savonrb / akami

91%

main: 91%

LAST BUILD ON BRANCH v1.4.0

branch: SELECT

CHANGE BRANCH

x

Sync Branches

• No branch selected
• dependabot/github_actions/actions/checkout-7.0.1
• dependabot/github_actions/coverallsapp/github-action-2.3.8
• dependabot/github_actions/ruby/setup-ruby-1.318.0
• dependabot/github_actions/ruby/setup-ruby-1.320.0
• dependabot/github_actions/ruby/setup-ruby-1.321.0
• dependabot/github_actions/rubygems/release-gem-1.4.1
• dependabot/github_actions/zizmorcore/zizmor-action-0.6.0
• dependabot/github_actions/zizmorcore/zizmor-action-0.6.1
• dependabot/github_actions/zizmorcore/zizmor-action-0.6.2
• dependabot/github_actions/zizmorcore/zizmor-action-0.6.3
• main
• pr-25-allow-timestamps-to-be-signed
• reimpl-48-signature-verification
• release-1.4.0
• setup-improvements
• undo-simplecov-workaround
• v1.4.0

Build # 35146680629

Build Type

push

github

Committed by web-flow

Commit Message

Cut 1.4.0 release

Bump to 1.4.0 and record the changelog entry.

First release since 1.3.3 (2024-02-13). Three backwards-compatible
functional changes have landed since then:

* Signed WS-Security timestamps (#47): Signature.new accepts a
  timestamp: true option (plus optional created_at/expires_at)
  that adds a wsu:Timestamp to the Security header and covers it
  with its own digest Reference.
* InclusiveNamespaces handling when verifying signatures (#46).
* Signature-verification fixes for multi-token documents and signed
  attachments (#62): the signer certificate is selected via the
  SecurityTokenReference, and cid: attachment references can be
  verified against caller-supplied decrypted_attachments.

Coverage Stats

295 of 324 relevant lines covered (91.05%)

21.62 hits per line