Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 3, 2025

Bumps org.apache.sshd.version from 2.14.0 to 2.15.0.
Updates org.apache.sshd:sshd-core from 2.14.0 to 2.15.0

Release notes

Sourced from org.apache.sshd:sshd-core's releases.

Apache MINA SSHD 2.15.0

What's Changed

New Contributors

Full Changelog: apache/mina-sshd@sshd-2.14.0...sshd-2.15.0

Changelog

Sourced from org.apache.sshd:sshd-core's changelog.

Previous Versions

Latest Released Version

Planned for Next Version

Bug Fixes

  • GH-650 Use the correct key from a user certificate in server-side pubkey auth
  • GH-663 Fix racy IoSession creation
  • GH-664 Skip MAC negotiation if an AEAD cipher was negotiated

New Features

  • SSHD-1161 Support pubkey auth with user certificates (server-side)
    • Client-side support was introduced in version 2.8.0 already
  • SSHD-1167 Check host certificates against known_hosts file (implements @cert-authority)

Potential Compatibility Issues

Client-side KEX: we've changed the default of the setting CoreModuleProperties.ABORT_ON_INVALID_CERTIFICATE from false to true. A client will newly abort an SSH connection if the server presents an invalid OpenSSH host certificate as host key.

Major Code Re-factoring

Commits
  • c651f7c [maven-release-plugin] prepare release sshd-2.15.0
  • 2835991 Bump version to 2.15.0-SNAPSHOT
  • 909b5e2 Abstract revoked key handling in KnownHostsServerKeyVerifier
  • 11a9277 Update documentation
  • 3427b21 Bump Bouncy Castle 1.79 -> 1.80
  • e59dd00 GH-654: sshd-contrib: use test scope for assertj dependency
  • e5f805e OpenSshmlKemTest: use alpine 3.21
  • 7b19f6b Update CHANGES.md
  • fb21e1f Merge pull request #639 from ianjoneill/f-ed25519-bc
  • 9c49609 Update docs
  • Additional commits viewable in compare view

Updates org.apache.sshd:sshd-sftp from 2.14.0 to 2.15.0

Release notes

Sourced from org.apache.sshd:sshd-sftp's releases.

Apache MINA SSHD 2.15.0

What's Changed

New Contributors

Full Changelog: apache/mina-sshd@sshd-2.14.0...sshd-2.15.0

Changelog

Sourced from org.apache.sshd:sshd-sftp's changelog.

Previous Versions

Latest Released Version

Planned for Next Version

Bug Fixes

  • GH-650 Use the correct key from a user certificate in server-side pubkey auth
  • GH-663 Fix racy IoSession creation
  • GH-664 Skip MAC negotiation if an AEAD cipher was negotiated

New Features

  • SSHD-1161 Support pubkey auth with user certificates (server-side)
    • Client-side support was introduced in version 2.8.0 already
  • SSHD-1167 Check host certificates against known_hosts file (implements @cert-authority)

Potential Compatibility Issues

Client-side KEX: we've changed the default of the setting CoreModuleProperties.ABORT_ON_INVALID_CERTIFICATE from false to true. A client will newly abort an SSH connection if the server presents an invalid OpenSSH host certificate as host key.

Major Code Re-factoring

Commits
  • c651f7c [maven-release-plugin] prepare release sshd-2.15.0
  • 2835991 Bump version to 2.15.0-SNAPSHOT
  • 909b5e2 Abstract revoked key handling in KnownHostsServerKeyVerifier
  • 11a9277 Update documentation
  • 3427b21 Bump Bouncy Castle 1.79 -> 1.80
  • e59dd00 GH-654: sshd-contrib: use test scope for assertj dependency
  • e5f805e OpenSshmlKemTest: use alpine 3.21
  • 7b19f6b Update CHANGES.md
  • fb21e1f Merge pull request #639 from ianjoneill/f-ed25519-bc
  • 9c49609 Update docs
  • Additional commits viewable in compare view

Updates org.apache.sshd:sshd-osgi from 2.14.0 to 2.15.0

Release notes

Sourced from org.apache.sshd:sshd-osgi's releases.

Apache MINA SSHD 2.15.0

What's Changed

New Contributors

Full Changelog: apache/mina-sshd@sshd-2.14.0...sshd-2.15.0

Changelog

Sourced from org.apache.sshd:sshd-osgi's changelog.

Previous Versions

Latest Released Version

Planned for Next Version

Bug Fixes

  • GH-650 Use the correct key from a user certificate in server-side pubkey auth
  • GH-663 Fix racy IoSession creation
  • GH-664 Skip MAC negotiation if an AEAD cipher was negotiated

New Features

  • SSHD-1161 Support pubkey auth with user certificates (server-side)
    • Client-side support was introduced in version 2.8.0 already
  • SSHD-1167 Check host certificates against known_hosts file (implements @cert-authority)

Potential Compatibility Issues

Client-side KEX: we've changed the default of the setting CoreModuleProperties.ABORT_ON_INVALID_CERTIFICATE from false to true. A client will newly abort an SSH connection if the server presents an invalid OpenSSH host certificate as host key.

Major Code Re-factoring

Commits
  • c651f7c [maven-release-plugin] prepare release sshd-2.15.0
  • 2835991 Bump version to 2.15.0-SNAPSHOT
  • 909b5e2 Abstract revoked key handling in KnownHostsServerKeyVerifier
  • 11a9277 Update documentation
  • 3427b21 Bump Bouncy Castle 1.79 -> 1.80
  • e59dd00 GH-654: sshd-contrib: use test scope for assertj dependency
  • e5f805e OpenSshmlKemTest: use alpine 3.21
  • 7b19f6b Update CHANGES.md
  • fb21e1f Merge pull request #639 from ianjoneill/f-ed25519-bc
  • 9c49609 Update docs
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `org.apache.sshd.version` from 2.14.0 to 2.15.0.

Updates `org.apache.sshd:sshd-core` from 2.14.0 to 2.15.0
- [Release notes](https://github.com/apache/mina-sshd/releases)
- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)
- [Commits](apache/mina-sshd@sshd-2.14.0...sshd-2.15.0)

Updates `org.apache.sshd:sshd-sftp` from 2.14.0 to 2.15.0
- [Release notes](https://github.com/apache/mina-sshd/releases)
- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)
- [Commits](apache/mina-sshd@sshd-2.14.0...sshd-2.15.0)

Updates `org.apache.sshd:sshd-osgi` from 2.14.0 to 2.15.0
- [Release notes](https://github.com/apache/mina-sshd/releases)
- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)
- [Commits](apache/mina-sshd@sshd-2.14.0...sshd-2.15.0)

---
updated-dependencies:
- dependency-name: org.apache.sshd:sshd-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.sshd:sshd-sftp
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.sshd:sshd-osgi
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 3, 2025
@seart-bot seart-bot enabled auto-merge March 3, 2025 14:59
Copy link
Member

@seart-bot seart-bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm approving this pull request because it includes a patch or minor update

@seart-bot seart-bot merged commit 2df2656 into master Mar 3, 2025
1 check passed
@dependabot dependabot bot deleted the dependabot/maven/master/org.apache.sshd.version-2.15.0 branch March 3, 2025 14:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants