Skip to content

build(deps): bump phpseclib/phpseclib from 2.0.47 to 2.0.51#2304

Open
dependabot[bot] wants to merge 1 commit intostable32from
dependabot/composer/stable32/phpseclib/phpseclib-2.0.51
Open

build(deps): bump phpseclib/phpseclib from 2.0.47 to 2.0.51#2304
dependabot[bot] wants to merge 1 commit intostable32from
dependabot/composer/stable32/phpseclib/phpseclib-2.0.51

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 7, 2026

Bumps phpseclib/phpseclib from 2.0.47 to 2.0.51.

Release notes

Sourced from phpseclib/phpseclib's releases.

2.0.51

  • more PHP 8.5 deprecations (#2113)
  • RSA: add support for OpenSSH pub keys with multiple spaces / tabs (#2116)

2.0.50

  • SCP: some downloads have an extra null byte tacked onto the end (#146)
  • SCP: uploading a file after trying to download a non existent file fails (#873)
  • more PHP 8.5 deprecations (#2103, #2113)

2.0.49

  • fix PHP 8.5 deprecations
  • SFTP: check if realpath succeeded when changing SFTP directory (#2098)
  • SSH2: server identification string handling enhancements (#2082, #2083)

2.0.48

  • BigInteger: workaround for regression in GMP that PHP introduced
  • X509: make the attributes section of new CSRs be blank (#1522)
  • X509: CRL version number wasn't correctly being saved (#2037)
  • SSH2: ignore kex-strict-s-v00@openssh.com in key re-exchanges (#2050)
  • SSH2: make it so phpseclib initiates key re-exchange after 1GB (#2050)
  • SSH2: if string is passed to setPreferredAlgorithms treat as array
  • SSH2: identification strings > 255 bytes didn't get parsed correctly
  • SSH2: fix possible infinite loop on packet timeout
  • SSH2: handle SSH2_MSG_EXT_INFO out of login (#2001, #2002)
  • SSH2/Agent: reset supported_private_key_algorithms for every key (#1995)
Changelog

Sourced from phpseclib/phpseclib's changelog.

2.0.51 - 2026-01-27

  • more PHP 8.5 deprecations (#2113)
  • RSA: add support for OpenSSH pub keys with multiple spaces / tabs (#2116)

2.0.50 - 2025-12-15

  • SCP: some downloads have an extra null byte tacked onto the end (#146)
  • SCP: uploading a file after trying to download a non existant file fails (#873)
  • more PHP 8.5 deprecations (#2103, #2113)

2.0.49 - 2025-10-05

  • fix PHP 8.5 deprecations
  • SFTP: check if realpath succeeded when changing SFTP directory (#2098)
  • SSH2: server identification string handling enhancements (#2082, #2083)

2.0.48 - 2024-12-14

  • BigInteger: workaround for regression in GMP that PHP introduced
  • X509: make the attributes section of new CSRs be blank (#1522)
  • X509: CRL version number wasn't correctly being saved (#2037)
  • SSH2: ignore kex-strict-s-v00@openssh.com in key re-exchanges (#2050)
  • SSH2: make it so phpseclib initiates key re-exchange after 1GB (#2050)
  • SSH2: if string is passed to setPreferredAlgorithms treat as array
  • SSH2: identification strings > 255 bytes didn't get parsed correctly
  • SSH2: fix possible infinite loop on packet timeout
  • SSH2: handle SSH2_MSG_EXT_INFO out of login (#2001, #2002)
  • SSH2/Agent: reset supported_private_key_algorithms for every key (#1995)
Commits
  • ed661e7 Merge branch '1.0' into 2.0
  • 700d82c CHANGELOG: add 1.0.26 release
  • ad8a742 Merge branch '1.0' into 2.0
  • 4b51d52 BigInteger: another PHP 8.5 deprecation fix
  • a717aab Merge branch '1.0' into 2.0
  • 652fb84 RSA: fix for PHP 8.5 deprecations for RSA / PSS
  • 1ce6124 Merge branch '1.0' into 2.0
  • 9273399 RSA: add support for OpenSSH pub keys with multiple spaces / tabs
  • 1815ddd Merge branch '1.0' into 2.0
  • 31842fc CHANGELOG: add new release
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [phpseclib/phpseclib](https://github.com/phpseclib/phpseclib) from 2.0.47 to 2.0.51.
- [Release notes](https://github.com/phpseclib/phpseclib/releases)
- [Changelog](https://github.com/phpseclib/phpseclib/blob/master/CHANGELOG.md)
- [Commits](phpseclib/phpseclib@2.0.47...2.0.51)

---
updated-dependencies:
- dependency-name: phpseclib/phpseclib
  dependency-version: 2.0.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/composer/stable32/phpseclib/phpseclib-2.0.51 branch from ca22a1c to 4318529 Compare February 7, 2026 02:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants