Skip to content

build(deps): bump phpseclib/phpseclib from 2.0.55 to 3.0.55#1972

Merged
susnux merged 3 commits into
masterfrom
dependabot/composer/phpseclib/phpseclib-3.0.42
Jul 21, 2026
Merged

build(deps): bump phpseclib/phpseclib from 2.0.55 to 3.0.55#1972
susnux merged 3 commits into
masterfrom
dependabot/composer/phpseclib/phpseclib-3.0.42

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 5, 2024 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps phpseclib/phpseclib from 2.0.55 to 3.0.55.

Release notes

Sourced from phpseclib/phpseclib's releases.

3.0.55

  • RSA: signature verification with PKCS1 with failed when the parameters field was absent

3.0.54

3.0.53

  • RSA: decryption with password protected keys didn't work with OpenSSL engine (#2140)
  • ASN1: speed up OID calculations
  • SFTP: add hardlink() method (#2142)
  • DES: fix PHP deprecations (#2145)

3.0.52

  • ASN1: more stringent OID length limits (CVE-2026-44167)
  • RSA: OpenSSL 3.2+ changed how PKCS1 decryption works (#2136)
  • Keys/OpenSSH: support comments with spaces in them (#2137)

3.0.51

  • SSH2: use constant time string comparison in get_binary_packet() (CVE-2026-40194)
  • RSA: add sha3 support (#2132)
  • use new OpenSSL functionality (#2130)

3.0.50

  • fix for PHP 8.5 BC breaking changes on 32-bit machines (#2126)
  • make unpadding in CBC mode constant time (CVE-2026-32935)
  • X509: add support for organizationIdentifier (#2128)

3.0.49

  • more PHP 8.5 deprecations (#2113)
  • Keys/OpenSSH: add support for pub keys with multiple spaces / tabs (#2116)

3.0.48

  • readd SCP support (#2108)
  • SSH2: adjust want_reply handling for GLOBAL_REQUEST and CHANNEL_REQUEST (#2111)
  • ASN1: add more validation checks to asn1map (#2104)
  • RSA/PSS: more elegant int conversion (#2107)
  • more PHP 8.5 deprecations (#2103, #2113)

3.0.47

  • fix PHP 8.5 deprecations
  • SFTP: check if realpath succeeded when changing SFTP directory (#2098)
  • SFTP: add copy() method (only usable if copy-data ext is available) (#2101)

3.0.46

  • BigInteger/BCMath: strict_types fix (#2089)

3.0.45

  • BigInteger: modPow() calls with negative base gave incorrect result (#2086)
  • BigInteger: barrett reduction returned '' vs '0' for bcmath engine (#2087)

... (truncated)

Changelog

Sourced from phpseclib/phpseclib's changelog.

3.0.55 - 2026-06-14

  • RSA: signature verification with PKCS1 with failed when the parameters field was absent

3.0.54 - 2026-06-14

  • X509: add setURLFetchCallback() method

3.0.53 - 2026-06-09

  • RSA: decryption with password protected keys didn't work with OpenSSL engine (#2140)
  • ASN1: speed up OID calculations
  • SFTP: add hardlink() method (#2142)
  • DES: fix PHP deprecations (#2145)

3.0.52 - 2026-04-27

  • ASN1: more stringent OID length limits (CVE-2026-44167)
  • RSA: OpenSSL 3.2+ changed how PKCS1 decryption works (#2136)
  • Keys/OpenSSH: support comments with spaces in them (#2137)

3.0.51 - 2026-04-09

  • SSH2: use constant time string comparison in get_binary_packet() (CVE-2026-40194)
  • RSA: add sha3 support (#2132)
  • use new OpenSSL functionality (#2130)

3.0.50 - 2026-03-18

  • fix for PHP 8.5 BC breaking changes on 32-bit machines (#2126)
  • make unpadding in CBC mode constant time (CVE-2026-32935)
  • X509: add support for organizationIdentifier (#2128)

3.0.49 - 2026-01-27

  • more PHP 8.5 deprecations (#2113)
  • Keys/OpenSSH: add support for pub keys with multiple spaces / tabs (#2116)

3.0.48 - 2025-12-15

  • readd SCP support (#2108)
  • SSH2: adjust want_reply handling for GLOBAL_REQUEST and CHANNEL_REQUEST (#2111)
  • ASN1: add more validation checks to asn1map (#2104)
  • RSA/PSS: more elegant int conversion (#2107)
  • more PHP 8.5 deprecations (#2103, #2113)

3.0.47 - 2025-10-05

  • fix PHP 8.5 deprecations
  • SFTP: check if realpath succeeded when changing SFTP directory (#2098)

... (truncated)

Commits
  • db9744e Merge branch '3.0' of github.com:phpseclib/phpseclib into 3.0
  • 1f0c555 RSA: types in the comment
  • 4f5414f CHANGELOG: new release
  • d7b53f6 RSA: PKCS1 signature verification didn't always work with OpenSSL
  • 89a3dae Merge branch '2.0' into 3.0
  • efbc42c Merge branch '1.0' into 2.0
  • b732ef5 README: update 1.0 download link
  • 5418963 Merge branch '2.0' into 3.0
  • 5bbefa4 X509: add visibility
  • 5eabac9 Merge branch '2.0' into 3.0
  • Additional commits viewable in compare view

@dependabot dependabot Bot mentioned this pull request Nov 5, 2024
Closed
@susnux

susnux commented Nov 5, 2024

Copy link
Copy Markdown
Contributor

/composer-update

@susnux susnux mentioned this pull request Nov 5, 2024
Merged
4 tasks
@dependabot @github

dependabot Bot commented on behalf of github Dec 21, 2024

Copy link
Copy Markdown
Contributor Author

A newer version of phpseclib/phpseclib exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@joshtrichards

joshtrichards commented Jul 8, 2025

Copy link
Copy Markdown
Member

Should bump to 3.0.45 before we re-visit this:

https://github.com/phpseclib/phpseclib/blob/3.0/CHANGELOG.md

@nickvergessen

nickvergessen commented Dec 19, 2025

Copy link
Copy Markdown
Member

I'm closing this for now, so we get a newer 2.0 version from dependabot

@nickvergessen

nickvergessen commented Dec 19, 2025

Copy link
Copy Markdown
Member

@dependabot ignore this major version

@dependabot dependabot Bot closed this Dec 19, 2025
@dependabot @github

dependabot Bot commented on behalf of github Dec 19, 2025

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you about version 3.x.x again, unless you re-open this PR.

@dependabot
dependabot Bot deleted the dependabot/composer/phpseclib/phpseclib-3.0.42 branch December 19, 2025 07:22
@susnux
susnux restored the dependabot/composer/phpseclib/phpseclib-3.0.42 branch July 19, 2026 17:36
@susnux susnux reopened this Jul 19, 2026
@susnux

susnux commented Jul 19, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot
build(deps): bump phpseclib/phpseclib from 2.0.55 to 3.0.55
8484adb 
Bumps [phpseclib/phpseclib](https://github.com/phpseclib/phpseclib) from 2.0.55 to 3.0.55.
- [Release notes](https://github.com/phpseclib/phpseclib/releases)
- [Changelog](https://github.com/phpseclib/phpseclib/blob/master/CHANGELOG.md)
- [Commits](phpseclib/phpseclib@2.0.55...3.0.55)

---
updated-dependencies:
- dependency-name: phpseclib/phpseclib
  dependency-version: 3.0.42
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): Bump phpseclib/phpseclib from 2.0.47 to 3.0.42 build(deps): bump phpseclib/phpseclib from 2.0.55 to 3.0.55 Jul 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/composer/phpseclib/phpseclib-3.0.42 branch from ce1f796 to 8484adb Compare July 19, 2026 17:37
@susnux

susnux commented Jul 19, 2026

Copy link
Copy Markdown
Contributor

/composer-update

@nextcloud-command
chore(autoloader): Dump autoloader
5d2e641 
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
nickvergessen
nickvergessen reviewed Jul 20, 2026
View reviewed changes
Comment thread paragonie/random_compat/build-phar.sh Outdated
@susnux
chore: remove paragonie/random_compat as we only target PHP8+
022d87c 
Signed-off-by: Ferdinand Thiessen <opensource@fthiessen.de>
@susnux
susnux requested a review from nickvergessen July 20, 2026 14:05
@susnux
susnux merged commit 5935def into master Jul 21, 2026
8 checks passed
@susnux
susnux deleted the dependabot/composer/phpseclib/phpseclib-3.0.42 branch July 21, 2026 20:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@susnux susnux susnux left review comments
@nickvergessen nickvergessen nickvergessen approved these changes

Assignees

No one assigned

Labels

dependencies main

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@susnux @joshtrichards @nickvergessen @nextcloud-command