Skip to content

chore(deps): Bump phpseclib/phpseclib from 4.0.1 to 4.0.2 - #6231

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/composer/phpseclib/phpseclib-4.0.2
Oct 26, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/composer/phpseclib/phpseclib-4.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026 •

Copy link
Copy Markdown
Contributor

Bumps phpseclib/phpseclib from 4.0.1 to 4.0.2.

Release notes

Sourced from phpseclib/phpseclib's releases.

4.0.2

  • PFX: accept sha512 in setHashAlgorithm (#2173)
  • SSH2: throw exceptions on error instead of returning false (#2174)
  • SSH2: add getDebugMessages() (debug messages aren't errors) (#2174)
  • SSH2: add getRawServerIdentification() (#2174)
  • SSH2: fix for low probability key exchange failures (#2176)
  • PrivateKey: new keys were being encrypted with the empty string
  • CMS/SignedData: don't require issuerSerial in ESSCertID(v2) (#2178)
  • CMS/SignedData: make validateSignature() return false if no sigs exist (#2178)
Changelog

Sourced from phpseclib/phpseclib's changelog.

4.0.2 - 2026-10-07

  • PFX: accept sha512 in setHashAlgorithm (#2173)
  • SSH2: throw exceptions on error instead of returning false (#2174)
  • SSH2: add getDebugMessages() (debug messages aren't errors) (#2174)
  • SSH2: add getRawServerIdentification() (#2174)
  • SSH2: fix for low probability key exchange failures (#2176)
  • PrivateKey: new keys were being encrypted with the empty string
  • CMS/SignedData: don't require issuerSerial in ESSCertID(v2) (#2178)
  • CMS/SignedData: make validateSignature() return false if no sigs exist (#2178)
Commits
  • 1fe20b9 CHANGELOG: add 4.0.2 release
  • 8738262 CMS/SignedData: make validateSignature() return f if no sigs exist
  • c1bb18b CS adjustments
  • 1ec00bb Merge pull request #2179 from orcnd/fix/2178-esscertid-without-issuerserial
  • 209b3f7 Merge branch '3.0' into 4.0
  • 24922fb Merge branch '3.0' of github.com:phpseclib/phpseclib into 3.0
  • 057b9f8 Merge branch '2.0' into 3.0
  • ebd4164 Merge branch '1.0' into 2.0
  • b1b7ddd Composer: rm squizlabs/php_codesniffer as a dep
  • 4746497 ASN1: backport "fix for optional field mixup error" from 4.0
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from elzody as a code owner October 24, 2026 01:02
@dependabot dependabot Bot added the 3. to review Ready to be reviewed label Oct 24, 2026
@dependabot
dependabot Bot requested a review from juliusknorr as a code owner October 24, 2026 01:02
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 24, 2026
@github-actions
github-actions Bot enabled auto-merge October 24, 2026 01:04
@elzody

elzody commented Oct 26, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [phpseclib/phpseclib](https://github.com/phpseclib/phpseclib) from 4.0.1 to 4.0.2.
- [Release notes](https://github.com/phpseclib/phpseclib/releases)
- [Changelog](https://github.com/phpseclib/phpseclib/blob/master/CHANGELOG.md)
- [Commits](phpseclib/phpseclib@4.0.1...4.0.2)

---
updated-dependencies:
- dependency-name: phpseclib/phpseclib
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/composer/phpseclib/phpseclib-4.0.2 branch from ccd7538 to 3bbe7ca Compare October 26, 2026 20:37
@github-actions
github-actions Bot merged commit ed23725 into main Oct 26, 2026
58 checks passed
@github-actions
github-actions Bot deleted the dependabot/composer/phpseclib/phpseclib-4.0.2 branch October 26, 2026 20:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Ready to be reviewed dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant