Bump phpseclib/phpseclib from 2.0.40 to 3.0.21

[dependabot]

Bumps phpseclib/phpseclib from 2.0.40 to 3.0.21.

Release notes

Sourced from phpseclib/phpseclib's releases.

3.0.21

• BigInteger: speed up powMod() method (#1919)
• SSH2: fix stream_select(): Unable to select [4]: Interrupted system call (max_fd=29) error (#1851)
• SSH2: add EOF test isConnected() (#1926)
• SFTP: make it so SFTP::RESUME also sets offset of local file (#1921)
• SFTP: SFTP::RESUME_START didn't work as described (#1921)

3.0.20

• SSH2: better support for multiple interactive channels & expose shell functions (#1888)
• SFTP: add optional $recursive parameter to filesize() (#1782)
• SFTP: fix NET_SFTP_ATTR_EXTENDED (#1907)
• ASN1: speed up decodeBER (#1894)
• X509: add support for EV DN's (#1916)
• X509: getChain() should always return array of X509 objects (#1914)
• RSA: setting sig padding broke enc padding and vice versa

3.0.19

• AsymmetricKey: error out on unsupported operations (#1879)
• Blowfish: fix issues on 32-bit PHP installs
• BigInteger: fix for hex numbers with new lines in them
• SFTP: fix "Creating default object from empty value" error (#1876)
• SSH2: add getTimeout() method (#1889)
• PrimeField: prevent infinite loop with composite primefields (CVE-2023-27560)

3.0.18

• fix for PHP 8.2 deprecations (#1869, #1873)
• SSH2: if logging in with rsa-sha2-256/512 fails, try ssh-rsa (#1865)
• SSH/Agent: add support for named pipes on windows (for pageant) (#1866)
• Crypt/Base: add a function to check continuous buffer status (#1870)
• OpenSSL 3.0.1+ deprecated some algorithms (RC2, RC4, DES, Blowfish)

3.0.17

• X509: make it so CRLs, CSRs and SPKACs can support PSS keys (#1837)
• X509: make it so PKCS1 X509 certs can create PSS sigs (#1837)
• SFTP: fix deprecated implicit float to int on 32-bit PHP 8.1 (#1841)
• SFTP: restore orig behavior when deleting non-existant folder (#1847)
• Random: fix fallback on PHP 8.1+

3.0.16

• SSH2: fix type hinting for keyboard_interactive_process (#1836)

3.0.15

• PublicKeyLoader: add support for OpenSSH encrypted keys (#1737, #1733, #1531, #1490)
• PublicKeyLoader: add support for JSON Web Keys (#1817)
• SSH2: make login method return false under rare situation (#1790)
• SSH2: fix possibly undefined variable error (#1802)
• SFTP: fix enableDatePreservation bug w.r.t. mtime (#1670)
• SFTP: try to delete dir even if it can't be opened (#1791)
• SFTP: try without path canonicalization if initial realpath() fails (#1796)
• SFTP: detect if stream metadata has wrapper_type set for put() method (#1792)

... (truncated)

Changelog

Sourced from phpseclib/phpseclib's changelog.

3.0.21 - 2023-07-09

• BigInteger: speed up powMod() method (#1919)
• SSH2: fix stream_select(): Unable to select [4]: Interrupted system call (max_fd=29) error (#1851)
• SSH2: add EOF test isConnected() (#1926)
• SFTP: make it so SFTP::RESUME also sets offset of local file (#1921)
• SFTP: SFTP::RESUME_START didn't work as described (#1921)

3.0.20 - 2023-06-13

• SSH2: better support for multiple interactive channels & expose shell functions (#1888)
• SFTP: add optional $recursive parameter to filesize() (#1782)
• SFTP: fix NET_SFTP_ATTR_EXTENDED (#1907)
• ASN1: speed up decodeBER (#1894)
• X509: add support for EV DN's (#1916)
• X509: getChain() should always return array of X509 objects (#1914)
• RSA: setting sig padding broke enc padding and vice versa

3.0.19 - 2023-03-05

• AsymmetricKey: error out on unsupported operations (#1879)
• Blowfish: fix issues on 32-bit PHP installs
• BigInteger: fix for hex numbers with new lines in them
• SFTP: fix "Creating default object from empty value" error (#1876)
• SSH2: add getTimeout() method (#1889)
• PrimeField: prevent infinite loop with composite primefields (CVE-2023-27560)

3.0.18 - 2022-12-17

• fix for PHP 8.2 deprecations (#1869, #1873)
• SSH2: if logging in with rsa-sha2-256/512 fails, try ssh-rsa (#1865)
• SSH/Agent: add support for named pipes on windows (for pageant) (#1866)
• Crypt/Base: add a function to check continuous buffer status (#1870)
• OpenSSL 3.0.1+ deprecated some algorithms (RC2, RC4, DES, Blowfish)

3.0.17 - 2022-10-24

• X509: make it so CRLs, CSRs and SPKACs can support PSS keys (#1837)
• X509: make it so PKCS1 X509 certs can create PSS sigs (#1837)
• SFTP: fix deprecated implicit float to int on 32-bit PHP 8.1 (#1841)
• SFTP: restore orig behavior when deleting non-existant folder (#1847)
• Random: fix fallback on PHP 8.1+

3.0.16 - 2022-09-05

• SSH2: fix type hinting for keyboard_interactive_process (#1836)

3.0.15 - 2022-09-02

• PublicKeyLoader: add support for OpenSSH encrypted keys (#1737, #1733, #1531, #1490)

... (truncated)

Commits

• 4580645 CHANGELOG: add 3.0.21 release
• c558f2e Merge branch '2.0' into 3.0
• 182d322 Merge branch '1.0' into 2.0
• de7ec75 CHANGELOG: add 1.0.21 release
• 0740d58 BigInteger: do PHP64 w/ OpenSSL before BCMath w/ OpenSSL
• 249d17f BigInteger: BCMath w/o OpenSSL should never be reached
• cf13741 i can't figure this unit test out
• 37c6f52 BigInteger: update engine preferences
• 4013d26 Merge branch '2.0' into 3.0
• d8eec98 Merge branch '1.0' into 2.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1664.