fix(deps): update dependency paragonie/constant_time_encoding to v3

[descope]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
paragonie/constant_time_encoding	require	major	2.8.2 → 3.1.3

---

Release Notes

paragonie/constant_time_encoding (paragonie/constant_time_encoding)

v3.1.3: Version 3.1.3

Compare Source

This release fixes a bug with base64 codecs when ext-sodium installed.

What's Changed

• FIX: Trim padding characters from encoded string before calling sodium decode by @​peldax in #​67
• Update .gitattributes for psalm files by @​erikn69 in #​68
• Revert #​67 and fix padding stripping by @​paragonie-security in #​69
• Add test case to prevent regressions by @​paragonie-security in #​70

New Contributors

• @​peldax made their first contribution in #​67
• @​erikn69 made their first contribution in #​68

Full Changelog: paragonie/constant_time_encoding@v3.1.2...v3.1.3

v3.1.2: Version 3.1.2

Compare Source

Thanks @​TimWolla for identifying a performance hit caused by attempting to find global functions such as strlen() in the current namespace before the global namespace.

What's Changed

• Improve sodium implementation performance by @​TimWolla in #​64
• Replace qualifiers with imports by @​paragonie-security in #​65

Full Changelog: paragonie/constant_time_encoding@v3.1.1...v3.1.2

v3.1.1: Version 3.1.1

Compare Source

What's Changed

• Remove mbstring.func_overload compatibility layer by @​TimWolla in #​58
• Fixed #​27 by making the test less redundant.

Full Changelog: paragonie/constant_time_encoding@v3.1.0...v3.1.1

v3.1.0: Version 3.1.0

Compare Source

Important: If you enable ext-sodium, some codecs will now be faster with our library: hex, base64, base64url. This requires the actual extension be installed; sodium_compat will not provide these implementations.

As with the recent sodium_compat release, this library now incorporates fuzz-testing and mutation testing as part of our development strategy. Fuzz testing is enabled on pull requests; mutation tests on releases.

The current metrics for a mutation test run (using the latest version of Infection):

 1782 mutations were generated:
    1470 mutants were killed by Test Framework
     296 covered mutants were not detected
       5 errors were encountered
      11 time outs were encountered
Metrics:
         Mutation Code Coverage: 100%
         Covered Code MSI: 83%

We set the minimum MSI for covered code to 80% by policy, but will slowly be increasing it in future releases.

What's Changed

• Add parameter type to Base32::doEncode()’s $pad parameter by @​TimWolla in #​60
• Re-enable CI for Pull Requests by @​TimWolla in #​59
• Use ext-sodium (if available) to accelerate performance. by @​paragonie-security in #​61
• Test improvements (+PHP 8.5) by @​paragonie-security in #​62

Full Changelog: paragonie/constant_time_encoding@v3.0.0...v3.1.0

v3.0.0: Version 3.0.0

Compare Source

• New major bump due to increased minimum PHP requirements (from PHP 7 to PHP 8)
• Supports PHP 8.4 without deprecation warnings for implicit null

---

Configuration

📅 Schedule: (in timezone Asia/Jerusalem)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[descope]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock

Command failed: composer update paragonie/constant_time_encoding:3.1.3 --with-dependencies --ignore-platform-req='ext-*' --ignore-platform-req='lib-*' --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires paragonie/constant_time_encoding 3.1.3 -> satisfiable by paragonie/constant_time_encoding[v3.1.3].
    - paragonie/constant_time_encoding v3.1.3 requires php ^8 -> your php version (7.3.0; overridden via config.platform, same as actual) does not satisfy that requirement.

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.