bolt
bolt copied to clipboard
Bump to net-ssh 7.x
Use Case
net-ssh
recently started releasing the 7.x series. We should bump this gem to keep up-to-date with any security fixes and new features that are released in the future.
Notes
- Requires Ruby >= 2.6. This prevents us from bumping until all other packages that use Bolt no longer support Ruby 2.5.
- Removes support for several algorithms that are no longer considered secure. This affects Bolt's
ssh.*-algorithms
config and introduces breaking changes. - We need to investigate what other breaking changes were made so we can update Bolt accordingly.
This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.
This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.
This is still a valid issue.
This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.
This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.
Bolt 3.26.1 still includes net-ssh 6.1.0.
This issue has not had activity for 60 days and will be marked as stale. If this issue continues to have no activity for 7 days, it will be closed.
I think this github bot is really not helpful.
at least an update to net-ssh 6.2 should be done which supports rsa-sha2-512 and rsa-sha2-256 host_key algorithms which are required to connect to newer distributions in default configuration (debian bookworm+)
the currently latest puppet-bolt debian package 3.27.2-1 still comes with 6.1
Hey, has there been any progress on this?
This is likely something that will be included in bolt 4.