1.3.0

Added

• Test-VmSshCredential: single-shot authentication probe that returns
  $true when the password is accepted, $false on a definitive
  rejection, and rethrows a transient/unreachable error unchanged. The
  auth-level rung above Test-SshBanner - a banner-reachable host can
  still have no usable login (e.g. first-boot user provisioning failed),
  which only an auth attempt reveals. Connect policy is inherited from
  New-VmSshClient so the probe is indistinguishable from a real session
  at the transport layer.

1.2.0

Added

• New-RetryingSshClientWrapper: wraps an SSH client with reconnect-and-
  retry on transient transport drops (the channel being reaped mid-command
  by a NAT/firewall middlebox), via Invoke-WithRetry. The belt to
  New-VmSshClient's keepalive brace, now available to every consumer of
  this module rather than re-implemented per repo.

Changed

• RequiredModules now declares Common.PowerShell (>= 8.1.0), which
  supplies the Invoke-WithRetry primitive the new wrapper uses.

1.1.0

Added

• New-VmSshClient and New-VmSshClientWithJump now accept a
  -KeepAliveInterval parameter (default 15s) that arms SSH.NET's
  keepalive timer. Keeps a long-lived session alive across the idle gaps
  between commands, where a NAT or firewall middlebox on the host<->VM
  path could otherwise drop an idle-looking connection and surface
  mid-command as "connection aborted by the server". Pass
  [TimeSpan]::Zero to restore the previous no-keepalive behaviour.
• New-VmSshClient now accepts an optional -Port parameter (default
  22). New-VmSshClientWithJump's tunnelled path uses it to reach the
  local-forward's ephemeral loopback port through the shared helper
  instead of hand-building a ConnectionInfo, so the connect/keepalive
  policy has a single home.

1.0.0

Changed

• Major version bump; no functional changes (version realignment).