Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump asyncssh from 2.17.0 to 2.19.0 in /examples #516

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 23, 2024

Bumps asyncssh from 2.17.0 to 2.19.0.

Changelog

Sourced from asyncssh's changelog.

Release 2.19.0 (12 Dec 2024)

  • Added support for WebAuthN authentication with U2F security keys, allowing non-admin Windows users to use these keys for authentication. Previously, authentication with U2F keys worked on Windows, but only for admin users.

  • Added support for hostname canonicalization, compatible with the configuration parameters used in OpenSSH, as well as support for the "canonical" and "final" match keywords and negation support for match. Thanks go to GitHub user commonism who suggested this and provided a proposed implementation for negation.

  • Added client and server support for SFTP copy-data extension and a new SFTP remote_copy() function which allows data to be moved between two remote files without downloading and re-uploading the data. Thanks go to Ali Khosravi for suggesting this addition.

  • Moved project metadata from setup.py to pyproject.toml. Thanks go to Marc Mueller for contributing this.

  • Updated SSH connection to keep strong references to outstanding tasks, to avoid potential issues with the garbage collector while the connection is active. Thanks go to GitHub user Birnendampf for pointing out this potential issue and suggesting a simple fix.

  • Fixed some issues with block_size argument in SFTP copy functions. Thanks go to Krzysztof Kotlenga for finding and reporting these issues.

  • Fixed an import error when fido2 package wasn't available. Thanks go to GitHub user commonism for reporting this issue.

Release 2.18.0 (26 Oct 2024)

  • Added support for post-quantum ML-KEM key exchange algorithms, interoperable with OpenSSH 9.9.

  • Added support for the OpenSSH "limits" extension, allowing the client to query server limits such as the maximum supported read and write sizes. The client will automatically default to the reported maximum size on servers that support this extension.

  • Added more ways to specify environment variables via the env option. Sequences of either 'key=value' strings or (key, value) tuples are now supported, in addition to a dict.

  • Added support for getting/setting environment variables as byte strings on platforms which support it. Previously, only Unicode strings were

... (truncated)

Commits
  • ebd5f33 Bump version number up to 2.19.0 and update change log
  • e8169bf Adjust remote_only argument to only apply to copying plain files
  • 033ef54 Add support for selecting to only allow remote copy on SFTP
  • e72d642 Revert part of remote_copy change to allow pathnames
  • 165c3b9 Fix documentation bug
  • 4cf2a39 Add support for str, bytes, or PurePath pathnames in remote_copy
  • 6ecb91e Add logging for hostname canonicalization feature
  • 743966d Add client and server support for SFTP copy-data extension
  • 4917d8d Fix copy/paste error in a docstring
  • 9a3d13f Update hostname canonicalization to better match OpenSSH
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [asyncssh](https://github.com/ronf/asyncssh) from 2.17.0 to 2.19.0.
- [Changelog](https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst)
- [Commits](ronf/asyncssh@v2.17.0...v2.19.0)

---
updated-dependencies:
- dependency-name: asyncssh
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants