net-scp 4.1.2 → 4.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b1413e9916cf7c4d82160a87e9da29044528f7c32dc746d12a873ea4d902a940
-  data.tar.gz: b0e33d71c6a78b8d263fd95408e23188c3c7e0bb274d52c1df6745bbc6793cc6
+  metadata.gz: b8d6b4ea9428a9cc3df98e388eb80ce0a6dd45021bad757992537f24dc954d38
+  data.tar.gz: 72ada8e9dc44cf7d7ffad414ccf8dfa90f1f3f875e83400acc6293e9523d8b03
 SHA512:
-  metadata.gz: 46648015028eb41a2d7f269f4fe6baa430289da17f82c2945c5ef49ff4fa43085a966734d7e361a98b08cd91f7abf99f219eeebd954607bc74969f398e861ceb
-  data.tar.gz: e307dc9bb8e181c76acb226ffc8b35f5c2002adbef0f027f8954b9e695cc8436b780a7f4316dba7b685a48048184676c20dacceb2db81d235dcf51a83045ddf5
+  metadata.gz: 76879f624878414b25e51abe5cfc88d078a99db6750b3b7c816454cae23c4d1d988201dd56af3ac3df21ac7b9c575a160c9eca44ccb731bfa332a6c3fe43651a
+  data.tar.gz: 41880eab49fcce9ae5e1f251f2360843941598b96496d26b33770449d53bf1b2ea15ef706af37d5af83370c57e0c878815d523eca2b974274dce43288953e318

data/CHANGES.txt

@@ -1,3 +1,15 @@
+=== 4.2.0
+
+* BREAKING: Require Ruby 2.6 or later. Bundler on Ruby 2.3-2.5 resolves to 4.1.3. [#114]
+* Package only `lib`, `CHANGES.txt`, `LICENSE.txt` and `README.md` in the gem, about 40% smaller. Thanks @yuri-zubov [#118]
+* An exception raised during a transfer, such as `upload!` of a missing local file or an error from a progress callback, no longer leaves the channel registered and re-raises on later operations on the same session; the original error is raised once, library-opened files are closed and caller-passed IO is left open. Thanks @ThomasSevestre and @OskarEichler [#107, #26, #97]
+
+=== 4.1.3
+
+* Load again on Ruby 2.3-2.5 (4.1.2 needed 2.5), and declare `required_ruby_version >= 2.3` [#112, #110]
+* Add a `quote:` option to `upload`/`download` for the remote path: `:posix` (default), `:windows` for Win32-OpenSSH under cmd.exe or PowerShell (double-quoted, `\` sent as `/`, paths containing `"`, `$`, `` ` ``, `%`, `!`, curly quotes, CR, LF or NUL rejected), `:none` to send the path unchanged to servers without a shell, or a callable. By default a leading `~` or `~/` is now left for the remote shell to expand to the home directory; such paths previously referred to a literal `~` entry in the login directory and usually failed. Thanks @ArtsiomMusin for the Windows patch in #34 [#109, #34, #9]
+* Recursive uploads no longer abort on a broken symlink: it is skipped with a warning, the rest is uploaded, and a Net::SCP::Error listing the skipped paths is raised at the end, like OpenSSH scp. Based on #23 by @maage. [#108, #23]
+
 === 4.1.2
 
 * Security: Downloads no longer apply setuid, setgid or sticky bits sent by the server, check that a server-chosen local name matches the requested remote basename (as OpenSSH does since CVE-2019-6111), and refuse to follow an existing local symlink at a server-named path instead of writing through it. The local path passed by the caller may still be a symlink. O_NOFOLLOW suggested in net-sftp#162 by srosenhamer [#104]

data/README.md

@@ -69,6 +69,24 @@ require 'uri/open-scp'
 data = open("scp://user@host/path/to/file.txt").read
 ```
 
+The remote path is escaped for a POSIX shell, except that a leading `~` or
+`~/` is left for the remote shell to expand to the home directory (`~user/` is
+not expanded). Use the `quote:` option of `upload`/`download` for other
+servers:
+
+```ruby
+# Win32-OpenSSH (cmd.exe or PowerShell): the path is double-quoted and "\" becomes "/".
+# Paths containing ", $, `, %, !, curly quotes, CR, LF or NUL raise ArgumentError.
+scp.upload! "/local/path", "C:\\Program Files\\App\\file.txt", quote: :windows
+
+# Servers that don't run a shell (MikroTik and other appliances): the path is
+# sent unchanged. Never use this with untrusted paths.
+scp.download! "flash/backup.rsc", "/local/backup.rsc", quote: :none
+
+# Or quote it yourself
+scp.upload! "/local/path", remote, quote: ->(path) { "'#{path}'" }
+```
+
 For more information, see Net::SCP.
 
 ## REQUIREMENTS:

data/lib/net/scp/upload.rb

@@ -49,7 +49,8 @@ module Net; class SCP
         directive = "D%04o %d %s\n" % [mode, 0, File.basename(channel[:current])]
         channel.send_data(directive)
         channel[:cwd] = channel[:current]
-        channel[:stack] << Dir.entries(channel[:current]).reject { |i| i == "." || i == ".." }
+        entries = Dir.entries(channel[:current]).reject { |i| i == "." || i == ".." }
+        channel[:stack] << entries.reject { |i| skip_broken_symlink(channel, File.join(channel[:current], i)) }
         await_response(channel, :next_item)
       end
     end
@@ -124,6 +125,29 @@ module Net; class SCP
       end
     end
 
+    # Returns true if +path+ is a symlink whose target doesn't exist, after
+    # logging a warning and recording it for #raise_if_entries_skipped.
+    def skip_broken_symlink(channel, path)
+      return false unless File.symlink?(path) && !File.exist?(path)
+
+      lwarn { "#{path}: broken symlink, skipping" }
+      (channel[:skipped] ||= []) << path
+      true
+    end
+
+    # Once the remote has closed the channel, raises a Net::SCP::Error listing
+    # the entries skipped by #skip_broken_symlink, if any.
+    def raise_if_entries_skipped(channel)
+      return unless channel.closing? && channel[:skipped]
+
+      # Cleared so it raises once, as on_process keeps calling this until the close is flushed.
+      skipped, channel[:skipped] = channel[:skipped], nil
+      # A failed remote scp is reported by start_command's exit-status check instead.
+      return unless channel[:exit].to_i.zero?
+
+      raise Net::SCP::Error, "upload incomplete, skipped broken symlinks: #{skipped.map(&:inspect).join(', ')}"
+    end
+
     # If the :preserve option is set, send a 'T' directive and wait for the
     # server to respond before proceeding to either #upload_file_state or
     # #upload_directory_state, depending on what is being uploaded.

data/lib/net/scp/version.rb

@@ -49,10 +49,10 @@ module Net
       MAJOR = 4
 
       # The minor component of this version of the Net::SSH library
-      MINOR = 1
+      MINOR = 2
 
       # The tiny component of this version of the Net::SSH library
-      TINY  = 2
+      TINY  = 0
 
       # The prerelease component of this version of the Net::SSH library
       # nil allowed

data/lib/net/scp.rb

@@ -259,13 +259,24 @@ module Net
     #
     # * :recursive - the +local+ parameter refers to a local directory, which
     #   should be uploaded to a new directory named +remote+ on the remote
-    #   server.
+    #   server. Broken symlinks in it are skipped with a warning, and once
+    #   everything else is uploaded a Net::SCP::Error listing them is raised.
     # * :preserve - the atime and mtime of the file should be preserved.
     # * :verbose - the process should result in verbose output on the server
     #   end (useful for debugging).
     # * :chunk_size - the size of each "chunk" that should be sent. Defaults
     #   to 2048. Changing this value may improve throughput at the expense
     #   of decreasing interactivity.
+    # * :quote - how +remote+ is quoted in the scp command run by the remote
+    #   shell. :posix (the default) escapes it for a POSIX shell, leaving a
+    #   leading "~" or "~/" unescaped so it expands to the remote home
+    #   directory ("~user/" is not expanded). :windows is for Win32-OpenSSH,
+    #   whose shell may be cmd.exe or PowerShell: backslashes become "/", the
+    #   path is wrapped in double quotes, and paths containing a double or curly
+    #   quote, $, `, %, !, CR, LF or NUL raise ArgumentError. :none sends the
+    #   path unchanged, for servers that don't run a shell (some routers and
+    #   appliances); never use it with untrusted input. A callable is given
+    #   +remote+ and returns the string to send.
     #
     # This method will return immediately, returning the Net::SSH::Connection::Channel
     # object that will support the upload. To wait for the upload to finish,
@@ -298,6 +309,7 @@ module Net
     # * :preserve - the atime and mtime of the file should be preserved.
     # * :verbose - the process should result in verbose output on the server
     #   end (useful for debugging).
+    # * :quote - how +remote+ is quoted for the remote shell (see #upload).
     #
     # This method will return immediately, returning the Net::SSH::Connection::Channel
     # object that will support the download. To wait for the download to finish,
@@ -348,15 +360,14 @@ module Net
       # (See Net::SCP::Upload and Net::SCP::Download).
       def start_command(mode, local, remote, options={}, &callback)
         local = local.to_path if local.is_a?(Pathname)
-        session.open_channel do |channel|
-
-          if options[:shell]
-            escaped_file = shellescape(remote).gsub(/'/) { |m| "'\\''" }
-            command = "#{options[:shell]} -c '#{scp_command(mode, options)} #{escaped_file}'"
-          else
-            command = "#{scp_command(mode, options)} #{shellescape remote}"
-          end
+        # Kept in channel[:remote] too, so a download's basename check sees "C:/a/b.txt" as b.txt.
+        remote = remote.to_s.tr("\\", "/") if options[:quote] == :windows
+        command = "#{scp_command(mode, options)} #{quote_remote(remote, options[:quote] || :posix)}"
+        if options[:shell]
+          command = "#{options[:shell]} -c '#{command.gsub("'") { "'\\''" }}'"
+        end
 
+        session.open_channel do |channel|
           channel.exec(command) do |ch, success|
             if success
               channel[:local   ] = local
@@ -369,27 +380,30 @@ module Net
               channel[:error_string] = +''
 
               channel.on_close do
-                # The close can be dispatched before on_process has consumed data that arrived with it.
-                send("#{channel[:state]}_state", channel)
-                # If we got an exit-status and it is not 0, something went wrong
-                if !channel[:exit].nil? && channel[:exit] != 0
-                  raise Net::SCP::Error, 'SCP did not finish successfully ' \
-                                         "(#{channel[:exit]}): #{channel[:error_string]}"
-                end
-                # A zero or missing exit-status does not prove the transfer completed.
-                if channel[:state] != :finish
-                  message = +'SCP did not finish successfully (channel closed before end of transmission)'
-                  message << ": #{channel[:error_string]}" unless channel[:error_string].empty?
-                  raise Net::SCP::Error, message
+                begin
+                  next if channel[:aborted]
+
+                  # The close can be dispatched before on_process has consumed data that arrived with it.
+                  process_state(channel)
+                  # If we got an exit-status and it is not 0, something went wrong
+                  if !channel[:exit].nil? && channel[:exit] != 0
+                    raise Net::SCP::Error, 'SCP did not finish successfully ' \
+                                           "(#{channel[:exit]}): #{channel[:error_string]}"
+                  end
+                  # A zero or missing exit-status does not prove the transfer completed.
+                  if channel[:state] != :finish
+                    message = +'SCP did not finish successfully (channel closed before end of transmission)'
+                    message << ": #{channel[:error_string]}" unless channel[:error_string].empty?
+                    raise Net::SCP::Error, message
+                  end
+                ensure
+                  close_owned_io(channel)
                 end
-              ensure
-                io = channel[:io]
-                io.close if io && io != channel[:local] && !io.closed?
               end
               channel.on_data                   { |ch2, data| channel[:buffer].append(data) }
               channel.on_extended_data          { |ch2, type, data| debug { data.chomp } }
               channel.on_request("exit-status") { |ch2, data| channel[:exit] = data.read_long }
-              channel.on_process                { send("#{channel[:state]}_state", channel) }
+              channel.on_process                { process_state(channel) unless channel[:aborted] }
             else
               channel.close
               raise Net::SCP::Error, "could not exec scp on the remote host"
@@ -398,6 +412,25 @@ module Net
         end
       end
 
+      # Runs the action for the current state. If it raises, the transfer is
+      # aborted and the channel closed, so the error surfaces once and the
+      # session stays usable.
+      def process_state(channel)
+        send("#{channel[:state]}_state", channel)
+      rescue Exception
+        channel[:aborted] = true
+        close_owned_io(channel)
+        channel.close
+        raise
+      end
+
+      # Closes the IO opened by the library; an IO passed in by the caller is
+      # left open.
+      def close_owned_io(channel)
+        io = channel[:io]
+        io.close if io && io != channel[:local] && !io.closed?
+      end
+
       # Causes the state machine to enter the "await response" state, where
       # things just pause until the server replies with a 0 (see
       # #await_response_state), at which point the state machine will pick up
@@ -428,6 +461,7 @@ module Net
       # of the pipe, and allows the pipe to drain until the server closes it.
       def finish_state(channel)
         channel.eof!
+        raise_if_entries_skipped(channel)
       end
 
       # Invoked to report progress back to the client. If a callback was not
@@ -436,6 +470,29 @@ module Net
         channel[:callback].call(channel, name, sent, total) if channel[:callback]
       end
 
+      # Inside double quotes cmd.exe still expands % and !, PowerShell expands $ and `, and PowerShell also ends a string at U+2018..U+201E.
+      WINDOWS_UNSAFE = /["$`%!\r\n\0\u2018-\u201E]/
+
+      def quote_remote(remote, quote)
+        case quote
+        when :posix
+          remote = remote.to_s
+          return remote if remote == "~" || remote == "~/"
+          return "~/#{shellescape(remote[2..-1])}" if remote.start_with?("~/")
+          shellescape(remote)
+        when :windows
+          if remote.dup.force_encoding(Encoding::UTF_8) =~ WINDOWS_UNSAFE
+            raise ArgumentError, "remote path #{remote.inspect} contains a character that can't be quoted safely for a Windows shell"
+          end
+          "\"#{remote}\""
+        when :none
+          remote.to_s
+        else
+          raise ArgumentError, ":quote must be :posix, :windows, :none or a callable, got #{quote.inspect}" unless quote.respond_to?(:call)
+          quote.call(remote).to_s
+        end
+      end
+
       # Imported from ruby 1.9.2 shellwords.rb
       def shellescape(path)
         # Convert path to a string if it isn't already one.

data.tar.gz.sig

@@ -1,2 +1 @@
-�bf3p�l��q��E@P��a�	�y?��i�v_���K��?��B�Q�x�4�U�RM�u�������й�<���H\��Յl�9��
-S#6 &�t����\�+��tBk�����޽P�P�g��{s����j����Nί�q+��5D7�(�^�ʘ��)�x0.���$�m�T
	f~:��%%{P��b��GO!��V#���i�7c���"���8L3;��HB�j���3�T���e	�$:�A�?C
+T.7B����4�

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: net-scp
 version: !ruby/object:Gem::Version
-  version: 4.1.2
+  version: 4.2.0
 platform: ruby
 authors:
 - Jamis Buck
@@ -32,7 +32,7 @@ cert_chain:
   vNiMFH5yLu/tlav4xh+HlYscWVdFQIvd7f/Uxa+Vip1Pi16wmhnrE15z/vDX921v
   hukBRIoCEAuUgNVBh+L/C8aETzbf/77WU3Si/w==
   -----END CERTIFICATE-----
-date: 2026-10-25 00:00:00.000000000 Z
+date: 2026-10-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: net-ssh
@@ -91,19 +91,9 @@ extra_rdoc_files:
 - LICENSE.txt
 - README.md
 files:
-- ".github/pull_request_template.md"
-- ".github/workflows/changelog.yml"
-- ".github/workflows/ci.yml"
-- ".gitignore"
 - CHANGES.txt
-- CONTRIBUTING.md
-- Gemfile
 - LICENSE.txt
-- Manifest
 - README.md
-- Rakefile
-- SECURITY.md
-- changelog.d/README.md
 - lib/net/scp.rb
 - lib/net/scp/download.rb
 - lib/net/scp/errors.rb
@@ -111,9 +101,6 @@ files:
 - lib/net/scp/version.rb
 - lib/uri/open-scp.rb
 - lib/uri/scp.rb
-- net-scp-public_cert.pem
-- net-scp.gemspec
-- setup.rb
 homepage: https://github.com/net-ssh/net-scp
 licenses:
 - MIT
@@ -127,7 +114,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: '2.6'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="

data/.github/pull_request_template.md

@@ -1 +0,0 @@
-<!-- After opening the PR, add a changelog.d/<PR number>.<type>.txt fragment (none, change, security, breaking or breaking-security) instead of editing CHANGES.txt; see CONTRIBUTING.md#changelog. -->

data/.github/workflows/changelog.yml

@@ -1,18 +0,0 @@
-name: Changelog
-
-on:
-  pull_request:
-    types: [opened, synchronize, reopened, labeled, unlabeled]
-
-permissions:
-  contents: read
-
-jobs:
-  changelog:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          # HEAD is the PR merged into the base branch; HEAD^1 is the base it was merged into.
-          fetch-depth: 2
-      - uses: net-ssh/changelogd@v1

data/.github/workflows/ci.yml

@@ -1,25 +0,0 @@
-name: CI
-on:
-  pull_request:
-  push: { branches: master }
-permissions:
-  contents: read
-jobs:
-  test:
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        ruby-version: ['2.6', '2.7', '3.0', '3.1', '3.2', '3.3', '3.4', '4.0', 'ruby-head']
-    continue-on-error: ${{ matrix.ruby-version == 'ruby-head' }}
-    steps:
-      - uses: actions/checkout@v3
-      - name: Set up Ruby ${{ matrix.ruby-version }}
-        uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: ${{ matrix.ruby-version }}
-          bundler-cache: true # runs 'bundle install' and caches installed gems automatically
-      - name: Run Tests
-        run: bundle exec rake test
-        env:
-          RUBYOPT: "--enable=frozen_string_literal"

data/.gitignore

@@ -1,13 +0,0 @@
-coverage
-pkg
-doc
-*.swp
-
-.DS_Store
-
-# Bundle local files
-/vendor/
-.bundle/config
-Gemfile.lock
-
-lib/net/ssh/version.rb.old

data/CONTRIBUTING.md

@@ -1,33 +0,0 @@
-# Contributing to net-scp
-
-Run the tests with `bundle exec rake test`.
-
-## Changelog
-
-Don't edit `CHANGES.txt`. Instead, add a fragment file to `changelog.d/` in your PR; the release's version bump (`rake vbump:*`) moves all fragments into a new `=== <version>` section at the top of `CHANGES.txt` and deletes them.
-
-A fragment is named `<number>.<type>.txt`, where `<number>` is the PR number (so open the PR first, then add the fragment), and contains a single UTF-8 paragraph: the entry as it should read in `CHANGES.txt`, without the bullet or prefix. Lines are joined, so it can be wrapped. If it doesn't end with a reference list such as `[#95, #101]` or `[GHSA-xxxx-xxxx-xxxx]`, ` [#<number>]` is appended.
-
-| Type                | Written as                     | Use for                                                      |
-| ------------------- | ------------------------------ | ------------------------------------------------------------ |
-| `breaking-security` | `* BREAKING: Security: <text>` | an incompatible change made for security                     |
-| `breaking`          | `* BREAKING: <text>`           | an incompatible change                                       |
-| `security`          | `* Security: <text>`           | a security fix or hardening                                  |
-| `change`            | `* <text>`                     | any other user-visible fix or feature                        |
-| `none`              | nothing                        | PRs with no user-visible change (tests, CI, docs, refactors) |
-
-Examples:
-
-```sh
-rake "changelog:new[102,change,Fixed uploading files with spaces in their names]"
-# changelog.d/102.change.txt -> * Fixed uploading files with spaces in their names [#102]
-
-echo 'Refuse downloads that write outside the target directory [GHSA-xxxx-xxxx-xxxx]' > changelog.d/103.security.txt
-touch changelog.d/104.none.txt
-```
-
-For several entries from one PR add a suffix: `102.change.txt`, `102.change.2.txt` (`changelog:new` picks the next free one).
-
-`rake changelog:check` validates the fragments and `rake changelog:preview` prints the section the next release would add. CI fails a PR that edits `CHANGES.txt` or doesn't add or modify a `changelog.d/<PR number>.<type>.txt` fragment, unless it only touches `changelog.d/` or a maintainer adds the `skip-changelog` label; Dependabot PRs are skipped.
-
-The full rules, including how a release orders the entries, are in the [changelogd README](https://github.com/net-ssh/changelogd#readme).

data/Gemfile

@@ -1,22 +0,0 @@
-source 'https://rubygems.org'
-
-# Specify your gem's dependencies in mygem.gemspec
-gemspec
-
-gem "net-ssh", ">= 7.3.1"
-gem "logger" # no longer a default gem in Ruby 4.0+
-
-# TODO: add to gemspec
-gem "bundler", ">= 1.11"
-gem "rake", ">= 12.0"
-gem "rdoc"
-
-# git: rather than github:, which Bundler 1.x (the publish workflow uses 1.17.3) expands to an unsupported git:// URL.
-gem "changelogd", git: "https://github.com/net-ssh/changelogd.git", tag: "v1", group: :development
-
-gem 'byebug', group: %i[development test] if !Gem.win_platform? && RUBY_ENGINE == "ruby"
-
-if ENV["CI"]
-  gem 'codecov', require: false, group: :test
-  gem 'simplecov', require: false, group: :test
-end

data/Manifest

@@ -1,17 +0,0 @@
-CHANGELOG.rdoc
-lib/net/scp/download.rb
-lib/net/scp/errors.rb
-lib/net/scp/upload.rb
-lib/net/scp/version.rb
-lib/net/scp.rb
-lib/uri/open-scp.rb
-lib/uri/scp.rb
-Rakefile
-README.md
-setup.rb
-test/common.rb
-test/test_all.rb
-test/test_download.rb
-test/test_scp.rb
-test/test_upload.rb
-Manifest

data/Rakefile

@@ -1,185 +0,0 @@
-require "rubygems"
-require "rake"
-require "rake/clean"
-begin
-  require "rdoc/task"
-rescue LoadError
-end
-require "bundler/gem_tasks"
-
-desc "When releasing make sure NET_SSH_BUILDGEM_SIGNED is set"
-task :check_NET_SSH_BUILDGEM_SIGNED do
-  raise "NET_SSH_BUILDGEM_SIGNED should be set to release" unless ENV['NET_SSH_BUILDGEM_SIGNED']
-end
-
-Rake::Task[:release].enhance [:check_NET_SSH_BUILDGEM_SIGNED]
-Rake::Task[:release].prerequisites.unshift(:check_NET_SSH_BUILDGEM_SIGNED)
-
-task default: ["build"]
-CLEAN.include [ 'pkg', 'rdoc' ]
-name = "net-scp"
-
-require_relative "lib/net/scp/version"
-version = Net::SCP::Version::CURRENT
-
-begin
-  require "changelogd/rake"
-rescue LoadError
-  # A git gem isn't on the load path under plain `rake`, as the release workflow runs it; bundler/setup could clash with the running rake.
-  require "bundler"
-  $LOAD_PATH.unshift(*Bundler.definition.specs["changelogd"].flat_map(&:full_require_paths))
-  require "changelogd/rake"
-end
-Changelogd::RakeTasks.new(version_file: "lib/net/scp/version.rb")
-
-namespace :cert do
-  desc "Update public cert from private - only run if public is expired"
-  task :update_public_when_expired do
-    require 'openssl'
-    require 'time'
-    raw = File.read "net-scp-public_cert.pem"
-    certificate = OpenSSL::X509::Certificate.new raw
-    raise Exception, "Not yet expired: #{certificate.not_after}" unless certificate.not_after < Time.now
-    sh "gem cert --build netssh@solutious.com --days 365*5 --private-key /mnt/gem/net-ssh-private_key.pem"
-    sh "mv gem-public_cert.pem net-scp-public_cert.pem"
-    sh "gem cert --add net-scp-public_cert.pem"
-  end
-end
-
-if false
-  begin
-    require "jeweler"
-    Jeweler::Tasks.new do |s|
-      s.version = version
-      s.name = name
-      s.summary = "A pure Ruby implementation of the SCP client protocol"
-      s.description = s.summary
-      s.email = "net-ssh@solutious.com"
-      s.homepage = "https://github.com/net-ssh/net-scp"
-      s.authors = ["Jamis Buck", "Delano Mandelbaum"]
-
-      s.add_dependency 'net-ssh', ">=2.6.5"
-
-      s.add_development_dependency 'test-unit'
-      s.add_development_dependency 'mocha'
-
-      s.license = "MIT"
-
-      s.signing_key = File.join('/mnt/gem/', 'gem-private_key.pem')
-      s.cert_chain  = ['gem-public_cert.pem']
-    end
-    Jeweler::GemcutterTasks.new
-  rescue LoadError
-    puts "Jeweler (or a dependency) not available. Install it with: sudo gem install jeweler"
-  end
-end
-
-require 'rake/testtask'
-Rake::TestTask.new do |t|
-  t.libs = ["lib", "test"]
-end
-
-extra_files = %w[LICENSE.txt THANKS.txt CHANGES.txt ]
-if defined?(RDoc::Task)
-  RDoc::Task.new do |rdoc|
-    rdoc.rdoc_dir = "rdoc"
-    rdoc.title = "#{name} #{version}"
-    rdoc.generator = 'hanna' # gem install hanna-nouveau
-    rdoc.main = 'README.md'
-    rdoc.rdoc_files.include("README*")
-    rdoc.rdoc_files.include("bin/*.rb")
-    rdoc.rdoc_files.include("lib/**/*.rb")
-    extra_files.each { |file|
-      rdoc.rdoc_files.include(file) if File.exist?(file)
-    }
-  end
-end
-
-def change_version(&block)
-  Rake::Task["changelog:check"].invoke
-  version_file = 'lib/net/scp/version.rb'
-  require_relative version_file
-  pre = Net::SCP::Version::PRE
-  tiny = Net::SCP::Version::TINY
-  result = block[pre: pre, tiny: Net::SCP::Version::TINY]
-  raise ArgumentError, "Version change logic should always return a pre" unless result.key?(:pre)
-
-  new_pre = result[:pre]
-  new_tiny = result[:tiny] || tiny
-  found = { pre: false, tiny: false }
-  File.open("#{version_file}.new", "w") do |f|
-    File.readlines(version_file).each do |line|
-      match =
-        if pre.nil?
-          /^(\s+PRE\s+=\s+)nil(\s*)$/.match(line)
-        else
-          /^(\s+PRE\s+=\s+")#{pre}("\s*)$/.match(line)
-        end
-      if match
-        prefix = match[1]
-        postfix = match[2]
-        prefix.delete_suffix!('"')
-        postfix.delete_prefix!('"')
-        new_line = "#{prefix}#{new_pre.inspect}#{postfix}"
-        puts "Changing:\n  - #{line}  + #{new_line}"
-        line = new_line
-        found[:pre] = true
-      end
-
-      if new_tiny != tiny
-        match = /^(\s+TINY\s+=\s+)#{tiny}(\s*)$/.match(line)
-        if match
-          prefix = match[1]
-          postfix = match[2]
-          new_line = "#{prefix}#{new_tiny}#{postfix}"
-          puts "Changing:\n  - #{line}  + #{new_line}"
-          line = new_line
-          found[:tiny] = true
-        end
-      end
-
-      f.write(line)
-    end
-    raise ArgumentError, "Cound not find line: PRE = \"#{pre}\" in #{version_file}" unless found[:pre]
-    raise ArgumentError, "Cound not find line: TINY = \"#{tiny}\" in #{version_file}" unless found[:tiny] || new_tiny == tiny
-  end
-
-  FileUtils.mv version_file, "#{version_file}.old"
-  FileUtils.mv "#{version_file}.new", version_file
-  Rake::Task["changelog:release"].invoke
-end
-
-namespace :vbump do
-  desc "Final release"
-  task :final do
-    change_version do |pre:, tiny:|
-      _ = tiny
-      if pre.nil?
-        { tiny: tiny + 1, pre: nil }
-      else
-        raise ArgumentError, "Unexpected pre: #{pre}" if pre.nil?
-
-        { pre: nil }
-      end
-    end
-  end
-
-  desc "Increment prerelease"
-  task :pre, [:type] do |_t, args|
-    change_version do |pre:, tiny:|
-      puts " PRE => #{pre.inspect}"
-      match = /^([a-z]+)(\d+)/.match(pre)
-      raise ArgumentError, "Unexpected pre: #{pre}" if match.nil? && args[:type].nil?
-
-      if match.nil? || (!args[:type].nil? && args[:type] != match[1])
-        if pre.nil?
-          { pre: "#{args[:type]}1", tiny: tiny + 1 }
-        else
-          { pre: "#{args[:type]}1" }
-        end
-      else
-        { pre: "#{match[1]}#{match[2].to_i + 1}" }
-      end
-    end
-  end
-end