Update the version of xmlseclibs we are using.
Update composer.lock.
Update upgrade notes.
Update changelog.