Skip to content

Bump sshd-core from 1.7.0 to 2.9.2#70

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/org.apache.sshd-sshd-core-2.9.2
Open

Bump sshd-core from 1.7.0 to 2.9.2#70
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/org.apache.sshd-sshd-core-2.9.2

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 15, 2022

Bumps sshd-core from 1.7.0 to 2.9.2.

Changelog

Sourced from sshd-core's changelog.

Version 2.1.0 to 2.2.0

Version 2.2.0 to 2.3.0

Version 2.3.0 to 2.4.0

Version 2.4.0 to 2.5.0

Version 2.5.0 to 2.5.1

Version 2.5.1 to 2.6.0

Version 2.6.0 to 2.7.0

Version 2.7.0 to 2.8.0

Version 2.8.0 to 2.9.0

Version 2.9.0 to 2.9.1

Planned for next version

Bug fixes

  • SSHD-1173 Not fully using up a channel window may lead to hangs (see Channel windows below)

  • SSHD-1287 SFTP: reading with buffers larger than 126kB leads to data corruption

  • SSHD-1293 ExplicitPortForwardingTracker does not unbind auto-allocated port

  • SSHD-1294 Close MinaServiceFactory instances properly

  • SSHD-1297 Avoid OutOfMemoryError when reading a public key from a corrupted Buffer

  • SSHD-1302 Reading from Channel.getInvertedOut() after EOF was reached throws IOException instead of returning -1

  • SSHD-1303 Reading from redirected Channel.getInvertedErr() delivers stdout; should be at EOF

  • SSHD-1307 [NIO2] TCP/IP port forwarding: shut down output stream only after pending writes have been written

  • GH-263 Race condition in BufferedIoOutputStream

  • GH-266 ChannelPipedOutputStream.flush() must be a no-op

Major code re-factoring

Potential compatibility issues

Minor code helpers

  • New utility method KeyUtils.loadPublicKey() to read a public key file.

Behavioral changes and enhancements

  • Netty I/O back-end: respect configurations for CoreModuleProperties.SOCKET_BACKLOG and CoreModuleProperties.SOCKET_REUSEADDR.
  • MINA I/O back-end: use CoreModuleProperties.NIO2_READ_BUFFER_SIZE for the initial read buffer size, if set. A new CoreModuleProperties.MIN_READ_BUFFER_SIZE can be set to control the minimum read buffer size (64 bytes by default in Apache MINA).

... (truncated)

Commits
  • fbbbb7b [maven-release-plugin] prepare release sshd-2.9.2
  • 1ccde6c Minor comment fix
  • 5a8fe83 Better file handling for host keys
  • bba481a MinaSession: avoid synthetic accesses
  • f3a3d16 GH-266: Make ChannelPipedOutputStream.flush() a no-op
  • a85d074 [releng] Update GitHub action versions
  • b724ac2 Changes.md: mention GH-263
  • ba82c13 GH-263: Fix race condition in BufferedIoOutputStream
  • ae3851a Changes.md: mention SSHD-1287
  • 6d0ef48 [SSHD-1287] SFTP: better default buffer size handling
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sshd-core](https://github.com/apache/mina-sshd) from 1.7.0 to 2.9.2.
- [Release notes](https://github.com/apache/mina-sshd/releases)
- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)
- [Commits](apache/mina-sshd@sshd-1.7.0...sshd-2.9.2)

---
updated-dependencies:
- dependency-name: org.apache.sshd:sshd-core
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants