[sw-release-bot]

🤖 New release

• xml-sec: 0.3.0 -> 0.4.0

Changelog

0.4.0 - 2026-10-30

Added

• (cms) add CMS signature provider (#343)
• [breaking] build XMLDSig verification without std (#331)
• (xmldsig) expose KeyInfo candidates of verified signatures (#329)
• (xmldsig) [breaking] stream detached payloads into sessions (#328)
• (xmldsig) [breaking] verify the signature before references (#326)

Fixed

• (interop) stop pinning the XAdES corpus to a commit (#337)

Performance

• (cli) parse sign and verify input once (#339)

---

This PR was generated with release-plz.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: structured-world/xml-sec
• Branch: main
• File: .coderabbit.yaml
• Commit: 396e6a4
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 9af25391-6df7-418e-8f9c-3ea3ce741c81

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}