Version 3.0.0

Breaking changes

• PHP 8.4+ required (dropped 8.3)
• WsseEntry interface: __invoke() first parameter changed from VeeWee\Xml\Dom\Document to \DOMDocument
• KeyIdentifier interface: __invoke() first parameter changed from VeeWee\Xml\Dom\Document to \DOMDocument
• SamlAssertion constructor: takes \DOMDocument instead of VeeWee\Xml\Dom\Document
• WssePreset: no longer implements veewee/xml's Configurator interface; use WssePreset::xpath(\DOMDocument) instead
• Locators (SecurityLocator, BinaryTokenLocator, SignatureLocator, EncryptedKeyLocator): accept \DOMDocument, return \DOMElement
• CustomKeyIdentifier / ReferencingKeyIdentifier: build nodes via native \DOMDocument API (veewee builders removed)
• veewee/xml removed as a direct dependency (still available transitively via php-soap/xml)

Dependency upgrades

• php-soap/psr18-transport: ^1.8 -> ^2.0
• php-soap/engine: ^2.16 -> ^2.20
• php-soap/xml: ^1.9 -> ^1.10
• php-http/client-common: ^2.3 -> ^2.7
• PSL: replaced php-standard-library/php-standard-library with standalone packages (^6.1)

Why the legacy DOM switch?

robrichards/wse-php operates on legacy \DOMDocument. In veewee/xml v3, the Document wrapper shared the same underlying \DOMDocument, so it worked transparently. In v4, Document wraps Dom\XMLDocument (PHP 8.4's new DOM), which has no shared state with legacy DOM. Every bridge requires an XML round-trip. Since all WSSE/WSA operations flow through robrichards, the wrapper added overhead with no benefit. The package now works directly with legacy \DOMDocument.

Upgrading

1. Require PHP 8.4+
2. Custom WsseEntry implementations: change Document $envelope to \DOMDocument $envelope
3. Custom KeyIdentifier implementations: change Document $envelope to \DOMDocument $envelope
4. SamlAssertion: pass a \DOMDocument instead of VeeWee\Xml\Dom\Document
5. If you used WssePreset as a veewee Configurator: use WssePreset::xpath($doc) instead
6. If you read element text via ->nodeValue: use ->textContent (new DOM spec)

Full Changelog: 2.9.0...3.0.0

Version 2.9.0

What's Changed

• Replace azjezz/psl with php-standard-library/php-standard-library by @veewee in #25

Full Changelog: 2.8.0...2.9.0

Version 2.8.0

What's Changed

• Allow PSL 5.x by @veewee in #24

Full Changelog: 2.7.0...2.8.0

Version 2.7.0

What's Changed

• Upgrade PHP project to support 8.3, 8.4, and 8.5 by @veewee in #23

Full Changelog: 2.6.0...2.7.0

Version 2.6.0

What's Changed

• Update phpunit/phpunit requirement from ^10.0 to ^11.4 by @dependabot in #19
• Update symfony/http-client requirement from ^6.1 to ^7.1 by @dependabot in #20
• Allow modification of encryptSignature by @jfschubert in #22

New Contributors

• @jfschubert made their first contribution in #22

Full Changelog: 2.5.0...2.6.0

Version 2.5.0

What's Changed

• Bump dependencies by @veewee in #18

Full Changelog: 2.4.0...2.5.0

Version 2.4.0

What's Changed

• Allow veewee/xml ^3.0 by @sprankhub in #17

New Contributors

• @sprankhub made their first contribution in #17

Full Changelog: 2.3.0...2.4.0

Version 2.3.0

What's Changed

• Allow PHP83 by @veewee in #15

Full Changelog: 2.2.0...2.3.0

Version 2.2.0

What's Changed

• Add shortcut key-store for combined PEM client certificates by @veewee in #14

Full Changelog: 2.1.1...2.2.0

Release 2.1.1

What's Changed

• Allow engine2 by @veewee in #10

Full Changelog: v2.1.0...2.1.1