Skip to content

chore(deps): bump xml-crypto from 6.3.3 to 6.4.0 - #1129

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/xml-crypto-6.4.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/xml-crypto-6.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps xml-crypto from 6.3.3 to 6.4.0.

Release notes

Sourced from xml-crypto's releases.

v6.4.0

  • chore: merge master into 6.x (5c430ccd)
  • feat: add computeSignatureAsync() and checkSignatureAsync(), fix asynchronous verification through a callback, and deprecate the callback form (#657) (84df7801)
  • chore: deprecate signing and verifying a document that has a DOCTYPE (#661) (8a7e264b)
  • chore: warn about input that 7.0 rejects (#660) (b4f1335d)
  • chore: deprecate renderNs() and processInner() ahead of 7.0 (#656) (6004896c)
  • chore: deprecate enveloped-signature after a canonicalization (#649) (557dfffe)
  • feat: check private-key data against its label in toPem() and pemToDer() (#658) (0c38c809)
  • chore: put the lockfile back in sync for npm 8 (#659) (f844dedb)
  • chore: group tests and deprecations in the changelog (#651) (a311adc0)
Changelog

Sourced from xml-crypto's changelog.

6.4.0 (2026-10-14)

🚀 Minor Changes

  • [bug] [enhancement] [deprecation] feat: add computeSignatureAsync() and checkSignatureAsync(), fix asynchronous verification through a callback, and deprecate the callback form #657
  • [enhancement] feat: check private-key data against its label in toPem() and pemToDer() #658

⚠️ Deprecations

  • [deprecation] chore: deprecate signing and verifying a document that has a DOCTYPE #661
  • [deprecation] chore: warn about input that 7.0 rejects #660
  • [deprecation] chore: deprecate renderNs() and processInner() ahead of 7.0 #656
  • [deprecation] chore: deprecate enveloped-signature after a canonicalization #649

🔗 Dependencies

  • [dependencies] chore: put the lockfile back in sync for npm 8 #659

⚙️ Technical Tasks

  • [chore] chore: merge master into 6.x #662
  • [chore] chore: group tests and deprecations in the changelog #651

Commits
  • 97ee5e4 Release 6.4.0
  • 5c430cc chore: merge master into 6.x
  • 84df780 feat: add computeSignatureAsync() and checkSignatureAsync(), fix asynchronous...
  • 8a7e264 chore: deprecate signing and verifying a document that has a DOCTYPE (#661)
  • b4f1335 chore: warn about input that 7.0 rejects (#660)
  • 6004896 chore: deprecate renderNs() and processInner() ahead of 7.0 (#656)
  • 557dfff chore: deprecate enveloped-signature after a canonicalization (#649)
  • 0c38c80 feat: check private-key data against its label in toPem() and pemToDer() (#658)
  • f844ded chore: put the lockfile back in sync for npm 8 (#659)
  • a311adc chore: group tests and deprecations in the changelog (#651)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [xml-crypto](https://github.com/node-saml/xml-crypto) from 6.3.3 to 6.4.0.
- [Release notes](https://github.com/node-saml/xml-crypto/releases)
- [Changelog](https://github.com/node-saml/xml-crypto/blob/v6.4.0/CHANGELOG.md)
- [Commits](node-saml/xml-crypto@v6.3.3...v6.4.0)

---
updated-dependencies:
- dependency-name: xml-crypto
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 19, 2026
@coderabbitai

coderabbitai Bot commented Oct 19, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: a6338e3f-5d58-4739-bd17-1a289640abff

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants