• chore: regenerate the changelog with gren 5.1.1 (#601) (e0d9fc2)
• Merge pull request #600 from node-saml/chore/merge-master-into-6.x (ee1b6c3)
• chore: merge master into 6.x (b0471a8)
• test: cover spec-required Signature elements and fail-closed signing errors (#599) (677f9ab)
• fix: omit KeyInfo when there is no content for it (#597) (d2aee9b)
• test: prove behavior through supported APIs instead of deprecated ones (#593) (fb8e7c6)
• chore: deprecate validateElementAgainstReferences() (#592) (5f7da8f)
• docs: describe the library as it is (#590) (b901469)
• fix: discard comments when dereferencing same-document references (#589) (21d1c26)
• fix: escape carriage returns in serialized signing output (#588) (b40b4d6)
• fix: apply transforms after a canonicalization and remove only the verified Signature (#585) (d8d5be7)
• fix: handle CRLF PEMs in derToPem() and store every file byte-for-byte (#582) (675263b)
• fix: canonicalize a node-set left at the end of the transforms (#581) (22bfbc9)
• fix: publish signed references only after SignatureValue verifies (#580) (4359e84)
• docs: note the inclusive canonicalization output change for upgraders (#579) (58fb086)
• docs: cover detached signatures in the getOriginalXmlWithIds() deprecation (#578) (3e30cb5)
• fix: preserve input references during signature creation (#577) (c7d552b)
• Refine code commenting guidelines (#574) (2ac129b)
• Fix double callback invoke on unhandled exception (#528) (ee4d510)
• chore: deprecate the internal helpers 7.0 withdraws (#567) (c51742c)
• test: pin the hoisted ancestor namespace behaviour #541 fixed (#572) (ebafaef)
• Add agent instructions (#544) (0409418)
• Minor dependencies update (#543) (711ca97)
• fix: collect all subset namespace prefixes when filtering ancestor namespaces (#541) (7d8cdfe)
• Deprecate getOriginalXmlWithIds() (#516) (8353bab)
• fix: Support nested enveloped signature location (#525) (#526) (f5c4d22)
• fix: Use constant-time comparison for HMAC verification (#522) (#523) (b673581)
• fix: id attribute detection and generation during signing (resolves #520) (#521) (73db72d)
• Update README.md to reflect getCertFromKeyInfo changes (#470) (4f4e0ed)
• Add support for inserting and signing Object elements inside the Signature (#506) (0c4813d)
• Add README sponsors (#518) (34cb055)
• README.md: Remove obsolete requirement for openssl binary (#514) (ff1f58a)
• Add tests for sha256-rsa-MGF1 (#515) (02a405a)
• Add support for sha256-rsa-MGF1 signing algorithm (#328) (#488) (8e692cf)
• Remove all reference XML data if any are corrupted (#500) (9b91edf)
• Adjust deprecation to better reflect real-world usage (#498) (1ecc1fa)
• Introduce new .getSignedReferences() function of signature to help prevent signature wrapping attacks (#495) (cc24755)
• CVE-2025-29774 and CVE-2025-29775 (#494) (055c5dd)
• Exports C14nCanonicalization, ExclusiveCanonicalization (#471) (f9b3682)