From f00e9cc4cf0776a3cf291f3019de7e357f3e6f18 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 00:16:43 +0000 Subject: [PATCH 1/2] chore(release): 'v0.6.7'. --- CHANGELOG.md | 27 ++++++++++++++++++++++++--- gradle.properties | 2 +- 2 files changed, 25 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index ac8c426d9..b68a3193d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,12 +2,31 @@ ## Unreleased +Changes for library users since `0.6.7`. + +## [0.6.7][0.6.7] + +Changes for library users since `0.6.6`. + +### Added + +- Added OpenSSH WebAuthn signature packing and the optional `sshlib-webauthn` + artifact for JSON request/response handling when integrating passkey + authentication. See [WebAuthn integration](docs/SK_AUTH.md#webauthn--android-credential-manager). +- Added Security Key host-key verification for Ed25519 and ECDSA P-256, + including WebAuthn signatures and Security Key host certificates. +- Added support for the `curve25519-sha256@libssh.org` key-exchange alias + for compatibility with older SSH servers. + +## [0.6.6][0.6.6] + Changes for library users since `0.6.5`. -## Added +### Fixed -- Add OpenSSH WebAuthn signature packing and optional `sshlib-webauthn` - request/response adapter. +- Reduced Diffie-Hellman group-exchange handshake delays on slower devices by + removing expensive safe-prime tests of server-supplied groups while retaining + structural parameter checks. ## [0.6.5][0.6.5] @@ -296,6 +315,8 @@ Changes for library users since `0.2.1`. - Limited zlib decompression output per packet to reduce decompression-bomb denial-of-service risk. +[0.6.7]: https://github.com/connectbot/cbssh/compare/v0.6.6...v0.6.7 +[0.6.6]: https://github.com/connectbot/cbssh/compare/v0.6.5...v0.6.6 [0.6.5]: https://github.com/connectbot/cbssh/compare/v0.6.4...v0.6.5 [0.6.4]: https://github.com/connectbot/cbssh/compare/v0.6.3...v0.6.4 [0.6.3]: https://github.com/connectbot/cbssh/compare/v0.6.2...v0.6.3 diff --git a/gradle.properties b/gradle.properties index b8e65042a..8a307a775 100644 --- a/gradle.properties +++ b/gradle.properties @@ -5,4 +5,4 @@ org.gradle.configuration-cache=false #org.gradle.configuration-cache.parallel=true group=org.connectbot.sshlib -version=0.6.7-SNAPSHOT +version=0.6.7 From fe1b092548baabdb3d50d3870d28a2d7673b691a Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 00:16:43 +0000 Subject: [PATCH 2/2] chore(release): start 'v0.6.8-SNAPSHOT'. --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index 8a307a775..c8982651f 100644 --- a/gradle.properties +++ b/gradle.properties @@ -5,4 +5,4 @@ org.gradle.configuration-cache=false #org.gradle.configuration-cache.parallel=true group=org.connectbot.sshlib -version=0.6.7 +version=0.6.8-SNAPSHOT