3.4.0

Update to 3.3.1 (rhbz#2227478)
Cleaned up some very old root level files, mostly just to exercise some of

3.3.0
Add support and tests for 'Match final ..' (frequently used in ProxyJump
Add an explicit 'max_concurrent_prefetch_requests' argument to

Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Rebuilt for Python 3.12

Update to 3.2.0 (rhbz#2210398)
Fixed a very sneaky bug found at the apparently rarely-traveled
SHA2 keys, certificates, SSH agents, and
than-OpenSSH server targets, which manifested as yet another
The 'server-sig-algs' and 'RSA-SHA2' features added around Paramiko 2.9 or
use pubkey if
Implement '_fields()' on '~paramiko.agent.AgentKey' so that it may be
Since its inception, Paramiko has (for reasons lost to time) implemented
OpenSSH doesn't care if clients send multiple service requests, but other
agent)
This version of Paramiko now contains an opt-in
correctly
handler subclass internally that has been similarly adapted; users
Minor backwards incompatible changes exist in the new code paths, most
GSSAPI support has only been partially implemented, and is untested
Users of '~paramiko.client.SSHClient' can now configure the authentication
level libraries such as 'Fabric'
Fabric's co-temporal release includes a proof-of-concept use of this
Enhanced '~paramiko.agent.AgentKey' with new attributes, such as:
Added a 'comment' attribute (and constructor argument);
Agent-derived keys now attempt to instantiate a copy of the appropriate
specific members (e.g. key size);
This functionality is now in use in Fabric's new '--list-agent-keys'
'~paramiko.pkey.PKey' now offers convenience "meta-constructors", static
For example, 'PKey.from_path' can load a file path without knowing
In addition, 'PKey.from_type_string' now exists, and is being used in
agent keys
As part of these changes, '~paramiko.pkey.PKey' and friends grew a
'~paramiko.pkey.PKey' grew a new '.algorithm_name' property that displays
ed25519' (the SSH protocol key type field value), and now have a
'~paramiko.pkey.PKey' grew a new '.fingerprint' property that emits a
add -l', 'ssh -v'); this is intended to help
vs-OpenSSH behavior and will eventually replace the
'~paramiko.agent.AgentKey' had a dangling Python 3 incompatible '__str__'

Update to 3.1.0 (rhbz#2177436)
Add an explicit 'channel_timeout' keyword argument to
hardcoded default value of 3600 seconds (GH#2009, GH#2013, and
Accept single tabs as field separators (in addition to single spaces) in
Apply 'codespell' to the codebase, which found a lot of very old minor

Update to 3.0.0 (rhbz#2162914)
Remove some unnecessary '__repr__' calls when handling bytes-vs-str
Streamline some redundant (and costly) byte conversion calls in the
'paramiko.util.retry_on_signal' (and any internal uses of same, and also
0475/),
'~paramiko.config.SSHConfig' used to straight-up delete the 'proxycommand'
The behavior of private key classes' (i.e. anything inheriting from
'PKey.__cmp__' has been removed - ordering-oriented comparison of key files
A handful of lower-level classes (notably 'paramiko.message.Message' and
'paramiko.common.asbytes' has been moved to 'paramiko.util.asbytes'
Remove the now irrelevant 'paramiko.py3compat' module
such references should be
and-replaced with their modern Python 3.6+ equivalents; in some
useful methods or values have been moved to 'paramiko.util'
Drop support for Python versions less than 3.6, including Python 2; so long

Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

Update to 2.12.0 (rhbz#2140281)
Add a 'transport_factory' kwarg to 'SSHClient.connect' for advanced users
Update '~paramiko.client.SSHClient' so it explicitly closes its wrapped
error
Raise '~paramiko.ssh_exception.SSHException' explicitly when blank private
adjacent codebases to
Use SPDX-format license tag

Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

Rebuilt for Python 3.11

Update to 2.11.0
Align signature verification algorithm with OpenSSH re: zero-padding
implemented SSH servers handle
OpenSSH 7.7 and older has a bug preventing it from understanding how to
not keys), so when we added SHA2 support it broke all clients using
a version check is performed and the
Recent versions of Cryptography have deprecated Blowfish algorithm support;
Windows-native SSH agent support as merged in 2.10 could encounter
Add SSH config token expansion (eg '%h', '%p') when parsing 'ProxyJump'
Apply unittest 'skipIf' to tests currently using SHA1 in their critical

Update to 2.10.4
Update 'camelCase' method calls against the 'threading' module to be
'~paramiko.pkey.PKey' instances' '__eq__' did not have the usual safety
Servers offering certificate variants of hostkey algorithms (e.g.
rsa-cert-v01@openssh.com') could not have their host keys verified by
cert key types for that

Skip tests that would fail without SHA-1 signing support in backend, such as
9 (GH#2011)

Update to 2.10.3
Certificate-based pubkey auth was inadvertently broken when adding SHA2
Switch from module-global to thread-local storage when recording thread IDs
running processes (GH#2002, GH#2003)