Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[stable10] Bump phpseclib/phpseclib from 2.0.14 to 2.0.15 #34741

Merged

Conversation

dependabot-preview[bot]
Copy link
Contributor

Bumps phpseclib/phpseclib from 2.0.14 to 2.0.15.

Release notes

Sourced from phpseclib/phpseclib's releases.

2.0.15

  • SFTP: make it so get() can correctly handle out of order responses (#1343)
  • Crypt: avoid bogus IV errors in ECB mode with OpenSSL (#1087)
  • RSA: protect against possible timing attack during OAEP decryption
  • RSA: fix possible memory leak with XML keys (#1346)
  • Hash: fix issue with undefined constants (#1347)
  • Hash: fix issues with the mode
  • SCP: issue error if remote_file is empty in put() call (#1335)
  • X509: whitelist OID 1.3.6.1.4.1.11129.2.4.2 (#1341)
Changelog

Sourced from phpseclib/phpseclib's changelog.

2.0.15 - 2019-03-10

  • SFTP: make it so get() can correctly handle out of order responses (#1343)
  • Crypt: avoid bogus IV errors in ECB mode with OpenSSL (#1087)
  • RSA: protect against possible timing attack during OAEP decryption
  • RSA: fix possible memory leak with XML keys (#1346)
  • Hash: fix issue with undefined constants (#1347)
  • Hash: fix issues with the mode
  • SCP: issue error if remote_file is empty in put() call (#1335)
  • X509: whitelist OID 1.3.6.1.4.1.11129.2.4.2 (#1341)
Commits
  • 11cf67c Merge branch '1.0' into 2.0
  • 849f997 1.0.15 release
  • 529fcae Merge branch '1.0' into 2.0
  • 7c894b2 Fix x509 OpenSSL format when multiple OU's are present
  • 307f685 Merge branch '1.0' into 2.0
  • 84e2329 Hash: fix issues with the mode
  • e706c54 Hash: adjustments for 2.0 branch
  • 07ffe64 Merge branch '1.0' into 2.0
  • 492562e Hash: fix issues with _computeKey
  • 0bb37d2 Merge branch '1.0' into 2.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

@dependabot-preview dependabot-preview bot added dependencies php Pull requests that update Php code labels Mar 11, 2019
@codecov
Copy link

codecov bot commented Mar 11, 2019

Codecov Report

Merging #34741 into stable10 will increase coverage by <.01%.
The diff coverage is n/a.

Impacted file tree graph

@@              Coverage Diff               @@
##             stable10   #34741      +/-   ##
==============================================
+ Coverage       64.04%   64.04%   +<.01%     
  Complexity      19258    19258              
==============================================
  Files            1278     1278              
  Lines           75837    75838       +1     
  Branches         1291     1291              
==============================================
+ Hits            48568    48572       +4     
+ Misses          26890    26887       -3     
  Partials          379      379
Flag Coverage Δ Complexity Δ
#javascript 53.22% <ø> (ø) 0 <ø> (ø) ⬇️
#phpunit 65.2% <ø> (ø) 19258 <ø> (ø) ⬇️
Impacted Files Coverage Δ Complexity Δ
lib/private/Server.php 84.88% <0%> (+0.13%) 129% <0%> (ø) ⬇️
...eratedfilesharing/lib/Controller/OcmController.php 66.26% <0%> (+0.2%) 30% <0%> (ø) ⬇️
apps/encryption/lib/Session.php 100% <0%> (+1.96%) 22% <0%> (ø) ⬇️
apps/encryption/templates/settings-admin.php 94.11% <0%> (+5.88%) 0% <0%> (ø) ⬇️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 481f74e...9fc79d3. Read the comment docs.

1 similar comment
@codecov
Copy link

codecov bot commented Mar 11, 2019

Codecov Report

Merging #34741 into stable10 will increase coverage by <.01%.
The diff coverage is n/a.

Impacted file tree graph

@@              Coverage Diff               @@
##             stable10   #34741      +/-   ##
==============================================
+ Coverage       64.04%   64.04%   +<.01%     
  Complexity      19258    19258              
==============================================
  Files            1278     1278              
  Lines           75837    75838       +1     
  Branches         1291     1291              
==============================================
+ Hits            48568    48572       +4     
+ Misses          26890    26887       -3     
  Partials          379      379
Flag Coverage Δ Complexity Δ
#javascript 53.22% <ø> (ø) 0 <ø> (ø) ⬇️
#phpunit 65.2% <ø> (ø) 19258 <ø> (ø) ⬇️
Impacted Files Coverage Δ Complexity Δ
lib/private/Server.php 84.88% <0%> (+0.13%) 129% <0%> (ø) ⬇️
...eratedfilesharing/lib/Controller/OcmController.php 66.26% <0%> (+0.2%) 30% <0%> (ø) ⬇️
apps/encryption/lib/Session.php 100% <0%> (+1.96%) 22% <0%> (ø) ⬇️
apps/encryption/templates/settings-admin.php 94.11% <0%> (+5.88%) 0% <0%> (ø) ⬇️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 481f74e...9fc79d3. Read the comment docs.

@phil-davis phil-davis changed the title Bump phpseclib/phpseclib from 2.0.14 to 2.0.15 [stable10] Bump phpseclib/phpseclib from 2.0.14 to 2.0.15 Mar 12, 2019
@phil-davis
Copy link
Contributor

Similar unit tests to #34740 (comment)

make test-external TEST_EXTERNAL_ENV=sftp-atmoz NOCOVERAGE=true
PHPUNIT="/home/phil/git/owncloud/core/lib/composer/phpunit/phpunit/phpunit" build/autotest-external.sh sqlite sftp-atmoz 
Using database oc_autotest
Setup environment for sqlite testing ...
cp: cannot stat '/home/phil/git/owncloud/core/tests/autoconfig-sqlite.php': No such file or directory
Installing ....
creating sqlite db
ownCloud was successfully installed
Testing with sqlite ...
Run only sftp-atmoz ...
files_external enabled
No coverage
PHPUnit 5.7.27 by Sebastian Bergmann and contributors.

Runtime:       PHP 7.2.16-1+ubuntu18.04.1+deb.sury.org+1 with Xdebug 2.7.0
Configuration: /home/phil/git/owncloud/core/tests/phpunit-autotest-external.xml

................................................................. 65 / 65 (100%)


Time: 512 ms, Memory: 22.00MB

OK (65 tests, 136 assertions)
skip: start-amazons3-ceph.sh
start: start-sftp-atmoz.sh
name: sftp-atmoz
Docker executable found - setup docker
Fetch recent atmoz/sftp docker image
Using default tag: latest
latest: Pulling from atmoz/sftp
Digest: sha256:fb2645743918a40991475c6a079aab180218e233b9f968e52b7693294a42626a
Status: Image is up to date for atmoz/sftp:latest
sftp container: 6762ea72c0888f159a36682bed1ceddf23613f7afe4cea2eaedb1df5c73c381e
Waiting for sftp initialization.
No coverage
PHPUnit 5.7.27 by Sebastian Bergmann and contributors.

Runtime:       PHP 7.2.16-1+ubuntu18.04.1+deb.sury.org+1 with Xdebug 2.7.0
Configuration: /home/phil/git/owncloud/core/tests/phpunit-autotest-external.xml

................................................................. 65 / 92 ( 70%)
...........................                                       92 / 92 (100%)

Time: 2.69 minutes, Memory: 24.00MB

OK (92 tests, 372 assertions)
stop: stop-sftp-atmoz.sh
Docker executable found - stop and remove docker containers
Stopping and removing docker container 6762ea72c0888f159a36682bed1ceddf23613f7afe4cea2eaedb1df5c73c381e
6762ea72c0888f159a36682bed1ceddf23613f7afe4cea2eaedb1df5c73c381e
6762ea72c0888f159a36682bed1ceddf23613f7afe4cea2eaedb1df5c73c381e
skip: start-smb-silvershell.sh
skip: start-smb-windows.sh
skip: start-swift-ceph.sh
skip: start-webdav-apache.sh
skip: start-webdav-ownCloud.sh

CI and these extra unit tests pass.

@PVince81 merge?

@phil-davis phil-davis merged commit 41bf155 into stable10 Mar 12, 2019
@delete-merged-branch delete-merged-branch bot deleted the dependabot/composer/stable10/phpseclib/phpseclib-2.0.15 branch March 12, 2019 13:17
@lock lock bot locked as resolved and limited conversation to collaborators Mar 11, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
4 - To release dependencies php Pull requests that update Php code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants