fix: bump ruby-saml to 1.18

* Signature Wrapping Vulnerabilities (CVE-2025-25291, CVE-2025-25292)
* potential DDOS Moderated Vulneratiblity (CVE-2025-25293)

Signed-off-by: Roger Meier <r.meier@siemens.com>

Author: bufferoverflow

omniauth-saml.gemspec

@@ -14,7 +14,7 @@ Gem::Specification.new do |gem|
   gem.required_ruby_version = '>= 2.1'
 
   gem.add_runtime_dependency 'omniauth', '~> 1.3', '>= 1.3.2'
-  gem.add_runtime_dependency 'ruby-saml', '~> 1.17'
+  gem.add_runtime_dependency 'ruby-saml', '~> 1.18'
 
   gem.add_development_dependency 'rake', '>= 12.3.3'
   gem.add_development_dependency 'rspec', '~>3.4'