Skip to content

chore(deps): bump asyncssh from 2.23.0 to 2.24.0 - #289

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/asyncssh-2.24.0
Open

chore(deps): bump asyncssh from 2.23.0 to 2.24.0#289
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/asyncssh-2.24.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps asyncssh from 2.23.0 to 2.24.0.

Changelog

Sourced from asyncssh's changelog.

Release 2.24.0 (27 Jun 2026)

  • Added support for creating and validating SSHSIG signatures, as well as OpenSSH "allowed signers" files.

  • Added support for ML-KEM key exchange from the PyCA cryptography package when it is available. This avoids the need to have the liboqs library installed to use ML-KEM. However, liboqs is still required to support SNTRUP kex exchange.

  • Fixed an issue with handling of SSH maximum packet size when opening a new SSH channel, aborting with a protocol error if a peer attempts to set this size to 0. Thanks go to GitHub user afldl for reporting this issue and providing analysis and reproduction code.

  • Fixed an issue with include directives in OpenSSH config files. Thanks go to GitHub users sethholmes and tazle for reporting this issue and providing analysis and a proposed fix.

Release 2.23.1 (6 Jun 2026)

  • Fixed an SCP path traversal issue. Thanks go to Jaden Furtado for reporting this issue.

  • Expanded previous fix to block unsafe user substitutions in server config. Thanks go to GitHub user cesabici-bit for reporting this issue.

  • Fixed default value for reuse_address and reuse_port, matching the behaavior of asyncio.create_server(). Thanks go to Alexander Shlemin for reporting the inconsistency.

Commits
  • 3577224 Bump version number up to 2.24.0 and update change log
  • 321588d Avoid a coverage issue on a protocol definition
  • eefa2fa Update the documentation to list supported SSHSIG options
  • 9c35427 Add input validation on maximum packet size
  • c3ab96f Remove unused import
  • b3039b2 Bump cryptography from 2.8 to 48.0.1 in /docs
  • 9ef998c Bump cryptography min version to pick up security vulnerability fix
  • d1caa62 Add support for ML-KEM implementation in PyCA
  • c0d349b Fix an issue with include directives in SSH confid files
  • 87c58b2 Add support for creating and validating SSHSIG format signatures
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 17, 2026
@dependabot
dependabot Bot requested a review from elkaix as a code owner September 17, 2026 15:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 17, 2026
@dependabot dependabot Bot mentioned this pull request Sep 17, 2026
Closed
@coderabbitai

coderabbitai Bot commented Sep 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: PyModel/pythinker-cli/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 6940e241-27ef-436b-ba13-989275376e78

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@dependabot
chore(deps): bump asyncssh from 2.23.0 to 2.24.0
9fe15e9 
Bumps [asyncssh](https://github.com/ronf/asyncssh) from 2.23.0 to 2.24.0.
- [Changelog](https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst)
- [Commits](ronf/asyncssh@v2.23.0...v2.24.0)

---
updated-dependencies:
- dependency-name: asyncssh
  dependency-version: 2.24.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/uv/asyncssh-2.24.0 branch from 1a05a20 to 9fe15e9 Compare September 25, 2026 04:12

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@elkaix elkaix Awaiting requested review from elkaix elkaix is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

See More

Successfully merging this pull request may close these issues.

0 participants