[sw-release-bot]

🤖 New release

• xml-sec: 0.4.1 -> 0.5.0

Changelog

0.5.0 - 2026-11-02

Added

• (provider) [breaking] admit digest state and type its refusals (#364)

Performance

• (xslt) evaluate XPath without rebuilding its context per call (#374)
• (xslt) node paths without a sibling scan inside XPath functions (#372)
• hash arena identities without SipHash in content tables (#370)
• (xmldsig) execute each signed Reference's transforms once (#369)
• (xslt) run a 16384-item transform within default limits (#366)

---

This PR was generated with release-plz.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: structured-world/xml-sec
• Branch: main
• File: .coderabbit.yaml
• Commit: d2a3d5e
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 82ccb98f-431b-4438-b7f6-44c35ccf95f4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn