docs: phpseclib 4 fix and sync develop 1.2.32 CHANGELOG with 1.2.x (#8184)

* docs: correct CHANGELOG to reference phpseclib 4 not 3 (#7804)

The RRDproxy encryption restoration (#7804) uses the Composer-managed phpseclib 4 line (see #8032/#7884), not phpseclib 3. Follow-up to #8182, which merged before this correction could be included.

* docs: sync develop 1.2.32 CHANGELOG section with the 1.2.x branch

Bring develop's 1.2.32 section in line with 1.2.x: add the issue#8173 graph-list date-range entry (positioned after the issue block) and the five feature#8166 SNMP auth-cache entries. The phpseclib 4 correction is already in this branch.

CHANGELOG

@@ -575,8 +575,9 @@ Cacti CHANGELOG
 -issue#8121: Do not replicate repository and tooling metadata files to remote data collectors during file replication
 -issue#8115: db_update_table() now reconciles unique_keys, so a plugin's UNIQUE index is no longer dropped (and a missing one is added) when an existing table is refreshed
 -issue#7826: Restore qualified plugin table metadata lookups (plugin_syslog#331)
--issue#7804: Restore RRDproxy encryption with Composer-managed phpseclib 3
+-issue#7804: Restore RRDproxy encryption with Composer-managed phpseclib 4
 -issue#7930: Commit transactions on MySQL as well as MariaDB
+-issue#8173: Restore selected preset and custom date ranges for graph lists while preserving detailed panel ranges (PR#8178)
 -feature#7246: It should be possible to change the Device of a Graph if both Devices include the Data Query
 -feature#7364: Allow Users to Choose to Hide Graph Template on Site Trees
 -feature#7388: Allow admin to pass CSV file to change device script for bulk changes
@@ -588,6 +589,11 @@ Cacti CHANGELOG
 -feature#8159: Update bundled jQuery Tablesorter to 2.32.0
 -feature#8159: Update bundled screenfull to 5.2.0
 -feature#8159: Manage bundled front-end JavaScript libraries through npm so Dependabot can track them
+-feature#8166: Add a cross-process shared SNMP authentication cache (disabled by default) that pre-hardens SNMPv3 credential arguments once per credential change and seals them with the per-installation AES-256-GCM key, so poller, cmd and script server processes reuse them instead of rebuilding them on every request
+-feature#8166: Rework cacti_exec() to use an idle (output-refilling) timeout and drop the fixed 50ms per-iteration sleep, so fast commands return immediately while a genuinely stalled child is still reaped, without misreading a just-terminated child as a timeout
+-feature#8166: Route SNMPv3 gets through the in-process php-snmp extension when it is available, bypassing the Net-SNMP binaries and their credential cache
+-feature#8166: Collect each device's SNMP data sources in cmd.php in a single max_oids-sized batched request over the persistent session, replacing one SNMP round trip per OID with one per max_get_size OIDs
+-feature#8166: Add an "Enable MD5 and DES for SNMPv3" setting (off by default) that removes the legacy MD5/DES algorithms from the Device and Automation SNMP Option pickers when disabled, matching hardened (FIPS) PHP and Net-SNMP builds
 
 1.2.31
 -security#GHSA-6RVG-2VM8-5WRF: CVE-2026-22802 Authentication Bypass leads to information disclosure