q==",
       "license": "MIT",
       "engines": {
         "node": ">=0.6.0"
diff --git a/package.json b/package.json
index 067ec813..2cfd4f2c 100644
--- a/package.json
+++ b/package.json
@@ -14,7 +14,7 @@
     "release": "git checkout release && git merge origin/main && release-it && git checkout main && git merge origin/release && git push origin main"
   },
   "dependencies": {
-    "@boxyhq/saml20": "1.20.1",
+    "@boxyhq/saml20": "1.22.0",
     "next": "16.4.2",
     "react": "19.3.0",
     "react-dom": "19.3.0",