4.1.0 (2026-02-26)
Features
- host-key: add hostkey socket events to constants (cc23da0)
- host-key: add hostKeyVerification to legacy socket-adapter permissions (1a69405)
- host-key: implement hostVerifier callback factory (62ef1cb)
- host-key: send host key config with permissions event (47a0f70)
- host-key: wire hostVerifier into SSH service connect flow (eddf34e)
- send host key verification config pre-auth and honor env vars in hostkeys script (97cb173)
- sftp: add shell-command file backend for BusyBox devices (c33a7e8)
- sftp: add shell-command file backend for BusyBox devices (#483) (dbebb23)
- SSH host key verification (TOFU) (dc22703)
- update webssh2_client dependency to version 3.4.0 (7ae7e63)
Bug Fixes
- address code review findings for host key verification (6f53016)
- reduce awaitClientVerification params to options object (S107) and use structuredClone (S7784) (a6163d6)
- remove void operator from test files (S3735) (3bec992)
- resolve lint errors in test files (ad14af9)
- resolve markdownlint warnings in host-key-protocol.md (142db67)
- resolve SonarQube issues across codebase (S3735, S3776, S2871, S4623, S6557, S4043, S7763, S4325, S6594, S7781, S7755, S7784, S7924) (b33dc6d)
- resolve SonarQube lint warnings in shell-commands (6c1035e)
- resolve SonarQube quality gate failures on PR #488 (6315836)
- SFTP error propagation with fileName + relax waitForPrompt regex (213ec12)
- sftp: use basename for download filename in shell backend (d84b78c)
- tests: add hostKeyVerification to socket-v2 mock config (0a76bea)
- update rollup to 4.59.0 for GHSA-mw96-cpmx-2vgc path traversal fix (dbea2df)
- use eslint-disable for no-new in side-effect constructors (bdd7991)
🐳 Docker Images
This release is available as multi-platform Docker images (linux/amd64, linux/arm64):
Docker Hub
docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:4.1.0
docker pull billchurch/webssh2:4.1
docker pull billchurch/webssh2:4GitHub Container Registry
docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:4.1.0
docker pull ghcr.io/billchurch/webssh2:4.1
docker pull ghcr.io/billchurch/webssh2:4Image Digest: sha256:e2b5039ce2798ea7b0d3af0d67b060fc3ec8c4024539a0d164da2f8b51aa37f6
Links: