Bump org.apache.sshd:sshd-core from 0.8.0 to 2.11.0

[dependabot]

Bumps org.apache.sshd:sshd-core from 0.8.0 to 2.11.0.

Release notes

Sourced from org.apache.sshd:sshd-core's releases.

SSHD 2.11.0

Introduced in 2.11.0

This new minor release provides a bunch of bug fixes and enhancements. This release is available for download from the Apache MINA SSHD website.

Bug Fixes

• GH-328 Added configurable timeout(s) to DefaultSftpClient
• GH-370 Also compare file keys in ModifiableFileWatcher.
• GH-371 Fix channel pool in SftpFileSystem.
• GH-383 Use correct default OpenOptions in SftpFileSystemProvider.newFileChannel().
• GH-384 Use correct lock modes for SFTP FileChannel.lock().
• GH-388 ScpClient: support issuing commands to a server that uses a non-UTF-8 locale.
• GH-398 SftpInputStreamAsync: fix reporting EOF on zero-length reads.
• GH-403 Work-around a bug in WS_FTP <= 12.9 SFTP clients.
• GH-407 (Regression in 2.10.0) SFTP performance fix: override FilterOutputStream.write(byte[], int, int).
• GH-410 Fix a race condition to ensure SSH_MSG_CHANNEL_EOF is always sent before SSH_MSG_CHANNEL_CLOSE.
• GH-414 Fix error handling while flushing queued packets at end of KEX.
• GH-420 Fix wrong log level on closing an Nio2Session.
• SSHD-789 Fix detection of Android O/S from system properties.
• SSHD-1259 Consider all applicable host keys from the known_hosts files.
• SSHD-1310 SftpFileSystem: do not close user session.
• SSHD-1327 ChannelAsyncOutputStream: remove write future when done.
• SSHD-1332 (Regression in 2.10.0) Resolve ~ in IdentityFile file names in HostConfigEntry.

New Features

• SSHD-1330 Use KeepAliveHandler global request instance in client as well
• GH-356 Publish snapshot maven artifacts to the Apache Snapshots maven repository.
• Bundle sshd-contrib has support classes for the HAProxy protocol V2.

Behavioral changes and enhancements

SFTP file handle size

Previous versions of Apache MINA sshd used SFTP file handles that were twice as large as configured via SftpModuleProperties.FILE_HANDLE_SIZE. The reason for this was that the file handle bytes were stringified, representing each byte as two hex characters. This stringified file handle was then send over the wire. If SftpModuleProperties.FILE_HANDLE_SIZE was configured as 16, the actual file handle size was thus 32 bytes.

This has been fixed in this version.

Additionally, the default setting for the size of file handles has been changed from 16 to 4 bytes. OpenSSH also uses 4-byte SFTP file handles. Using the same size not only means that there is a little more space left in SSH packets for actual data transfer, it also completely avoids the WS_FTP bug mentioned in GH-403.

Potential compatibility issues

KeepAliveHandler global request handler moved from server to common global requests package

Was previously only on server-side - now also for client (see SSHD-1330). This should be fully backward compatible since most servers do not send this request. However, if users have somehow added this handler to the client side independently, the code should be re-examined and the independent handler removed or make it replace the global one.

Server-side SFTP file handle encoding

... (truncated)

Changelog

Sourced from org.apache.sshd:sshd-core's changelog.

Version 2.10.0 to 2.11.0

Planned for next version

Bug Fixes

• [VFS-849: Release httpConnection resources properly ... #428/GH-392](apache/mina-sshd#428) SCP client fails silently when error signalled due to missing file or lacking permissions

New Features

Behavioral changes and enhancements

New ScpTransferEventListener callback method

Following [GH-428/GH-392](apache/mina-sshd#428) a new handleReceiveCommandAckInfo method has been added to enable users to inspect acknowledgements of a receive related command. The user is free to inspect the command that was attempted as well as the response code and decide how to handle it - including even throwing an exception if OK status (if this makes sense for whatever reason). The default implementation checks for ERROR code and throws an exception if so.

Potential compatibility issues

Server-side SFTP file handle encoding

Major Code Re-factoring

Commits

• d65128c [maven-release-plugin] prepare release sshd-2.11.0
• ed83224 Prepare 2.11.0 release
• 9cb6fad Bump version to 2.11.0
• 9b485a7 GH-420: avoid spurious exceptions on closing forwarded channel
• c49e82c Upgraded Bouncycastle version to 1.76
• 6dade0c GH-328 Added configurable timeout(s) to DefaultSftpClient
• 1283515 Merge pull request #416 from lgoldstein/SSHD-1330
• d12e052 [SSHD-1330] Using common keep-alive global request handler in client as well ...
• ba8f36e Fix detection of Android O/S from system properties
• e92a46b GH-414: Correct error handling in KeyExchangeMessageHandler
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Superseded by #471.