From db06dabcf8c7c13f00000cc05a8793541b113bba Mon Sep 17 00:00:00 2001
From: Johan Kromhout <jkromhout@ibuildings.nl>
Date: Mon, 15 Dec 2025 10:51:29 +0100
Subject: [PATCH] Add conflict for robrichards/xmlseclibs

Prior to this change, it was possible to use this library with vulnerable versions of robrichards/xmlseclibs.

This change introduces a conflict constraint for robrichards/xmlseclibs, ensuring that versions below 3.1.4 are not used.
---
 composer.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/composer.json b/composer.json
index 3aea29e..9fd1491 100644
--- a/composer.json
+++ b/composer.json
@@ -13,6 +13,9 @@
             "Surfnet\\StepupBundle\\": "src"
         }
     },
+    "conflict": {
+      "robrichards/xmlseclibs": "<3.1.4"
+    },
     "require": {
         "php": "^8.2",
         "ext-gmp": "*",