Bump phpseclib/phpseclib from 2.0.40 to 3.0.18

[dependabot]

Bumps phpseclib/phpseclib from 2.0.40 to 3.0.18.

Release notes

Sourced from phpseclib/phpseclib's releases.

3.0.18

• fix for PHP 8.2 deprecations (#1869, #1873)
• SSH2: if logging in with rsa-sha2-256/512 fails, try ssh-rsa (#1865)
• SSH/Agent: add support for named pipes on windows (for pageant) (#1866)
• Crypt/Base: add a function to check continuous buffer status (#1870)
• OpenSSL 3.0.1+ deprecated some algorithms (RC2, RC4, DES, Blowfish)

3.0.17

• X509: make it so CRLs, CSRs and SPKACs can support PSS keys (#1837)
• X509: make it so PKCS1 X509 certs can create PSS sigs (#1837)
• SFTP: fix deprecated implicit float to int on 32-bit PHP 8.1 (#1841)
• SFTP: restore orig behavior when deleting non-existant folder (#1847)
• Random: fix fallback on PHP 8.1+

3.0.16

• SSH2: fix type hinting for keyboard_interactive_process (#1836)

3.0.15

• PublicKeyLoader: add support for OpenSSH encrypted keys (#1737, #1733, #1531, #1490)
• PublicKeyLoader: add support for JSON Web Keys (#1817)
• SSH2: make login method return false under rare situation (#1790)
• SSH2: fix possibly undefined variable error (#1802)
• SFTP: fix enableDatePreservation bug w.r.t. mtime (#1670)
• SFTP: try to delete dir even if it can't be opened (#1791)
• SFTP: try without path canonicalization if initial realpath() fails (#1796)
• SFTP: detect if stream metadata has wrapper_type set for put() method (#1792)
• BigInteger: tweak to the phpinfo checks (#1726)
• BigInteger: fix behavior on 32-bit PHP installs (#1820)
• EC/PKCS8: OpenSSL didn't like phpseclib formed Ed25519 public keys (#1819)
• don't use dynamic properties, which are deprecated in PHP 8.2 (#1808, #1822)
• fix deprecated implicit float to int on 32-bit PHP 8.1

3.0.14

• PublicKeyLoader: add support for loading PuTTY v3 keys
• Crypt/Base: fix CTR mode with continuous buffer with non-eval PHP
• Crypt/Base: use sodium_increment in _increment_str for speed purposes
• Crypt/Base: fix deprecation notice (#1770)
• SSH2/Agent: rm unused parameter (#1757)
• BigInteger: add precision to __debugInfo
• BigInteger: fix random engine issues
• call useBestEngine() when getEngine() is called

3.0.13

• SSH2: make login() return false if no valid auth methods are found (#1744)
• SSH2: show a more helpful error message when logging in with pubkey (#1718)
• SSH2: rsa-sha2-256 and rsa-sha2-512 sigs weren't verifying (#1743)
• SFTP: fix chgrp() for version < 4 (#1730)
• phpseclib/mcrypt_compat#33
• Crypt/Salsa20: fix PHP 5.6 error (#1717)
• RSA & BigInteger: check phpinfo() available before using it (#1726)

... (truncated)

Changelog

Sourced from phpseclib/phpseclib's changelog.

3.0.18 - 2022-12-17

• fix for PHP 8.2 deprecations (#1869, #1873)
• SSH2: if logging in with rsa-sha2-256/512 fails, try ssh-rsa (#1865)
• SSH/Agent: add support for named pipes on windows (for pageant) (#1866)
• Crypt/Base: add a function to check continuous buffer status (#1870)
• OpenSSL 3.0.1+ deprecated some algorithms (RC2, RC4, DES, Blowfish)

3.0.17 - 2022-10-24

• X509: make it so CRLs, CSRs and SPKACs can support PSS keys (#1837)
• X509: make it so PKCS1 X509 certs can create PSS sigs (#1837)
• SFTP: fix deprecated implicit float to int on 32-bit PHP 8.1 (#1841)
• SFTP: restore orig behavior when deleting non-existant folder (#1847)
• Random: fix fallback on PHP 8.1+

3.0.16 - 2022-09-05

• SSH2: fix type hinting for keyboard_interactive_process (#1836)

3.0.15 - 2022-09-02

• PublicKeyLoader: add support for OpenSSH encrypted keys (#1737, #1733, #1531, #1490)
• PublicKeyLoader: add support for JSON Web Keys (#1817)
• SSH2: make login method return false under rare situation (#1790)
• SSH2: fix possibly undefined variable error (#1802)
• SFTP: fix enableDatePreservation bug w.r.t. mtime (#1670)
• SFTP: try to delete dir even if it can't be opened (#1791)
• SFTP: try without path canonicalization if initial realpath() fails (#1796)
• SFTP: detect if stream metadata has wrapper_type set for put() method (#1792)
• BigInteger: tweak to the phpinfo checks (#1726)
• BigInteger: fix behavior on 32-bit PHP installs (#1820)
• EC/PKCS8: OpenSSL didn't like phpseclib formed Ed25519 public keys (#1819)
• don't use dynamic properties, which are deprecated in PHP 8.2 (#1808, #1822)
• fix deprecated implicit float to int on 32-bit PHP 8.1

3.0.14 - 2022-04-04

• RSA: add support for loading PuTTY v3 keys
• Crypt/Base: fix CTR mode with continuous buffer with non-eval PHP
• Crypt/Base: use sodium_increment in _increment_str
• Crypt/Base: fix deprecation notice (#1770)
• SSH2/Agent: rm unused parameter (#1757)
• BigInteger: add precision to __debugInfo
• BigInteger: fix random engine issues
• call useBestEngine() when getEngine() is called

3.0.13 - 2022-01-30

• SSH2: make login() return false if no valid auth methods are found (#1744)

... (truncated)

Commits

• f28693d fix another issue arrising from merge
• 974a30d fix bad merge
• 5335dbd Merge branch '2.0' into 3.0
• c9cfa9e GitHub Actions: add PHP 8.2
• 97ea650 fix: drop use of "self" in callable as it's deprecated since php 8.2
• 90a1765 Merge branch '2.0' into 3.0
• e7e7103 build: harden ci.yml permissions
• 1a201dd Merge branch '2.0' into 3.0
• 8568af7 SymmetricKey: CS updates
• d186a9d Merge branch '2.0' into 3.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1331.