v0.2.0

What's Changed

• xpath3: fix format-integer picture validation and string arg atomization by @lestrrat in #487
• reject duplicate signedinfo in xmldsig1 verify by @lestrrat in #488
• confine nested external entities to configured fs by @lestrrat in #493
• fix key() panic on empty first argument by @lestrrat in #494
• confine FileURIResolver with os.Root by @lestrrat in #495
• bound sequence accumulation in xpath3 compositions by @lestrrat in #496
• fix schematron swallowing xpath eval errors by @lestrrat in #497
• xsd: require all xs:key fields to be present by @lestrrat in #498
• xmlenc1: bind aes key size to declared algorithm by @lestrrat in #491
• reject mismatched rsa-oaep digest and mgf by @lestrrat in #489
• validate element and attribute names on serialize by @lestrrat in #492
• xslt3: route schema-location loads through resolver by @lestrrat in #499
• fix xmlenc1 encrypt element in place by @lestrrat in #490
• extract EncryptedData test literal to const by @lestrrat in #505
• reject duplicate dtd enumeration tokens by @lestrrat in #500
• fix html parser spin on nul byte by @lestrrat in #501
• reject duplicate attributes in start tags by @lestrrat in #502
• fix catalog nil deref when no loader by @lestrrat in #503
• strip xml whitespace in xmlenc base64 fields by @lestrrat in #504
• strip xml whitespace from xmldsig1 base64 by @lestrrat in #506
• enforce recursion limit in EvaluateReuse by @lestrrat in #507
• fix self-loop when replacing node with its sibling by @lestrrat in #508
• validate time ranges in xs:time and xs:dateTime by @lestrrat in #509
• return ErrNilNode from WriteTo on nil node by @lestrrat in #510
• validate relaxng base64Binary lexical space by @lestrrat in #512
• restore var scope after xsl:try body by @lestrrat in #513
• reject non-singleton fn:index-of search value by @lestrrat in #515
• unlink children moved to primary result-document by @lestrrat in #516
• fix xs:dateTimeStamp comparisons by @lestrrat in #518
• fix runecursor read short-buffer panic by @lestrrat in #519
• fix double-counted fractional seconds in duration div by @lestrrat in #520
• preserve absolute uri base in c14n 1.1 fixup by @lestrrat in #521
• guard nil context node in absolute paths by @lestrrat in #523
• fail lint when xinclude processing errors by @lestrrat in #527
• include namespace nodes in signed subtree c14n by @lestrrat in #528
• reject trailing tokens in ParseSequenceType by @lestrrat in #533
• bound float frac rounding to avoid nan overflow by @lestrrat in #524
• fix format-integer CJK panic for large values by @lestrrat in #511
• process apply-templates selection in order by @lestrrat in #522
• surface bytecursor error returned with data by @lestrrat in #530
• reject malformed utf-16 in unparsed-text by @lestrrat in #531
• reject non-blank cdata in empty xsd content by @lestrrat in #517
• clear node context for atomic xsl:iterate items by @lestrrat in #525
• match xsd root element on full expanded name by @lestrrat in #529
• report invalid schematron value-of select by @lestrrat in #532
• fix cdata detection in xml normalization by @lestrrat in #534
• reject idc field selecting multiple nodes by @lestrrat in #535
• validate element and attribute names in stream writer by @lestrrat in #537
• apply arg coercion in named function references by @lestrrat in #536
• register used-package #all templates under modeAll by @lestrrat in #541
• fix xinclude double-resolve of relative base by @lestrrat in #526
• reject non-date/time args in fn:dateTime by @lestrrat in #540
• reject xs:import with mismatched namespace by @lestrrat in #543
• validate inline attribute simpleType by @lestrrat in #539
• validate shim encoder token names by @lestrrat in #538
• keep xsl:sequence order in document variables by @lestrrat in #544
• treat absolute-uri include/import hrefs as absolute by @lestrrat in #542
• order typed template results in document variables by @lestrrat in #545
• reject xmldsig signatures with no references by @lestrrat in #546
• route NewEvalState through newEvalCtx by @lestrrat in #548
• resolve inline attr type in idc key keys by @lestrrat in #555
• retain empty default and fixed constraints by @lestrrat in #551
• validate xsi:nil as xs:boolean lexical by @lestrrat in #557
• error on unsupported xinclude text encoding by @lestrrat in #547
• wire helium lint --encode through to output by @lestrrat in #552
• reject unsafe html element and attr names by @lestrrat in #549
• route relaxng xsd datatypes through value validator by @lestrrat in #550
• raise XTDE0860 in attribute capture branches by @lestrrat in #556
• use uri-aware resolution for xslt resources by @lestrrat in #558
• fix eval-reuse focus loss and frozen clock by @lestrrat in #560
• require xmldsig namespace for references by @lestrrat in #559
• fix xsd default/fixed presence and namespace by @lestrrat in #563
• fix xsi:nil for no-type elems and nillable lexical by @lestrrat in #561
• report unresolved xsd type references by @lestrrat in #554
• compare xsd fixed values in value space by @lestrrat in #553
• canonicalize idc fields in value space by @lestrrat in #562
• annotate skip and anytype idc elements by @lestrrat in #564
• fix xsd all particle qname matching by @lestrrat in #566
• guard docorder cache with a mutex by @lestrrat in #570
• treat undeclared general entity as fatal by @lestrrat in #572
• accept year zero in xsd date casts by @lestrrat in #573
• fix xslt3 output def mutation and item serialization by @lestrrat in #577
• guard nil schema and document in xsd validate by @lestrrat in #574
• detect duplicate named xsd components by @lestrrat in #571
• cap external dtd reads with byte limit by @lestrrat in #565
• reject multi-item qname and map:merge options args by @lestrrat in #576
• guard addchild against dom cycles by @lestrrat in #567
• fix xpath3 list and dateTimeStamp constructors by @lestrrat in #575
• bound external entity reads and check entity refs by @lestrrat in #569
• fix xsd list/union/qname facet validation by @lestrrat in #579
• fix xsd date and value-space validation by @lestrrat in #580
• canonicalize string-derived and duration map keys by @lestrrat in #578
• fix relaxng data, attr repeat, and length facets by @lestrrat in #568
• Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #581
• clamp negative sink buffer size to zero by @lestrrat in #586
• fix dtd element decl lookup key in GetElementDesc by @lestrrat in #583
• set owner document on CreatePI nodes by @lestrrat in #584
• assert serialization in attr-replace test by @lestrrat in #585
• reject active relative namespace uris in c14n by @lestrrat in #592
• clarify os.DirFS is not a symlink sandbox by @lestrrat in #587
• emit U+FFFD for overflowing html numeric char refs by @lestrrat in #594
• fix schematron rule let evaluation order by @lestrrat in #591
• reject nil key source in xmldsig1 verify by @lestrrat in #582
• enforce xsd identity-constraint xpath and keyref refer by @lestrrat in #589
• reject invalid minOccurs/maxOccurs in xsd particles by @lestrrat in #590
• charge direct PE expansion against entity limit by @lestrrat in #593
• resolve through all XML_CATALOG_FILES entries by @lestrrat in #598
• split ]]> in stream CDATA WriteString by @lestrrat in #597
• reject invalid xsd range-facet bounds at compile time by @lestrrat in #588
• fix catalog file uri loading and uri delegation by @lestrrat in #595
• fix opaque file uri and file-base uri resolution by @lestrrat in #602
• reject invalid xpointer child index and trailing shorthand by @lestrrat in #596
• enforce xsd all occurrence rules and occurs message parity by @lestrrat in #600
• evaluate xsd identity constraints on local elements by @lestrrat in #601
• reject inapplicable xsd length facets and value-space range bounds by @lestrrat in #599

Full Changelog: v0.1.0...v0.2.0