Sourced from phpseclib/phpseclib's releases.

3.0.10

• SFTP: don't check SFTP packet size after SFTP initialization (#1606)
• SFTP: timeout during SFTP init should return false (#1684)
• SFTP: return false if get_channel_packet returns false (#1678)
• ASN1: return false when not enough bytes are available (#1676)
• BigInteger: Serializable is being deprecated in PHP 8.1 (#1680)
• explicitly define methods as being static (#1689)
• plug memory leaks (#1672)

3.0.9

• SSH2: add getAuthMethodsToContinue() method (#1648)
• SSH2: timeout would occasionally infinitely loop
• SSH2: fix PHP7.4 errors about accessing bool as string (#1656)
• SSH2: fix issue with key re-exchange (#1644)
• SFTP: reopen channel on channel closure (#1654)
• X509: extra characters before cert weren't being removed (#1659)
• X509: signing with pw protected PSS keys yielded errors (#1657)
• ASN1: fix timezone issue when non-utc time is given (#1562)
• ASN1: change how default values are processed for ints and enums (#1665)
• RSA: OAEP decryption didn't check labels correctly (#1669)

3.0.8

• AsymetrticKey: add getComment() method (#1638)
• SymmetricKey: cipher_name_openssl_ecb shouldn't be static because of AES (#1636)
• X509: don't filter basicConstraints on unique values (#1639)
• X509: make it so extensions can be set as critical (#1640)

3.0.7

• X509: always parse the first cert of a bundle (#1568)
• SSH2: behave like putty with broken publickey auth (#1572)
• SSH2: don't close channel on unexpected response to channel request (#1631)
• RSA: cleanup RSA PKCS#1 v1.5 signature verification (CVE-2021-30130)
• Crypt: use a custom error handler for mcrypt to avoid deprecation errors

3.0.6

• SFTP/Stream: make it so you can write past the end of a file (#1618)
• SFTP/Stream: fix undefined index notice in stream touch() (#1615)
• SFTP/Stream: mkdir didn't work (#1617)
• BigInteger: fix issue with toBits on 32-bit PHP 8 installs
• SFTP: digit only filenames were converted to integers by php (#1623)

3.0.5

• X509: add getCurrentCert method (since $currentCert is now private) (#1602)
• PublicKeyLoader: add loadPrivateKey() and loadPublicKey() methods (#1603)
• Rijndael: calling setIV() after setBlockLength() can result in err (#1599)
• RSA: use OpenSSL for generating private keys (#1596)
• BigInteger: big speedups for when OpenSSL is used (#1596)

3.0.4

• Random: use v9.99.99 of random_compat if appropriate (#1585, #1571)

... (truncated)

Sourced from phpseclib/phpseclib's changelog.

3.0.10 - 2021-08-15

• SFTP: don't check SFTP packet size after SFTP initialization (#1606)
• SFTP: timeout during SFTP init should return false (#1684)
• SFTP: return false if get_channel_packet returns false (#1678)
• ASN1: return false when not enough bytes are available (#1676)
• BigInteger: Serializable is being deprecated in PHP 8.1 (#1680)
• explicitly define methods as being static (#1689)
• plug memory leaks (#1672)

3.0.9 - 2021-06-13

• SSH2: add getAuthMethodsToContinue() method (#1648)
• SSH2: timeout would occasionally infinitely loop
• SSH2: fix PHP7.4 errors about accessing bool as string (#1656)
• SSH2: fix issue with key re-exchange (#1644)
• SFTP: reopen channel on channel closure (#1654)
• X509: extra characters before cert weren't being removed (#1659)
• X509: signing with pw protected PSS keys yielded errors (#1657)
• ASN1: fix timezone issue when non-utc time is given (#1562)
• ASN1: change how default values are processed for ints and enums (#1665)
• RSA: OAEP decryption didn't check labels correctly (#1669)

3.0.8 - 2021-04-20

• AsymetrticKey: add getComment() method (#1638)
• SymmetricKey: cipher_name_openssl_ecb shouldn't be static because of AES (#1636)
• X509: don't filter basicConstraints on unique values (#1639)
• X509: make it so extensions can be set as critical (#1640)

3.0.7 - 2021-04-06

• X509: always parse the first cert of a bundle (#1568)
• SSH2: behave like putty with broken publickey auth (#1572)
• SSH2: don't close channel on unexpected response to channel request (#1631)
• RSA: cleanup RSA PKCS#1 v1.5 signature verification (CVE-2021-30130)
• Crypt: use a custom error handler for mcrypt to avoid deprecation errors

3.0.6 - 2021-03-13

• SFTP/Stream: make it so you can write past the end of a file (#1618)
• SFTP/Stream: fix undefined index notice in stream touch() (#1615)
• SFTP/Stream: mkdir didn't work (#1617)
• BigInteger: fix issue with toBits on 32-bit PHP 8 installs
• SFTP: digit only filenames were converted to integers by php (#1623)

3.0.5 - 2021-02-12

• X509: add getCurrentCert method (since $currentCert is now private) (#1602)
• PublicKeyLoader: add loadPrivateKey() and loadPublicKey() methods (#1603)

... (truncated)

• 62fcc5a Merge branch '2.0' into 3.0
• fb53b78 CHANGELOG: add 2.0.33 release
• e5e21c1 BigInteger: code cleanup
• 291eec0 PublicKeyLoader: make all methods static
• 12864bd AsymmetricKey: make more methods static
• a19c6ab Merge branch '1.0' into 3.0
• c08afba Merge branch '1.0' into 2.0
• 0ec9d2b SFTP: CS adjustments
• b0fe99b Merge branch '1.0' into 2.0
• dab514f timeout in _get_channel_packet during _init_sftp_connection should be a failure
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)