Skip to content

Bump robrichards/xmlseclibs from 3.1.4 to 3.1.5 - #393

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/robrichards/xmlseclibs-3.1.4
Open

Bump robrichards/xmlseclibs from 3.1.4 to 3.1.5#393
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/robrichards/xmlseclibs-3.1.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Dec 8, 2025

Copy link
Copy Markdown
Contributor

Bumps robrichards/xmlseclibs from 3.1.4 to 3.1.5.

Release notes

Sourced from robrichards/xmlseclibs's releases.

3.1.5

Validate AES-GCM Authentication Tag

Changelog

Sourced from robrichards/xmlseclibs's changelog.

xmlseclibs.php ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| ??, ??? ????, 4.0.0 Security Improvements:

Features:

  • Remove support for PHP < 8.0
  • add support for RSA PSS (Julius Türich and joonlabs)
  • use phpseclib for encrypting rsa-oaep and rsa-oaep-mgf1p (Julius Türich and joonlabs)
  • use phpseclib for all crypto (symmetric, RSA-1.5, RSA signatures, X.509); OpenSSL extension is now optional

12, Dec 2026, 3.1.5 Security:

  • Validate AES-GCM Authentication Tag (Sideni)

08, Dec 2025, 3.1.4 Security:

  • fix canonicalization bypass error (d0ge)

20, Nov 2024, 3.1.3 Bug Fixes:

  • remove loadKey check due to BC issues

20, Nov 2024, 3.1.2 Improvements:

  • Add tab to list of whitespace values to remove from cert. refs #252
  • loadKey should check return value for openssl_get_privatekey (sammarshallou)
  • Switch to GitHub actions (SharkMachine)

05, Sep 2020, 3.1.1 Features:

  • Support OAEP (iggyvolz)

Bug Fixes:

  • Fix AES128 (iggyvolz)

Improvements:

  • Fix tests for older PHP

22, Apr 2020, 3.1.0 Features:

  • Support AES-GCM. Requires PHP 7.1. (François Kooman)

Improvements:

  • Fix Travis tests for older PHP versions.
  • Use DOMElement interface to fix some IDEs reporting documentation errors

Bug Fixes:

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Dec 8, 2025
@phavekes

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [robrichards/xmlseclibs](https://github.com/robrichards/xmlseclibs) from 3.1.4 to 3.1.5.
- [Release notes](https://github.com/robrichards/xmlseclibs/releases)
- [Changelog](https://github.com/robrichards/xmlseclibs/blob/master/CHANGELOG.txt)
- [Commits](robrichards/xmlseclibs@3.1.4...3.1.5)

---
updated-dependencies:
- dependency-name: robrichards/xmlseclibs
  dependency-version: 3.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump robrichards/xmlseclibs from 3.1.3 to 3.1.4 Bump robrichards/xmlseclibs from 3.1.4 to 3.1.5 Jul 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/composer/robrichards/xmlseclibs-3.1.4 branch from 34e18ec to 054f7bc Compare July 22, 2026 07:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant