Bump phpseclib/phpseclib from 2.0.32 to 3.0.11

[dependabot]

Bumps phpseclib/phpseclib from 2.0.32 to 3.0.11.

Release notes

Sourced from phpseclib/phpseclib's releases.

3.0.11

• SSH2: add support for zlib and [email protected] compression
• SFTP: add support for SFTPv4/5/6
• SFTP: add option to allow arbitrary length packets (#1691)
• SFTP: errors weren't being logged (#1702)
• RSA: ssh-keygen -yf private.key fails if \r is present (#1698)

3.0.10

• SFTP: don't check SFTP packet size after SFTP initialization (#1606)
• SFTP: timeout during SFTP init should return false (#1684)
• SFTP: return false if get_channel_packet returns false (#1678)
• ASN1: return false when not enough bytes are available (#1676)
• BigInteger: Serializable is being deprecated in PHP 8.1 (#1680)
• explicitly define methods as being static (#1689)
• plug memory leaks (#1672)

3.0.9

• SSH2: add getAuthMethodsToContinue() method (#1648)
• SSH2: timeout would occasionally infinitely loop
• SSH2: fix PHP7.4 errors about accessing bool as string (#1656)
• SSH2: fix issue with key re-exchange (#1644)
• SFTP: reopen channel on channel closure (#1654)
• X509: extra characters before cert weren't being removed (#1659)
• X509: signing with pw protected PSS keys yielded errors (#1657)
• ASN1: fix timezone issue when non-utc time is given (#1562)
• ASN1: change how default values are processed for ints and enums (#1665)
• RSA: OAEP decryption didn't check labels correctly (#1669)

3.0.8

• AsymetrticKey: add getComment() method (#1638)
• SymmetricKey: cipher_name_openssl_ecb shouldn't be static because of AES (#1636)
• X509: don't filter basicConstraints on unique values (#1639)
• X509: make it so extensions can be set as critical (#1640)

3.0.7

• X509: always parse the first cert of a bundle (#1568)
• SSH2: behave like putty with broken publickey auth (#1572)
• SSH2: don't close channel on unexpected response to channel request (#1631)
• RSA: cleanup RSA PKCS#1 v1.5 signature verification (CVE-2021-30130)
• Crypt: use a custom error handler for mcrypt to avoid deprecation errors

3.0.6

• SFTP/Stream: make it so you can write past the end of a file (#1618)
• SFTP/Stream: fix undefined index notice in stream touch() (#1615)
• SFTP/Stream: mkdir didn't work (#1617)
• BigInteger: fix issue with toBits on 32-bit PHP 8 installs
• SFTP: digit only filenames were converted to integers by php (#1623)

3.0.5

• X509: add getCurrentCert method (since $currentCert is now private) (#1602)

... (truncated)

Changelog

Sourced from phpseclib/phpseclib's changelog.

3.0.11 - 2021-10-26

• SSH2: add support for zlib and [email protected] compression
• SFTP: add support for SFTPv4/5/6
• SFTP: add option to allow arbitrary length packets (#1691)
• SFTP: errors weren't being logged (#1702)
• RSA: ssh-keygen -yf private.key fails if \r is present (#1698)

3.0.10 - 2021-08-15

• SFTP: don't check SFTP packet size after SFTP initialization (#1606)
• SFTP: timeout during SFTP init should return false (#1684)
• SFTP: return false if get_channel_packet returns false (#1678)
• ASN1: return false when not enough bytes are available (#1676)
• BigInteger: Serializable is being deprecated in PHP 8.1 (#1680)
• explicitly define methods as being static (#1689)
• plug memory leaks (#1672)

3.0.9 - 2021-06-13

• SSH2: add getAuthMethodsToContinue() method (#1648)
• SSH2: timeout would occasionally infinitely loop
• SSH2: fix PHP7.4 errors about accessing bool as string (#1656)
• SSH2: fix issue with key re-exchange (#1644)
• SFTP: reopen channel on channel closure (#1654)
• X509: extra characters before cert weren't being removed (#1659)
• X509: signing with pw protected PSS keys yielded errors (#1657)
• ASN1: fix timezone issue when non-utc time is given (#1562)
• ASN1: change how default values are processed for ints and enums (#1665)
• RSA: OAEP decryption didn't check labels correctly (#1669)

3.0.8 - 2021-04-20

• AsymetrticKey: add getComment() method (#1638)
• SymmetricKey: cipher_name_openssl_ecb shouldn't be static because of AES (#1636)
• X509: don't filter basicConstraints on unique values (#1639)
• X509: make it so extensions can be set as critical (#1640)

3.0.7 - 2021-04-06

• X509: always parse the first cert of a bundle (#1568)
• SSH2: behave like putty with broken publickey auth (#1572)
• SSH2: don't close channel on unexpected response to channel request (#1631)
• RSA: cleanup RSA PKCS#1 v1.5 signature verification (CVE-2021-30130)
• Crypt: use a custom error handler for mcrypt to avoid deprecation errors

3.0.6 - 2021-03-13

• SFTP/Stream: make it so you can write past the end of a file (#1618)
• SFTP/Stream: fix undefined index notice in stream touch() (#1615)

... (truncated)

Commits

• 6e79422 Merge branch '2.0' into 3.0
• 98a6fe5 CHANGELOG: add 2.0.34 release
• 7a739d7 Merge branch '2.0' into 3.0
• dc290a1 Merge branch '1.0' into 2.0
• 0539780 Travis: rm 5.3 support; composer won't install on it
• 2de84fb Merge branch '1.0' into 2.0
• da6c1b0 SSH2: add support for zlib and [email protected] compression
• 01cdf39 Merge branch '2.0' into 3.0
• 3da0695 Merge branch '1.0' into 2.0
• 30a9a15 Tests/SSH2: fix intermittently failing unit test
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #930.