From 2bf82a487f0dd3779b4a044c27976be4ad838faf Mon Sep 17 00:00:00 2001
From: PJ Fanning <fanningpj@apache.org>
Date: Tue, 4 Apr 2023 19:04:46 +0000
Subject: [PATCH] xmlsec 3.0.2

git-svn-id: https://svn.apache.org/repos/asf/poi/trunk@1908966 13f79535-47bb-0310-9956-ffa450edef68
---
 build.xml                                                     | 2 +-
 osgi/README.md                                                | 2 +-
 poi-ooxml/build.gradle                                        | 4 ++--
 .../java/org/apache/poi/poifs/crypt/dsig/SignatureInfo.java   | 4 ++--
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/build.xml b/build.xml
index 6a3d9e7020..748e1eaf98 100644
--- a/build.xml
+++ b/build.xml
@@ -295,7 +295,7 @@ under the License.
     <dependency prefix="main.antlauncher" artifact="org.apache.ant:ant-launcher:1.10.12" usage="excelant"/>
 
     <!-- xml signature libs - not part of the distribution -->
-    <dependency prefix="dsig.xmlsec" artifact="org.apache.santuario:xmlsec:3.0.1" usage="ooxml-provided"/>
+    <dependency prefix="dsig.xmlsec" artifact="org.apache.santuario:xmlsec:3.0.2" usage="ooxml-provided"/>
     <dependency prefix="dsig.bouncycastle-prov" artifact="org.bouncycastle:bcprov-jdk18on:1.72" usage="ooxml-provided"/>
     <dependency prefix="dsig.bouncycastle-pkix" artifact="org.bouncycastle:bcpkix-jdk18on:1.72" usage="ooxml-provided"/>
     <dependency prefix="dsig.bouncycastle-util" artifact="org.bouncycastle:bcutil-jdk18on:1.72" usage="ooxml-provided"/>
diff --git a/osgi/README.md b/osgi/README.md
index 1a9b7bef51..415fd921d2 100644
--- a/osgi/README.md
+++ b/osgi/README.md
@@ -25,7 +25,7 @@ Available in Maven Central (but version might be too old): https://mvnrepository
 3. Apache XML Security for Java, Bouncy Castle and XML Commons Resolver 
 These are required to sign or validate signed Office documents. The OSGi bundles are available in Maven Central:
 
-    - Apache XML Security for Java: https://mvnrepository.com/artifact/org.apache.santuario/xmlsec/3.0.1 (use v2.3.0 with POI v5.2.2)
+    - Apache XML Security for Java: https://mvnrepository.com/artifact/org.apache.santuario/xmlsec/3.0.2 (use v2.3.0 with POI v5.2.2)
     
     - XML Commons Resolver: https://mvnrepository.com/artifact/xml-resolver/xml-resolver/1.2-osgi
     
diff --git a/poi-ooxml/build.gradle b/poi-ooxml/build.gradle
index cb05e4ffa1..454a84821e 100644
--- a/poi-ooxml/build.gradle
+++ b/poi-ooxml/build.gradle
@@ -66,11 +66,11 @@ dependencies {
     api "org.apache.logging.log4j:log4j-api:${log4jVersion}"
     api 'org.apache.commons:commons-collections4:4.4'
 
-    signingImplementation 'org.apache.santuario:xmlsec:3.0.1'
+    signingImplementation 'org.apache.santuario:xmlsec:3.0.2'
     signingImplementation "org.bouncycastle:bcpkix-jdk18on:${bouncyCastleVersion}"
     signingImplementation "org.bouncycastle:bcutil-jdk18on:${bouncyCastleVersion}"
 
-    rendersignImplementation 'org.apache.santuario:xmlsec:3.0.1'
+    rendersignImplementation 'org.apache.santuario:xmlsec:3.0.2'
     rendersignImplementation "org.bouncycastle:bcpkix-jdk18on:${bouncyCastleVersion}"
     rendersignImplementation "org.bouncycastle:bcutil-jdk18on:${bouncyCastleVersion}"
 
diff --git a/poi-ooxml/src/main/java/org/apache/poi/poifs/crypt/dsig/SignatureInfo.java b/poi-ooxml/src/main/java/org/apache/poi/poifs/crypt/dsig/SignatureInfo.java
index cfb9c6c83d..6c742523f0 100644
--- a/poi-ooxml/src/main/java/org/apache/poi/poifs/crypt/dsig/SignatureInfo.java
+++ b/poi-ooxml/src/main/java/org/apache/poi/poifs/crypt/dsig/SignatureInfo.java
@@ -154,8 +154,8 @@ import org.w3c.dom.events.MutationEvent;
  * in the classpath:</p>
  * <ul>
  * <li>BouncyCastle bcpkix and bcprov (tested against 1.72)</li>
- * <li>Apache Santuario "xmlsec" (tested against 3.0.1)</li>
- * <li>and log4j-api (tested against 2.19.x)</li>
+ * <li>Apache Santuario "xmlsec" (tested against 3.0.2)</li>
+ * <li>and log4j-api (tested against 2.20.x)</li>
  * </ul>
  */
 public class SignatureInfo {
-- 
2.39.5