build(deps): bump phpseclib/phpseclib from 4.0.1 to 4.0.2

[dependabot]

Bumps phpseclib/phpseclib from 4.0.1 to 4.0.2.

Release notes

Sourced from phpseclib/phpseclib's releases.

4.0.2

• PFX: accept sha512 in setHashAlgorithm (#2173)
• SSH2: throw exceptions on error instead of returning false (#2174)
• SSH2: add getDebugMessages() (debug messages aren't errors) (#2174)
• SSH2: add getRawServerIdentification() (#2174)
• SSH2: fix for low probability key exchange failures (#2176)
• PrivateKey: new keys were being encrypted with the empty string
• CMS/SignedData: don't require issuerSerial in ESSCertID(v2) (#2178)
• CMS/SignedData: make validateSignature() return false if no sigs exist (#2178)

Changelog

Sourced from phpseclib/phpseclib's changelog.

4.0.2 - 2026-10-07

• PFX: accept sha512 in setHashAlgorithm (#2173)
• SSH2: throw exceptions on error instead of returning false (#2174)
• SSH2: add getDebugMessages() (debug messages aren't errors) (#2174)
• SSH2: add getRawServerIdentification() (#2174)
• SSH2: fix for low probability key exchange failures (#2176)
• PrivateKey: new keys were being encrypted with the empty string
• CMS/SignedData: don't require issuerSerial in ESSCertID(v2) (#2178)
• CMS/SignedData: make validateSignature() return false if no sigs exist (#2178)

Commits

• 1fe20b9 CHANGELOG: add 4.0.2 release
• 8738262 CMS/SignedData: make validateSignature() return f if no sigs exist
• c1bb18b CS adjustments
• 1ec00bb Merge pull request #2179 from orcnd/fix/2178-esscertid-without-issuerserial
• 209b3f7 Merge branch '3.0' into 4.0
• 24922fb Merge branch '3.0' of github.com:phpseclib/phpseclib into 3.0
• 057b9f8 Merge branch '2.0' into 3.0
• ebd4164 Merge branch '1.0' into 2.0
• b1b7ddd Composer: rm squizlabs/php_codesniffer as a dep
• 4746497 ASN1: backport "fix for optional field mixup error" from 4.0
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: c44cff85-7cec-4acc-8262-df82b649252c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[thorsten]

@dependabot rebase