You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mina.apache.org by Thomas Wolf <tw...@apache.org> on 2026/10/15 23:30:45 UTC
[VOTE] Apache MINA SSHD 2.20.1 and 3.0.0-M7 (patch releases)
Hi all,
2.20.0 unfortunately introduced a (minor) regression: the "none"
authentication no longer works if configured on a server. This
patch release fixes this, and also fixes a rare race during key
exchanges. See the release notes and issues linked there.
So here's a vote for two patch releases for both streams.
Apache MINA SSHD 2.20.1
=======================
Maven staging repository:
https://repository.apache.org/content/repositories/orgapachemina-1155/
Distribution:
https://dist.apache.org/repos/dist/dev/mina/sshd/2.20.1/
Git tag:
https://github.com/apache/mina-sshd/tree/sshd-2.20.1
Release notes:
https://github.com/apache/mina-sshd/blob/sshd-2.20.1/CHANGES.md
[ ] +1 Release
[ ] ± 0 Abstain
[ ] -1 Do Not Release
Apache MINA SSHD 3.0.0-M7
=========================
Maven staging repository:
https://repository.apache.org/content/repositories/orgapachemina-1156/
Distribution:
https://dist.apache.org/repos/dist/dev/mina/sshd/3.0.0-M7/
Git tag:
https://github.com/apache/mina-sshd/tree/sshd-3.0.0-M7
Release notes:
https://github.com/apache/mina-sshd/blob/sshd-3.0.0-M7/CHANGES.md
As always, please note that the 3.0.0 stream requires
at least Java 24 and maven 3.9.12 to build.
[ ] +1 Release
[ ] ± 0 Abstain
[ ] -1 Do Not Release
Please review and vote!
Cheers,
Thomas
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org
Re: [VOTE] Apache MINA SSHD 2.20.1 and 3.0.0-M7 (patch releases)
Posted by Gary Gregory <ga...@gmail.com>.
+1
ASC, SHA512 OK.
Builds OK with: mvn clean verify
On:
openjdk version "17.0.20.1" 2026-08-18
OpenJDK Runtime Environment Homebrew (build 17.0.20.1+0)
OpenJDK 64-Bit Server VM Homebrew (build 17.0.20.1+0, mixed mode, sharing)
openjdk version "21.0.12.1" 2026-08-18
OpenJDK Runtime Environment Homebrew (build 21.0.12.1)
OpenJDK 64-Bit Server VM Homebrew (build 21.0.12.1, mixed mode, sharing)
openjdk version "25.0.4.1" 2026-08-18
OpenJDK Runtime Environment Homebrew (build 25.0.4.1)
OpenJDK 64-Bit Server VM Homebrew (build 25.0.4.1, mixed mode, sharing)
But fails due to a PMD StackOverflowError with:
openjdk version "27" 2026-09-15
OpenJDK Runtime Environment Homebrew (build 27)
OpenJDK 64-Bit Server VM Homebrew (build 27, mixed mode, sharing)
Exception in thread "main" java.lang.StackOverflowError
at net.sourceforge.pmd.lang.java.symbols.internal.asm.ParseLock.ensureParsed(ParseLock.java:29)
at net.sourceforge.pmd.lang.java.symbols.internal.asm.ClassStub.getSuperclass(ClassStub.java:290)
at net.sourceforge.pmd.lang.java.types.TypeOps.isSubClassOfNoInterface(TypeOps.java:2037)
at net.sourceforge.pmd.lang.java.types.TypeOps.isSubClassOfNoInterface(TypeOps.java:2038)
You can workaround this by using a more recent version of PMD:
mvn clean verify -Dpmd.version=7.28.0
But then then build fails with PMD violations:
[WARNING] PMD Failure:
org.apache.sshd.common.util.closeable.AbstractCloseable:115
Rule:AvoidDeeplyNestedIfStmts Priority:3 Deeply nested if..then
statements are hard to read.
[WARNING] PMD Failure:
org.apache.sshd.common.util.closeable.AbstractCloseable:123
Rule:AvoidDeeplyNestedIfStmts Priority:3 Deeply nested if..then
statements are hard to read.
All on macOS and Maven 3.10.0:
Apache Maven 3.10.0 (c43a36b8d67be7e0805a411bc0898af1a51f5472)
Maven home: /opt/homebrew/Cellar/maven/3.10.0/libexec
Java version: 17.0.20.1, vendor: Homebrew, runtime:
/opt/homebrew/Cellar/openjdk@17/17.0.20.1/libexec/openjdk.jdk/Contents/Home
Default locale: en_US, platform encoding: UTF-8, time zone: America/New_York
OS name: "mac os x", version: "26.7.1", arch: "aarch64", family: "mac"
Darwin ****.local 25.6.0 Darwin Kernel Version 25.6.0: Tue Aug 18
17:48:46 PDT 2026; root:xnu-12377.161.15.700.19~2/RELEASE_ARM64_T6041
arm64
Docker version 29.8.2, build 7fc2dff
Gary
On Thu, Oct 15, 2026 at 7:30 PM Thomas Wolf <tw...@apache.org> wrote:
>
> Hi all,
>
> 2.20.0 unfortunately introduced a (minor) regression: the "none"
> authentication no longer works if configured on a server. This
> patch release fixes this, and also fixes a rare race during key
> exchanges. See the release notes and issues linked there.
>
> So here's a vote for two patch releases for both streams.
>
> Apache MINA SSHD 2.20.1
> =======================
>
> Maven staging repository:
> https://repository.apache.org/content/repositories/orgapachemina-1155/
>
> Distribution:
> https://dist.apache.org/repos/dist/dev/mina/sshd/2.20.1/
>
> Git tag:
> https://github.com/apache/mina-sshd/tree/sshd-2.20.1
>
> Release notes:
> https://github.com/apache/mina-sshd/blob/sshd-2.20.1/CHANGES.md
>
>
> [ ] +1 Release
> [ ] ± 0 Abstain
> [ ] -1 Do Not Release
>
>
> Apache MINA SSHD 3.0.0-M7
> =========================
>
> Maven staging repository:
> https://repository.apache.org/content/repositories/orgapachemina-1156/
>
> Distribution:
> https://dist.apache.org/repos/dist/dev/mina/sshd/3.0.0-M7/
>
> Git tag:
> https://github.com/apache/mina-sshd/tree/sshd-3.0.0-M7
>
> Release notes:
> https://github.com/apache/mina-sshd/blob/sshd-3.0.0-M7/CHANGES.md
>
> As always, please note that the 3.0.0 stream requires
> at least Java 24 and maven 3.9.12 to build.
>
>
> [ ] +1 Release
> [ ] ± 0 Abstain
> [ ] -1 Do Not Release
>
>
> Please review and vote!
>
> Cheers,
>
> Thomas
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
> For additional commands, e-mail: dev-help@mina.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org
Re: [VOTE] Apache MINA SSHD 2.20.1 and 3.0.0-M7 (patch releases)
Posted by Emmanuel Lécharny <el...@gmail.com>.
Hi!
Currently in the train, runnning the builds.
I'm a bit surprised by errors like:
[INFO] Running org.apache.sshd.common.forward.Sshd1033Test
[ERROR] Tests run: 4, Failures: 0, Errors: 4, Skipped: 0, Time elapsed:
1.511 s <<< FAILURE! -- in org.apache.sshd.common.forward.Sshd1033Test
[ERROR] org.apache.sshd.common.forward.Sshd1033Test.direct -- Time
elapsed: 0.070 s <<< ERROR!
java.net.UnknownHostException: test.javastack.org
I guess I need a decent internet connection to get it working, but
still, can't we have those tests not depending on an external server?
Will resume as soon as I'm home with something better than a non stable
3G connection!
On 16/10/2026 01:30, Thomas Wolf wrote:
> Hi all,
>
> 2.20.0 unfortunately introduced a (minor) regression: the "none"
> authentication no longer works if configured on a server. This
> patch release fixes this, and also fixes a rare race during key
> exchanges. See the release notes and issues linked there.
>
> So here's a vote for two patch releases for both streams.
>
> Apache MINA SSHD 2.20.1
> =======================
>
> Maven staging repository:
> https://repository.apache.org/content/repositories/orgapachemina-1155/
>
> Distribution:
> https://dist.apache.org/repos/dist/dev/mina/sshd/2.20.1/
>
> Git tag:
> https://github.com/apache/mina-sshd/tree/sshd-2.20.1
>
> Release notes:
> https://github.com/apache/mina-sshd/blob/sshd-2.20.1/CHANGES.md
>
>
> [ ] +1 Release
> [ ] ± 0 Abstain
> [ ] -1 Do Not Release
>
>
> Apache MINA SSHD 3.0.0-M7
> =========================
>
> Maven staging repository:
> https://repository.apache.org/content/repositories/orgapachemina-1156/
>
> Distribution:
> https://dist.apache.org/repos/dist/dev/mina/sshd/3.0.0-M7/
>
> Git tag:
> https://github.com/apache/mina-sshd/tree/sshd-3.0.0-M7
>
> Release notes:
> https://github.com/apache/mina-sshd/blob/sshd-3.0.0-M7/CHANGES.md
>
> As always, please note that the 3.0.0 stream requires
> at least Java 24 and maven 3.9.12 to build.
>
>
> [ ] +1 Release
> [ ] ± 0 Abstain
> [ ] -1 Do Not Release
>
>
> Please review and vote!
>
> Cheers,
>
> Thomas
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
> For additional commands, e-mail: dev-help@mina.apache.org
>
--
------------------------
Emmanuel Lécharny
emmlec@worteks.com
elecharny@apache.org
------------------------
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org
Re: [SUCCESS][VOTE] Apache MINA SSHD 2.20.1 and 3.0.0-M7 (patch releases)
Posted by Thomas Wolf <tw...@apache.org>.
On 28.10.26 20:12, Thomas Wolf wrote:
> On 16.10.26 01:30, Thomas Wolf wrote:
>> Hi all,
>>
>> 2.20.0 unfortunately introduced a (minor) regression: the "none"
>> authentication no longer works if configured on a server. This
>> patch release fixes this, and also fixes a rare race during key
>> exchanges. See the release notes and issues linked there.
>>
>> So here's a vote for two patch releases for both streams.
>>
>> Apache MINA SSHD 2.20.1
>> =======================
> [...]
>>
>> Apache MINA SSHD 3.0.0-M7
>> =========================
>
> Thanks Emmanuel and Gary for voting. I close this vote including my own
> +1 with three +1's.
And Jeff's +1, which just came in, with four +1's. Thanks, Jeff!
> I'll publish the release soon.
>
> Cheers,
>
> Thomas
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org
[SUCCESS][VOTE] Apache MINA SSHD 2.20.1 and 3.0.0-M7 (patch releases)
Posted by Thomas Wolf <tw...@apache.org>.
On 16.10.26 01:30, Thomas Wolf wrote:
> Hi all,
>
> 2.20.0 unfortunately introduced a (minor) regression: the "none"
> authentication no longer works if configured on a server. This
> patch release fixes this, and also fixes a rare race during key
> exchanges. See the release notes and issues linked there.
>
> So here's a vote for two patch releases for both streams.
>
> Apache MINA SSHD 2.20.1
> =======================
[...]
>
> Apache MINA SSHD 3.0.0-M7
> =========================
Thanks Emmanuel and Gary for voting. I close this vote including my own
+1 with three +1's.
I'll publish the release soon.
Cheers,
Thomas
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org
Re: [VOTE] Apache MINA SSHD 2.20.1 and 3.0.0-M7 (patch releases)
Posted by Emmanuel Lécharny <el...@gmail.com>.
All tested once at home:
- tests are green
- signatures and hash have been verified
On my mac, with Java 25.
My +1 for both releases.
Many thanks for the hard work!
On 16/10/2026 01:30, Thomas Wolf wrote:
> Hi all,
>
> 2.20.0 unfortunately introduced a (minor) regression: the "none"
> authentication no longer works if configured on a server. This
> patch release fixes this, and also fixes a rare race during key
> exchanges. See the release notes and issues linked there.
>
> So here's a vote for two patch releases for both streams.
>
> Apache MINA SSHD 2.20.1
> =======================
>
> Maven staging repository:
> https://repository.apache.org/content/repositories/orgapachemina-1155/
>
> Distribution:
> https://dist.apache.org/repos/dist/dev/mina/sshd/2.20.1/
>
> Git tag:
> https://github.com/apache/mina-sshd/tree/sshd-2.20.1
>
> Release notes:
> https://github.com/apache/mina-sshd/blob/sshd-2.20.1/CHANGES.md
>
>
> [ ] +1 Release
> [ ] ± 0 Abstain
> [ ] -1 Do Not Release
>
>
> Apache MINA SSHD 3.0.0-M7
> =========================
>
> Maven staging repository:
> https://repository.apache.org/content/repositories/orgapachemina-1156/
>
> Distribution:
> https://dist.apache.org/repos/dist/dev/mina/sshd/3.0.0-M7/
>
> Git tag:
> https://github.com/apache/mina-sshd/tree/sshd-3.0.0-M7
>
> Release notes:
> https://github.com/apache/mina-sshd/blob/sshd-3.0.0-M7/CHANGES.md
>
> As always, please note that the 3.0.0 stream requires
> at least Java 24 and maven 3.9.12 to build.
>
>
> [ ] +1 Release
> [ ] ± 0 Abstain
> [ ] -1 Do Not Release
>
>
> Please review and vote!
>
> Cheers,
>
> Thomas
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
> For additional commands, e-mail: dev-help@mina.apache.org
>
--
------------------------
Emmanuel Lécharny
emmlec@worteks.com
elecharny@apache.org
------------------------
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org
Re: [VOTE] Apache MINA SSHD 2.20.1 and 3.0.0-M7 (patch releases)
Posted by jg...@apache.org.
+1
Jeff
> On Oct 28, 2026, at 12:57 PM, Gary Gregory <ga...@gmail.com> wrote:
>
> On Wed, Oct 28, 2026, 14:55 Thomas Wolf <tw...@apache.org> wrote:
>
>> On 28.10.26 16:57, Emmanuel Lecharny wrote:
>>> Hi Thomas,
>>>
>>> if you cast your formal vote, you have your 3 binding +1.
>>>
>>> However, it would be good to have more vote cast, sure ;-)
>>
>> As far as I see, yours is the only vote so far. So even adding
>> my (implicit) +1 that would be only 2...
>>
>
> I voted.
>
> Gary
>
>
>> Cheers,
>>
>> Thomas
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
>> For additional commands, e-mail: dev-help@mina.apache.org
>>
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org
Re: [VOTE] Apache MINA SSHD 2.20.1 and 3.0.0-M7 (patch releases)
Posted by Thomas Wolf <tw...@apache.org>.
On 28.10.26 19:57, Gary Gregory wrote:
> On Wed, Oct 28, 2026, 14:55 Thomas Wolf <tw...@apache.org> wrote:
>
>> On 28.10.26 16:57, Emmanuel Lecharny wrote:
>>> Hi Thomas,
>>>
>>> if you cast your formal vote, you have your 3 binding +1.
>>>
>>> However, it would be good to have more vote cast, sure ;-)
>>
>> As far as I see, yours is the only vote so far. So even adding
>> my (implicit) +1 that would be only 2...
>>
>
> I voted.
>
> Gary
So you did. Gmail decided it was spam, so it never got to my computer.
I hate it when Google does that.
Cheers,
Thomas
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org
Re: [VOTE] Apache MINA SSHD 2.20.1 and 3.0.0-M7 (patch releases)
Posted by Gary Gregory <ga...@gmail.com>.
On Wed, Oct 28, 2026, 14:55 Thomas Wolf <tw...@apache.org> wrote:
> On 28.10.26 16:57, Emmanuel Lecharny wrote:
> > Hi Thomas,
> >
> > if you cast your formal vote, you have your 3 binding +1.
> >
> > However, it would be good to have more vote cast, sure ;-)
>
> As far as I see, yours is the only vote so far. So even adding
> my (implicit) +1 that would be only 2...
>
I voted.
Gary
> Cheers,
>
> Thomas
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
> For additional commands, e-mail: dev-help@mina.apache.org
>
>
Re: [VOTE] Apache MINA SSHD 2.20.1 and 3.0.0-M7 (patch releases)
Posted by Thomas Wolf <tw...@apache.org>.
On 28.10.26 16:57, Emmanuel Lecharny wrote:
> Hi Thomas,
>
> if you cast your formal vote, you have your 3 binding +1.
>
> However, it would be good to have more vote cast, sure ;-)
As far as I see, yours is the only vote so far. So even adding
my (implicit) +1 that would be only 2...
Cheers,
Thomas
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org
Re: [VOTE] Apache MINA SSHD 2.20.1 and 3.0.0-M7 (patch releases)
Posted by Emmanuel Lecharny <el...@gmail.com>.
Hi Thomas,
if you cast your formal vote, you have your 3 binding +1.
However, it would be good to have more vote cast, sure ;-)
On 10/23/26 15:40, Thomas Wolf wrote:
> Hi,
>
> could I get another vote here, please?
>
> Cheers,
>
> Thomas
>
> On 16.10.26 01:30, Thomas Wolf wrote:
>> Hi all,
>>
>> 2.20.0 unfortunately introduced a (minor) regression: the "none"
>> authentication no longer works if configured on a server. This
>> patch release fixes this, and also fixes a rare race during key
>> exchanges. See the release notes and issues linked there.
>>
>> So here's a vote for two patch releases for both streams.
>>
>> Apache MINA SSHD 2.20.1
>> =======================
>>
>> Maven staging repository:
>> https://repository.apache.org/content/repositories/orgapachemina-1155/
>>
>> Distribution:
>> https://dist.apache.org/repos/dist/dev/mina/sshd/2.20.1/
>>
>> Git tag:
>> https://github.com/apache/mina-sshd/tree/sshd-2.20.1
>>
>> Release notes:
>> https://github.com/apache/mina-sshd/blob/sshd-2.20.1/CHANGES.md
>>
>>
>> [ ] +1 Release
>> [ ] ± 0 Abstain
>> [ ] -1 Do Not Release
>>
>>
>> Apache MINA SSHD 3.0.0-M7
>> =========================
>>
>> Maven staging repository:
>> https://repository.apache.org/content/repositories/orgapachemina-1156/
>>
>> Distribution:
>> https://dist.apache.org/repos/dist/dev/mina/sshd/3.0.0-M7/
>>
>> Git tag:
>> https://github.com/apache/mina-sshd/tree/sshd-3.0.0-M7
>>
>> Release notes:
>> https://github.com/apache/mina-sshd/blob/sshd-3.0.0-M7/CHANGES.md
>>
>> As always, please note that the 3.0.0 stream requires
>> at least Java 24 and maven 3.9.12 to build.
>>
>>
>> [ ] +1 Release
>> [ ] ± 0 Abstain
>> [ ] -1 Do Not Release
>>
>>
>> Please review and vote!
>>
>> Cheers,
>>
>> Thomas
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
>> For additional commands, e-mail: dev-help@mina.apache.org
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
> For additional commands, e-mail: dev-help@mina.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org
Re: [VOTE] Apache MINA SSHD 2.20.1 and 3.0.0-M7 (patch releases)
Posted by Thomas Wolf <tw...@apache.org>.
Hi,
could I get another vote here, please?
Cheers,
Thomas
On 16.10.26 01:30, Thomas Wolf wrote:
> Hi all,
>
> 2.20.0 unfortunately introduced a (minor) regression: the "none"
> authentication no longer works if configured on a server. This
> patch release fixes this, and also fixes a rare race during key
> exchanges. See the release notes and issues linked there.
>
> So here's a vote for two patch releases for both streams.
>
> Apache MINA SSHD 2.20.1
> =======================
>
> Maven staging repository:
> https://repository.apache.org/content/repositories/orgapachemina-1155/
>
> Distribution:
> https://dist.apache.org/repos/dist/dev/mina/sshd/2.20.1/
>
> Git tag:
> https://github.com/apache/mina-sshd/tree/sshd-2.20.1
>
> Release notes:
> https://github.com/apache/mina-sshd/blob/sshd-2.20.1/CHANGES.md
>
>
> [ ] +1 Release
> [ ] ± 0 Abstain
> [ ] -1 Do Not Release
>
>
> Apache MINA SSHD 3.0.0-M7
> =========================
>
> Maven staging repository:
> https://repository.apache.org/content/repositories/orgapachemina-1156/
>
> Distribution:
> https://dist.apache.org/repos/dist/dev/mina/sshd/3.0.0-M7/
>
> Git tag:
> https://github.com/apache/mina-sshd/tree/sshd-3.0.0-M7
>
> Release notes:
> https://github.com/apache/mina-sshd/blob/sshd-3.0.0-M7/CHANGES.md
>
> As always, please note that the 3.0.0 stream requires
> at least Java 24 and maven 3.9.12 to build.
>
>
> [ ] +1 Release
> [ ] ± 0 Abstain
> [ ] -1 Do Not Release
>
>
> Please review and vote!
>
> Cheers,
>
> Thomas
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
> For additional commands, e-mail: dev-help@mina.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org