[sw-release-bot]

🤖 New release

• xml-sec: 0.3.0 -> 0.4.0

Changelog

0.4.0 - 2026-11-01

Added

• (xades) validate B-T, B-LT and B-LTA (#351)
• (x509) evaluate delta CRLs and cut verify overhead (#350)
• (cms) add CMS signature provider (#343)
• [breaking] build XMLDSig verification without std (#331)
• (xmldsig) expose KeyInfo candidates of verified signatures (#329)
• (xmldsig) [breaking] stream detached payloads into sessions (#328)
• (xmldsig) [breaking] verify the signature before references (#326)

Fixed

• (interop) stop pinning the XAdES corpus to a commit (#337)

Performance

• (xmldsig) sign with one document parse (#353)
• (cli) parse sign and verify input once (#339)

---

This PR was generated with release-plz.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: structured-world/xml-sec
• Branch: main
• File: .coderabbit.yaml
• Commit: c43a4ef
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 86587126-366f-4f6d-8eec-77c1c3a84c24

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn