From 0b62013edc90b3e56ab6019aada0c70c0b693f77 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 4 Sep 2026 05:44:36 +0000 Subject: [PATCH] build(deps): update signxml requirement in /services/api Updates the requirements on [signxml](https://github.com/XML-Security/signxml) to permit the latest version. - [Release notes](https://github.com/XML-Security/signxml/releases) - [Changelog](https://github.com/XML-Security/signxml/blob/main/Changes.rst) - [Commits](https://github.com/XML-Security/signxml/compare/v3.2.0...v5.1.0) --- updated-dependencies: - dependency-name: signxml dependency-version: 5.1.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- services/api/requirements.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/api/requirements.in b/services/api/requirements.in index 09452252..17dabfd9 100644 --- a/services/api/requirements.in +++ b/services/api/requirements.in @@ -61,7 +61,7 @@ pyhanko>=0.36.2 # PAdES certificate-based PDF digital signatures (esi pypdf>=6.16.1 # CVE-2026-84310/-84311 floor (-84309 fixed in 6.16.0, so 6.16.1 clears all three; was 6.15.0 for -71852/-71870, 6.14.2 for -59935/-59936); contract/spec text extraction for the review engine (review.py) defusedxml>=0.7.1 # XXE / billion-laughs hardening for untrusted CityGML parsing (citygml.py) pyarrow>=16.0 # columnar Parquet export of the model element set (model_query.to_parquet) -signxml>=3.2 # SAML 2.0 assertion XML-DSig signature verification (saml.py) +signxml>=5.1.0 # SAML 2.0 assertion XML-DSig signature verification (saml.py) ezdxf>=1.1 # DXF quantity takeoff — 2D CAD estimating (dxf_takeoff.py); MIT, pure-Python # --- caching ---