Release v16.26.1
Summary
main cannot complete a Release build, and since the SSH.NET advisory was published no branch can complete a restore either — so every PR is red for reasons unrelated to its own changes. This unblocks both.
Fixed
Source/Kernel/Contractsbuilds in Release again —protobuf-net.BuildTools3.3.8 asks for a[ProtoModel]partial class, but that attribute is protobuf-net 3.3+ andprotobuf-net.Grpc1.2.2 holds the runtime below it, so the diagnostic is now opted out of with a note to adopt compile-time serializers deliberately once the runtime moves up (#3696)
Security
- SSH.NET moved to 2026.0.0 in every project that uses Testcontainers, past GHSA-q939-rpr3-3284 (arbitrary file write via server-controlled SCP filenames). Testcontainers 4.13.0 still depends on the affected 2025.1.0, so the projects using it reference SSH.NET directly to pull the transitive dependency forward