Update to 3.1.0 (rhbz#2177436)
Add an explicit 'channel_timeout' keyword argument to
hardcoded default value of 3600 seconds (GH#2009, GH#2013, and
Accept single tabs as field separators (in addition to single spaces) in
Apply 'codespell' to the codebase, which found a lot of very old minor

Update to 3.0.0 (rhbz#2162914)
Remove some unnecessary '__repr__' calls when handling bytes-vs-str
Streamline some redundant (and costly) byte conversion calls in the
'paramiko.util.retry_on_signal' (and any internal uses of same, and also
0475/),
'~paramiko.config.SSHConfig' used to straight-up delete the 'proxycommand'
The behavior of private key classes' (i.e. anything inheriting from
'PKey.__cmp__' has been removed - ordering-oriented comparison of key files
A handful of lower-level classes (notably 'paramiko.message.Message' and
'paramiko.common.asbytes' has been moved to 'paramiko.util.asbytes'
Remove the now irrelevant 'paramiko.py3compat' module
such references should be
and-replaced with their modern Python 3.6+ equivalents; in some
useful methods or values have been moved to 'paramiko.util'
Drop support for Python versions less than 3.6, including Python 2; so long

Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

Update to 2.12.0 (rhbz#2140281)
Add a 'transport_factory' kwarg to 'SSHClient.connect' for advanced users
Update '~paramiko.client.SSHClient' so it explicitly closes its wrapped
error
Raise '~paramiko.ssh_exception.SSHException' explicitly when blank private
adjacent codebases to
Use SPDX-format license tag

Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

Rebuilt for Python 3.11

Update to 2.11.0
Align signature verification algorithm with OpenSSH re: zero-padding
implemented SSH servers handle
OpenSSH 7.7 and older has a bug preventing it from understanding how to
not keys), so when we added SHA2 support it broke all clients using
a version check is performed and the
Recent versions of Cryptography have deprecated Blowfish algorithm support;
Windows-native SSH agent support as merged in 2.10 could encounter
Add SSH config token expansion (eg '%h', '%p') when parsing 'ProxyJump'
Apply unittest 'skipIf' to tests currently using SHA1 in their critical

Update to 2.10.4
Update 'camelCase' method calls against the 'threading' module to be
'~paramiko.pkey.PKey' instances' '__eq__' did not have the usual safety
Servers offering certificate variants of hostkey algorithms (e.g.
rsa-cert-v01@openssh.com') could not have their host keys verified by
cert key types for that

Skip tests that would fail without SHA-1 signing support in backend, such as
9 (GH#2011)

Update to 2.10.3
Certificate-based pubkey auth was inadvertently broken when adding SHA2
Switch from module-global to thread-local storage when recording thread IDs
running processes (GH#2002, GH#2003)

Update to 2.10.2
Fix Python 2 compatibility breakage introduced in 2.10.1 (GH#2001)
Re-enable sftp tests, no longer failing under mock

Update to 2.10.1
CVE-2022-24302: Creation of new private key files using
using code would write out
incompatible
Add support for the '%C' token when parsing SSH config files (GH#1976)
Add support for OpenSSH's Windows agent as a fallback when Putty/WinPageant
Significantly speed up low-level read/write actions on
Add 'six' explicitly to install-requires; it snuck into active use at some
recently dropped it (GH#1985); this will be short-lived

Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

Avoid use of deprecated python-mock by using unittest.mock instead

Update to 2.9.2
Connecting to servers that support 'server-sig-algs' but which have no
sha2-512' (since the use of
sig-algs' allows us to know what the server supports)
Enhanced log output when connecting to servers that do not support
sig-algs' extensions, making the new-as-of-2.9 defaulting to SHA2

Update to 2.9.1
Server-side support for 'rsa-sha2-256' and 'ssh-rsa' wasn't fully operable
sha2-512' instead) (GH#1935)