v0.34.0

0.34.0 (2026-11-06)

⚠ BREAKING CHANGES

• transports: Legacy-only peers require an explicit allow_legacy_ssh setting.
  Algorithms removed by the installed SSH library remain unavailable.

Bug Fixes

• deps: require paramiko 5.1.0 or later in the netmiko transport (53fde24)
• transports: preserve secure SSH authentication and diagnostics (824b7f2)
• transports: secure SSH defaults with per-step legacy opt-in (52408ee)

v0.33.4

0.33.4 (2026-11-06)

Bug Fixes

• images: raise golang.org/x/crypto and x/text with x/net v0.62.0 (c7ebfbf)
• images: raise golang.org/x/net to v0.62.0 in the OpenTofu runner (cdb556d)

v0.33.3

0.33.3 (2026-11-06)

Bug Fixes

• container: handle malformed Dockerfile stage indexes (c266d49)
• fuzz: skip documents nested deeper than json.loads handles (4b437a7)
• http: reject an over-long list index as a malformed path (a774a3a)

v0.33.2

0.33.2 (2026-11-06)

Bug Fixes

• images: raise go-jose in opentofu-runner so the release image publishes (cbe3010)

v0.33.1

0.33.1 (2026-11-05)

Bug Fixes

• steps: give evidence and probe steps an output later steps can read (e0f5838)
• steps: keep step outputs whole-line, collision-safe and bounded (41b57b6)

v0.33.0

0.33.0 (2026-10-24)

⚠ BREAKING CHANGES

• steps-cisco-iosxe: hegemony-steps-cisco-iosxe is no longer built or
  released, and the cisco.iosxe.upgrade.preflight, .stage, .install,
  .verify and .cleanup step types no longer exist. They had not been tested
  recently enough to ship. A flow that uses one of them fails validation on
  a platform that runs this release; earlier releases keep the wheel.

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com
Claude-Session: https://claude.ai/code/session_01Ex7hc3CFzGrHoCwqYiqGJL
Signed-off-by: Jakub Trávník jakub.travnik@gmail.com

Features

• steps-cisco-iosxe: remove the IOS XE upgrade steps (0a1c964)

v0.32.5

0.32.5 (2026-10-24)

Bug Fixes

• deps: move to dnspython 2.9.0 and filelock 4.2.4 for two advisories (f3e2809)
• deps: raise the asyncssh and dnspython floors past their advisories (f998e29)

v0.32.4

0.32.4 (2026-10-24)

Bug Fixes

• deps: move to netmiko 4.8.0 and paramiko 5.1.0 for CVE-2026-44405 (19e1f4d)
• deps: upgrade virtualenv to 21.14.13 for CVE-2026-113713 (7bfef8b)
• release: stop release comments from failing a published release (056148a)

v0.32.3

0.32.3 (2026-10-22)

Bug Fixes

• container: keep the tool's exit status when a stop request reaches timeout (8d9502c)

v0.32.2

0.32.2 (2026-10-22)

Bug Fixes

• images: raise Go and klauspost/compress in opentofu-runner for two HIGH advisories (bff1744)