net-ssh 7.2.0 → 8.0.0

data/net-ssh-public_cert.pem

@@ -1,20 +1,21 @@
 -----BEGIN CERTIFICATE-----
-MIIDQDCCAiigAwIBAgIBATANBgkqhkiG9w0BAQsFADAlMSMwIQYDVQQDDBpuZXRz
-c2gvREM9c29sdXRpb3VzL0RDPWNvbTAeFw0yMzAxMjQwMzE3NTVaFw0yNDAxMjQw
-MzE3NTVaMCUxIzAhBgNVBAMMGm5ldHNzaC9EQz1zb2x1dGlvdXMvREM9Y29tMIIB
-IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxieE22fR/qmdPKUHyYTyUx2g
-wskLwrCkxay+Tvc97ZZUOwf85LDDDPqhQaTWLvRwnIOMgQE2nBPzwalVclK6a+pW
-x/18KDeZY15vm3Qn5p42b0wi9hUxOqPm3J2hdCLCcgtENgdX21nVzejn39WVqFJO
-lntgSDNW5+kCS8QaRsmIbzj17GKKkrsw39kiQw7FhWfJFeTjddzoZiWwc59KA/Bx
-fBbmDnsMLAtAtauMOxORrbx3EOY7sHku/kSrMg3FXFay7jc6BkbbUij+MjJ/k82l
-4o8o0YO4BAnya90xgEmgOG0LCCxRhuXQFnMDuDjK2XnUe0h4/6NCn94C+z9GsQID
-AQABo3sweTAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHQ4EFgQUBfKiwO2e
-M4NEiRrVG793qEPLYyMwHwYDVR0RBBgwFoEUbmV0c3NoQHNvbHV0aW91cy5jb20w
-HwYDVR0SBBgwFoEUbmV0c3NoQHNvbHV0aW91cy5jb20wDQYJKoZIhvcNAQELBQAD
-ggEBAHyOSaOUji+EJFWZ46g+2EZ/kG7EFloFtIQUz8jDJIWGE+3NV5po1M0Z6EqH
-XmG3BtMLfgOV9NwMQRqIdKnZDfKsqM/FOu+9IqrP+OieAde5OrXR2pzQls60Xft7
-3qNVaQS99woQRqiUiDQQ7WagOYrZjuVANqTDNt4myzGSjS5sHcKlz3PRn0LJRMe5
-ouuLwQ7BCXityv5RRXex2ibCOyY7pB5ris6xDnPe1WdlyCfUf1Fb+Yqxpy6a8QmH
-v84waVXQ2i5M7pJaHVBF7DxxeW/q8W3VCnsq8vmmvULSThD18QqYGaFDJeN8sTR4
-6tfjgZ6OvGSScvbCMHkCE9XjonE=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 -----END CERTIFICATE-----

data/net-ssh.gemspec

@@ -15,7 +15,7 @@ Gem::Specification.new do |spec|
   spec.description   = %q{Net::SSH: a pure-Ruby implementation of the SSH2 client protocol. It allows you to write programs that invoke and interact with processes on remote servers, via SSH2.}
   spec.homepage      = "https://github.com/net-ssh/net-ssh"
   spec.license       = "MIT"
-  spec.required_ruby_version = Gem::Requirement.new(">= 2.6")
+  spec.required_ruby_version = Gem::Requirement.new(">= 2.7")
   spec.metadata = {
     "changelog_uri" => "https://github.com/net-ssh/net-ssh/blob/master/CHANGES.txt"
   }
@@ -30,17 +30,16 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
 
-  unless ENV['NET_SSH_NO_ED25519']
-    spec.add_development_dependency("bcrypt_pbkdf", "~> 1.0") unless RUBY_PLATFORM == "java"
-    spec.add_development_dependency("ed25519", "~> 1.2")
-    spec.add_development_dependency('x25519') unless RUBY_PLATFORM == 'java'
-  end
+  spec.add_dependency("logger")
+  spec.add_dependency("openssl", ">= 3.2.0")
 
-  spec.add_development_dependency('rbnacl', '~> 7.1') unless ENV['NET_SSH_NO_RBNACL']
+  spec.add_development_dependency("bcrypt_pbkdf", "~> 1.0") unless RUBY_PLATFORM == "java"
 
+  spec.add_development_dependency "base64"
   spec.add_development_dependency "bundler", ">= 1.17"
   spec.add_development_dependency "minitest", "~> 5.19"
-  spec.add_development_dependency "mocha", "~> 2.1.0"
+  spec.add_development_dependency "mocha", ">= 2.1", "< 4"
+  spec.add_development_dependency "ostruct"
   spec.add_development_dependency "rake", "~> 12.0"
   spec.add_development_dependency "rubocop", "~> 1.28.0"
 end

data/rakelib/changelog.rb

@@ -0,0 +1,229 @@
+# frozen_string_literal: true
+
+require 'fileutils'
+require 'open3'
+
+# Builds CHANGES.txt sections from the fragment files in changelog.d/ (see CONTRIBUTING.md).
+class Changelog
+  class Error < StandardError; end
+
+  # Output order of the groups in a release section; `none` fragments are never emitted.
+  TYPES = {
+    'breaking-security' => 'BREAKING: Security: ',
+    'breaking' => 'BREAKING: ',
+    'security' => 'Security: ',
+    'change' => '',
+    'none' => nil
+  }.freeze
+
+  FILENAME = /\A(?<number>[1-9]\d*)\.(?<type>[a-z-]+)(?:\.(?<seq>[1-9]\d*))?\.txt\z/.freeze
+  REF = /#\d+|GHSA(?:-[a-z0-9]{4}){3}|CVE-\d{4}-\d+/i.freeze
+  REF_LIST = /\[(?:#{REF})(?:,\s*(?:#{REF}))*\]\z/.freeze
+  UNRELEASED = '=== Unreleased'
+  PLACEHOLDER = 'TODO: describe the change as it should read in CHANGES.txt'
+
+  Fragment = Struct.new(:path, :number, :type, :seq, :text) do
+    def entry
+      "#{TYPES.fetch(type)}#{text}"
+    end
+
+    def sort_key
+      [-number, seq]
+    end
+  end
+
+  attr_reader :dir, :changes_path
+
+  def initialize(root)
+    @root = root
+    @dir = File.join(root, 'changelog.d')
+    @changes_path = File.join(root, 'CHANGES.txt')
+  end
+
+  # Raises Error listing every invalid fragment; returns all fragments, including `none` ones.
+  def fragments
+    errors = []
+    fragments = []
+    entries_in_dir.each do |name|
+      result = parse_fragment(name)
+      result.is_a?(Fragment) ? fragments << result : errors << "changelog.d/#{name}: #{result}"
+    end
+    raise Error, "Invalid changelog fragments:\n  #{errors.join("\n  ")}" unless errors.empty?
+
+    fragments.sort_by(&:sort_key)
+  end
+
+  # Validates the fragments and the `=== Unreleased` section of CHANGES.txt; returns the fragments.
+  def check
+    all = fragments
+    split_changes(read_changes)
+    all
+  end
+
+  # The text of the section for +heading+, or nil for a pre-release with nothing to release.
+  def section(heading)
+    assemble(heading, fragments, split_changes(read_changes))
+  end
+
+  # Writes the section for +heading+ to the top of CHANGES.txt, folding in any `=== Unreleased`
+  # entries, and removes all fragments; returns the section, or nil when CHANGES.txt was left unchanged.
+  def release(heading)
+    all = fragments
+    content = read_changes
+    raise Error, "CHANGES.txt already has a '=== #{heading}' section" if content.lines.any? { |l| l.chomp == "=== #{heading}" }
+
+    parts = split_changes(content)
+    section = assemble(heading, all, parts)
+    if section
+      rest = parts[:rest].empty? ? '' : "\n#{parts[:rest]}"
+      File.write(changes_path, "#{parts[:preamble]}#{section}#{rest}")
+    end
+    remove(all.map(&:path))
+    section
+  end
+
+  # Creates a fragment for PR +number+ and returns its path; picks the next free `.N` suffix if needed.
+  def new_fragment(number, type, text = nil)
+    path = (1..).lazy.map { |seq| File.join(dir, fragment_name(number, type, seq)) }.find { |p| !File.exist?(p) }
+    error = validate_name(File.basename(path))
+    raise Error, error if error
+
+    FileUtils.mkdir_p(dir)
+    text = PLACEHOLDER if (text.nil? || text.strip.empty?) && type != 'none'
+    File.write(path, "#{text}\n")
+    path
+  end
+
+  def self.heading(major, minor, tiny, pre)
+    ["#{major}.#{minor}.#{tiny}", pre].compact.join(' ')
+  end
+
+  private
+
+  def entries_in_dir
+    return [] unless Dir.exist?(dir)
+
+    Dir.children(dir).sort.reject { |name| name == 'README.md' || name.start_with?('.') }
+  end
+
+  def fragment_name(number, type, seq)
+    seq == 1 ? "#{number}.#{type}.txt" : "#{number}.#{type}.#{seq}.txt"
+  end
+
+  def validate_name(name)
+    match = FILENAME.match(name)
+    return "file name must be <PR number>.<type>[.<n>].txt, types: #{TYPES.keys.join(', ')}" unless match
+    return "unknown type '#{match[:type]}', expected one of: #{TYPES.keys.join(', ')}" unless TYPES.key?(match[:type])
+
+    nil
+  end
+
+  # Returns a Fragment, or an error message.
+  def parse_fragment(name)
+    path = File.join(dir, name)
+    return 'is not a file' unless File.file?(path)
+
+    error = validate_name(name)
+    return error if error
+
+    match = FILENAME.match(name)
+    fragment = Fragment.new(path, match[:number].to_i, match[:type], (match[:seq] || 1).to_i, nil)
+    return fragment if fragment.type == 'none'
+
+    text = parse_text(read_utf8(path))
+    return text[:error] if text[:error]
+
+    fragment.text = text[:text]
+    fragment.text = "#{fragment.text} [##{fragment.number}]" unless fragment.text.match?(REF_LIST)
+    fragment
+  end
+
+  def parse_text(raw)
+    return { error: 'is not valid UTF-8' } unless raw.valid_encoding?
+
+    lines = raw.strip.lines.map(&:strip)
+    return { error: 'is empty' } if lines.empty?
+    return { error: 'must be a single paragraph (no blank lines)' } if lines.include?('')
+
+    text = lines.join(' ')
+    return { error: 'still contains the placeholder text' } if text == PLACEHOLDER
+    return { error: "should not start with a bullet, it's added when assembling" } if text.match?(/\A[*-] /)
+    return { error: 'should not start with BREAKING:/Security:, the type adds the prefix' } if text.match?(/\A(BREAKING|Security):/i)
+
+    { text: text }
+  end
+
+  def read_changes
+    File.exist?(changes_path) ? read_utf8(changes_path).gsub("\r\n", "\n") : ''
+  end
+
+  # Explicit so a non-UTF-8 locale (e.g. LANG=C) doesn't break on non-ASCII text.
+  def read_utf8(path)
+    File.read(path, mode: 'r:bom|utf-8')
+  end
+
+  # A final release (a heading without a pre-release suffix) always gets a section, so every published version has a heading.
+  def assemble(heading, fragments, parts)
+    entries = grouped_entries(fragments, parts[:unreleased])
+    if entries.empty?
+      return nil unless heading.match?(/\A\d+\.\d+\.\d+\z/)
+
+      previous = parts[:rest][/\A=== (.+)$/, 1]
+      entries = ["  * #{previous ? "No changes since #{previous}." : 'No changes.'}\n"]
+    end
+    "=== #{heading}\n\n#{entries.join}"
+  end
+
+  # Splits CHANGES.txt into the text before the first heading, the entries of a leading
+  # `=== Unreleased` section (as lists of raw lines) and everything from the first released heading on.
+  def split_changes(content)
+    lines = content.lines
+    first = lines.index { |l| l.start_with?('=== ') } || lines.size
+    preamble = lines[0...first].join
+    return { preamble: preamble, unreleased: [], rest: lines[first..].join } unless lines[first]&.chomp == UNRELEASED
+
+    body_end = lines.index.with_index { |l, i| i > first && l.start_with?('=== ') } || lines.size
+    { preamble: preamble, unreleased: unreleased_entries(lines[(first + 1)...body_end]), rest: lines[body_end..].join }
+  end
+
+  def unreleased_entries(lines)
+    lines.each_with_object([]) do |line, entries|
+      next if line.strip.empty?
+
+      if line.match?(/\A\s*\* /)
+        entries << [line]
+      elsif entries.empty?
+        raise Error, "Cannot parse the Unreleased section of CHANGES.txt near: #{line.strip}"
+      else
+        entries.last << line
+      end
+    end
+  end
+
+  # Fragments come before the hand-written Unreleased entries of the same group.
+  def grouped_entries(fragments, unreleased)
+    TYPES.keys.flat_map do |type|
+      from_fragments = fragments.select { |f| f.type == type && type != 'none' }.map { |f| "  * #{f.entry}\n" }
+      from_unreleased = unreleased.select { |lines| unreleased_type(lines.first) == type }.map do |lines|
+        lines.join.end_with?("\n") ? lines.join : "#{lines.join}\n"
+      end
+      from_fragments + from_unreleased
+    end
+  end
+
+  def unreleased_type(line)
+    text = line.sub(/\A\s*\* /, '')
+    TYPES.find { |_type, prefix| prefix && !prefix.empty? && text.start_with?(prefix) }&.first || 'change'
+  end
+
+  # `git rm` so the deletions are staged with the version bump; plain delete outside a git checkout.
+  def remove(paths)
+    return if paths.empty?
+
+    relative = paths.map { |p| p.delete_prefix("#{@root}/") }
+    _out, status = Open3.capture2e('git', '-C', @root, 'rm', '-q', '--', *relative)
+    FileUtils.rm_f(paths) unless status.success?
+  rescue SystemCallError
+    FileUtils.rm_f(paths)
+  end
+end

metadata

@@ -1,94 +1,95 @@
 --- !ruby/object:Gem::Specification
 name: net-ssh
 version: !ruby/object:Gem::Version
-  version: 7.2.0
+  version: 8.0.0
 platform: ruby
 authors:
 - Jamis Buck
 - Delano Mandelbaum
 - Miklós Fazekas
-autorequire: 
+autorequire:
 bindir: exe
 cert_chain:
 - |
   -----BEGIN CERTIFICATE-----
-  MIIDQDCCAiigAwIBAgIBATANBgkqhkiG9w0BAQsFADAlMSMwIQYDVQQDDBpuZXRz
-  c2gvREM9c29sdXRpb3VzL0RDPWNvbTAeFw0yMzAxMjQwMzE3NTVaFw0yNDAxMjQw
-  MzE3NTVaMCUxIzAhBgNVBAMMGm5ldHNzaC9EQz1zb2x1dGlvdXMvREM9Y29tMIIB
-  IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxieE22fR/qmdPKUHyYTyUx2g
-  wskLwrCkxay+Tvc97ZZUOwf85LDDDPqhQaTWLvRwnIOMgQE2nBPzwalVclK6a+pW
-  x/18KDeZY15vm3Qn5p42b0wi9hUxOqPm3J2hdCLCcgtENgdX21nVzejn39WVqFJO
-  lntgSDNW5+kCS8QaRsmIbzj17GKKkrsw39kiQw7FhWfJFeTjddzoZiWwc59KA/Bx
-  fBbmDnsMLAtAtauMOxORrbx3EOY7sHku/kSrMg3FXFay7jc6BkbbUij+MjJ/k82l
-  4o8o0YO4BAnya90xgEmgOG0LCCxRhuXQFnMDuDjK2XnUe0h4/6NCn94C+z9GsQID
-  AQABo3sweTAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHQ4EFgQUBfKiwO2e
-  M4NEiRrVG793qEPLYyMwHwYDVR0RBBgwFoEUbmV0c3NoQHNvbHV0aW91cy5jb20w
-  HwYDVR0SBBgwFoEUbmV0c3NoQHNvbHV0aW91cy5jb20wDQYJKoZIhvcNAQELBQAD
-  ggEBAHyOSaOUji+EJFWZ46g+2EZ/kG7EFloFtIQUz8jDJIWGE+3NV5po1M0Z6EqH
-  XmG3BtMLfgOV9NwMQRqIdKnZDfKsqM/FOu+9IqrP+OieAde5OrXR2pzQls60Xft7
-  3qNVaQS99woQRqiUiDQQ7WagOYrZjuVANqTDNt4myzGSjS5sHcKlz3PRn0LJRMe5
-  ouuLwQ7BCXityv5RRXex2ibCOyY7pB5ris6xDnPe1WdlyCfUf1Fb+Yqxpy6a8QmH
-  v84waVXQ2i5M7pJaHVBF7DxxeW/q8W3VCnsq8vmmvULSThD18QqYGaFDJeN8sTR4
-  6tfjgZ6OvGSScvbCMHkCE9XjonE=
+  MIIDeDCCAmCgAwIBAgIBATANBgkqhkiG9w0BAQsFADBBMQ8wDQYDVQQDDAZuZXRz
+  c2gxGTAXBgoJkiaJk/IsZAEZFglzb2x1dGlvdXMxEzARBgoJkiaJk/IsZAEZFgNj
+  b20wHhcNMjYwMjE1MTAxNzUyWhcNMjcwMjE1MTAxNzUyWjBBMQ8wDQYDVQQDDAZu
+  ZXRzc2gxGTAXBgoJkiaJk/IsZAEZFglzb2x1dGlvdXMxEzARBgoJkiaJk/IsZAEZ
+  FgNjb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJ4TbZ9H+qZ08
+  pQfJhPJTHaDCyQvCsKTFrL5O9z3tllQ7B/zksMMM+qFBpNYu9HCcg4yBATacE/PB
+  qVVyUrpr6lbH/XwoN5ljXm+bdCfmnjZvTCL2FTE6o+bcnaF0IsJyC0Q2B1fbWdXN
+  6Off1ZWoUk6We2BIM1bn6QJLxBpGyYhvOPXsYoqSuzDf2SJDDsWFZ8kV5ON13Ohm
+  JbBzn0oD8HF8FuYOewwsC0C1q4w7E5GtvHcQ5juweS7+RKsyDcVcVrLuNzoGRttS
+  KP4yMn+TzaXijyjRg7gECfJr3TGASaA4bQsILFGG5dAWcwO4OMrZedR7SHj/o0Kf
+  3gL7P0axAgMBAAGjezB5MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSwMB0GA1UdDgQW
+  BBQF8qLA7Z4zg0SJGtUbv3eoQ8tjIzAfBgNVHREEGDAWgRRuZXRzc2hAc29sdXRp
+  b3VzLmNvbTAfBgNVHRIEGDAWgRRuZXRzc2hAc29sdXRpb3VzLmNvbTANBgkqhkiG
+  9w0BAQsFAAOCAQEASsiVybehJLRPztFeFV8+SKa2BwbBSNJoAkhARVJKhpJxCfeY
+  gO7Kqb7JCykzb0anb1s6xTrzD03cWRNGE2YaoBLqnzeUqW1LPqVwmcySmnSIGH9F
+  DlFYlHaAn3oSqglyDxQx9bLngKatetx+tSfB3bLAb7Tr9PO8/lhBENbjlD4+UUwD
+  gApoZuD9pknWDH3KsITgzphswETBdo0hd9aLnRNR3EifD0lUIEit/0Yx6euSxWtI
+  ufHf4AX2UIkJbh7zCPkiNCqIr7MSWLNFG/9lOlHYsEJM8XujT1ofPobYx6YSFx/C
+  7HBrI7UX7awt6UvBZebhcHzyMHxg/B5PVQllPA==
   -----END CERTIFICATE-----
-date: 2023-07-30 00:00:00.000000000 Z
+date: 2026-10-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: bcrypt_pbkdf
+  name: logger
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.0'
-  type: :development
+        version: '0'
+  type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '0'
 - !ruby/object:Gem::Dependency
-  name: ed25519
+  name: openssl
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.2'
-  type: :development
+        version: 3.2.0
+  type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.2'
+        version: 3.2.0
 - !ruby/object:Gem::Dependency
-  name: x25519
+  name: bcrypt_pbkdf
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '1.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '1.0'
 - !ruby/object:Gem::Dependency
-  name: rbnacl
+  name: base64
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '7.1'
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '7.1'
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -121,16 +122,36 @@ dependencies:
   name: mocha
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.1'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: 2.1.0
+        version: '4'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.1'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4'
+- !ruby/object:Gem::Dependency
+  name: ostruct
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 2.1.0
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -173,6 +194,8 @@ files:
 - ".dockerignore"
 - ".github/FUNDING.yml"
 - ".github/config/rubocop_linter_action.yml"
+- ".github/pull_request_template.md"
+- ".github/workflows/changelog.yml"
 - ".github/workflows/ci-with-docker.yml"
 - ".github/workflows/ci.yml"
 - ".github/workflows/rubocop.yml"
@@ -180,12 +203,12 @@ files:
 - ".rubocop.yml"
 - ".rubocop_todo.yml"
 - CHANGES.txt
+- CONTRIBUTING.md
 - DEVELOPMENT.md
 - Dockerfile
 - Dockerfile.openssl3
+- Dockerfile.zlib_ng
 - Gemfile
-- Gemfile.noed25519
-- Gemfile.norbnacl
 - ISSUE_TEMPLATE.md
 - LICENSE.txt
 - Manifest
@@ -194,6 +217,7 @@ files:
 - SECURITY.md
 - THANKS.txt
 - appveyor.yml
+- changelog.d/README.md
 - docker-compose.yml
 - lib/net/ssh.rb
 - lib/net/ssh/authentication/agent.rb
@@ -210,6 +234,7 @@ files:
 - lib/net/ssh/authentication/methods/publickey.rb
 - lib/net/ssh/authentication/pageant.rb
 - lib/net/ssh/authentication/pub_key_fingerprint.rb
+- lib/net/ssh/authentication/security_key.rb
 - lib/net/ssh/authentication/session.rb
 - lib/net/ssh/buffer.rb
 - lib/net/ssh/buffered_io.rb
@@ -224,6 +249,10 @@ files:
 - lib/net/ssh/key_factory.rb
 - lib/net/ssh/known_hosts.rb
 - lib/net/ssh/loggable.rb
+- lib/net/ssh/multiplex.rb
+- lib/net/ssh/multiplex/client.rb
+- lib/net/ssh/multiplex/control_path.rb
+- lib/net/ssh/multiplex/proxy_transport.rb
 - lib/net/ssh/packet.rb
 - lib/net/ssh/prompt.rb
 - lib/net/ssh/proxy/command.rb
@@ -243,12 +272,15 @@ files:
 - lib/net/ssh/test/remote_packet.rb
 - lib/net/ssh/test/script.rb
 - lib/net/ssh/test/socket.rb
+- lib/net/ssh/transport/aes128_gcm.rb
+- lib/net/ssh/transport/aes256_gcm.rb
 - lib/net/ssh/transport/algorithms.rb
 - lib/net/ssh/transport/chacha20_poly1305_cipher.rb
 - lib/net/ssh/transport/chacha20_poly1305_cipher_loader.rb
 - lib/net/ssh/transport/cipher_factory.rb
 - lib/net/ssh/transport/constants.rb
 - lib/net/ssh/transport/ctr.rb
+- lib/net/ssh/transport/gcm_cipher.rb
 - lib/net/ssh/transport/hmac.rb
 - lib/net/ssh/transport/hmac/abstract.rb
 - lib/net/ssh/transport/hmac/md5.rb
@@ -257,6 +289,7 @@ files:
 - lib/net/ssh/transport/hmac/ripemd160.rb
 - lib/net/ssh/transport/hmac/sha1.rb
 - lib/net/ssh/transport/hmac/sha1_96.rb
+- lib/net/ssh/transport/hmac/sha1_etm.rb
 - lib/net/ssh/transport/hmac/sha2_256.rb
 - lib/net/ssh/transport/hmac/sha2_256_96.rb
 - lib/net/ssh/transport/hmac/sha2_256_etm.rb
@@ -289,16 +322,16 @@ files:
 - lib/net/ssh/verifiers/always.rb
 - lib/net/ssh/verifiers/never.rb
 - lib/net/ssh/version.rb
-- lib/net/ssh/version.rb.old
 - net-ssh-public_cert.pem
 - net-ssh.gemspec
+- rakelib/changelog.rb
 - support/ssh_tunnel_bug.rb
 homepage: https://github.com/net-ssh/net-ssh
 licenses:
 - MIT
 metadata:
   changelog_uri: https://github.com/net-ssh/net-ssh/blob/master/CHANGES.txt
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -306,7 +339,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.6'
+      version: '2.7'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
@@ -314,7 +347,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubygems_version: 3.3.3
-signing_key: 
+signing_key:
 specification_version: 4
 summary: 'Net::SSH: a pure-Ruby implementation of the SSH2 client protocol.'
 test_files: []

metadata.gz.sig

@@ -1 +1 @@
-�G����<�C�9ˆv�'�E���Ds(�{
+.t��d�l�&%+j��H�,�+���*S�x6�$|x��j\���Qg�7I^%�G�n�%��m@Ƈh�M#�.2�y �S�ȇfG
�>��N���}b�q8y\��6$g��M�
�;HP����w;�y�B��#��e���M��ƗZ�����S�yC0>w��ɬ�B�6�_\h�@�'F���<��� _��Z}^>�5�K^L�7O:�Uy�ZOA�l��������

data/Gemfile.noed25519

@@ -1,12 +0,0 @@
-source 'https://rubygems.org'
-
-ENV['NET_SSH_NO_ED25519'] = 'true'
-# Specify your gem's dependencies in mygem.gemspec
-gemspec
-
-if ENV["CI"] && !Gem.win_platform?
-  gem 'simplecov', require: false, group: :test
-  gem 'codecov', require: false, group: :test
-end
-
-gem 'webrick', group: %i[development test] if RUBY_VERSION.split(".")[0].to_i >= 3

data/Gemfile.norbnacl

@@ -1,12 +0,0 @@
-source 'https://rubygems.org'
-
-ENV['NET_SSH_NO_RBNACL'] = 'true'
-# Specify your gem's dependencies in mygem.gemspec
-gemspec
-
-if ENV["CI"] && !Gem.win_platform?
-  gem 'simplecov', require: false, group: :test
-  gem 'codecov', require: false, group: :test
-end
-
-gem 'webrick', group: %i[development test] if RUBY_VERSION.split(".")[0].to_i >= 3