chore(deps): bump the composer group across 1 directory with 2 updates

[dependabot]

Bumps the composer group with 2 updates in the /api directory: laravel/framework and phpseclib/phpseclib.

Updates laravel/framework from 12.61.0 to 12.61.1

Release notes

Sourced from laravel/framework's releases.

v12.61.1

• [12.x] Preserve empty HTTP attach contents by @​GrahamCampbell in laravel/framework#60291
• Fix @​params typo in Fluent and MessageBag toPrettyJson() docblocks by @​Amirhf1 in laravel/framework#60313
• [12.x] Fix regex typo in Env::addVariableToEnvContents that prevented quotin… by @​Amirhf1 in laravel/framework#60312
• [12.x] Fix Number::trim() returning null for INF and NAN values by @​Amirhf1 in laravel/framework#60322
• [12.x] Fix FIFO queue name normalization in Cloud managed queues by @​kieranbrown in laravel/framework#60316
• [12.x] Fix Number::pairs() infinite loop when $by is zero or negative by @​Amirhf1 in laravel/framework#60324
• [12.x] Ensure path seperators aren't encoded in LocalFilesystemAdapter by @​jackbayliss in laravel/framework#60350
• [12.x] Ensure config is bound before trying to log deprecation notice by @​crynobone in laravel/framework#60376

Commits

• e8472ca Update version to v12.61.1
• 61d5557 [12.x] Ensure config is bound before trying to log deprecation notice (#60376)
• 12df688 [12.x] Ensure path seperators aren't encoded in LocalFilesystemAdapter (#60350)
• 33afd1e [12.x] Fix Number::pairs() infinite loop when $by is zero or negative (#60324)
• e854b8c Fix FIFO queue name normalization in Cloud managed queues (#60316)
• 55d9fb8 fix(Number): return INF/NAN as-is in trim() (#60322)
• c76283c Fix regex typo in Env::addVariableToEnvContents that prevented quoting values...
• 6730281 Fix @​params typo in Fluent and MessageBag toPrettyJson() docblocks (#60313)
• b8f2341 Preserve empty HTTP attach contents (#60291)
• 3438371 Update CHANGELOG
• See full diff in compare view

Updates phpseclib/phpseclib from 3.0.52 to 3.0.55

Release notes

Sourced from phpseclib/phpseclib's releases.

3.0.55

• RSA: signature verification with PKCS1 with failed when the parameters field was absent

3.0.54

• X509: add setURLFetchCallback() method

3.0.53

• RSA: decryption with password protected keys didn't work with OpenSSL engine (#2140)
• ASN1: speed up OID calculations
• SFTP: add hardlink() method (#2142)
• DES: fix PHP deprecations (#2145)

Changelog

Sourced from phpseclib/phpseclib's changelog.

3.0.55 - 2026-06-14

• RSA: signature verification with PKCS1 with failed when the parameters field was absent

3.0.54 - 2026-06-14

• X509: add setURLFetchCallback() method

3.0.53 - 2026-06-09

• RSA: decryption with password protected keys didn't work with OpenSSL engine (#2140)
• ASN1: speed up OID calculations
• SFTP: add hardlink() method (#2142)
• DES: fix PHP deprecations (#2145)

Commits

• db9744e Merge branch '3.0' of github.com:phpseclib/phpseclib into 3.0
• 1f0c555 RSA: types in the comment
• 4f5414f CHANGELOG: new release
• d7b53f6 RSA: PKCS1 signature verification didn't always work with OpenSSL
• 89a3dae Merge branch '2.0' into 3.0
• efbc42c Merge branch '1.0' into 2.0
• b732ef5 README: update 1.0 download link
• 5418963 Merge branch '2.0' into 3.0
• d73c9e0 Merge branch '1.0' into 2.0
• fa867e5 CHANGELOG: add new release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.