webssh2-server: v4.2.1

4.2.1 (2026-04-07)

Bug Fixes

• add vite override to resolve HIGH audit finding in CI (4c20966)
• patch HIGH CVE dependencies and pin versions (391d64f)
• resolve lint errors blocking CI (6e576d6)
• sync package-lock.json with webssh2_client 3.6.0 (eece96d)
• update trivy-action to v0.35.0 and add vite override (4fb397d)

webssh2-server: v4.2.0

4.2.0 (2026-03-13)

Features

• add backpressure control to SFTP download streaming (ec684ea), closes #492
• add telnet protocol support (#490) (c7c6103)
• emit raw Buffer for SFTP download chunks instead of base64 (5d5440f)

Bug Fixes

• add re-entrancy guard and cancellation cleanup to SFTP backpressure (5ae39ac)
• lint error in SFTP backpressure test (strict boolean expression) (54a8fbc)
• resolve stale waitForDrain promise on concurrent calls, add missing tests (46c86c1)
• SFTP download backpressure and binary transfer (#492) (ca88c95)
• use correct secret name for workflow dispatch PAT (7036788)

webssh2-server: v4.1.0

4.1.0 (2026-02-26)

Features

• host-key: add hostkey socket events to constants (cc23da0)
• host-key: add hostKeyVerification to legacy socket-adapter permissions (1a69405)
• host-key: implement hostVerifier callback factory (62ef1cb)
• host-key: send host key config with permissions event (47a0f70)
• host-key: wire hostVerifier into SSH service connect flow (eddf34e)
• send host key verification config pre-auth and honor env vars in hostkeys script (97cb173)
• sftp: add shell-command file backend for BusyBox devices (c33a7e8)
• sftp: add shell-command file backend for BusyBox devices (#483) (dbebb23)
• SSH host key verification (TOFU) (dc22703)
• update webssh2_client dependency to version 3.4.0 (7ae7e63)

Bug Fixes

• address code review findings for host key verification (6f53016)
• reduce awaitClientVerification params to options object (S107) and use structuredClone (S7784) (a6163d6)
• remove void operator from test files (S3735) (3bec992)
• resolve lint errors in test files (ad14af9)
• resolve markdownlint warnings in host-key-protocol.md (142db67)
• resolve SonarQube issues across codebase (S3735, S3776, S2871, S4623, S6557, S4043, S7763, S4325, S6594, S7781, S7755, S7784, S7924) (b33dc6d)
• resolve SonarQube lint warnings in shell-commands (6c1035e)
• resolve SonarQube quality gate failures on PR #488 (6315836)
• SFTP error propagation with fileName + relax waitForPrompt regex (213ec12)
• sftp: use basename for download filename in shell backend (d84b78c)
• tests: add hostKeyVerification to socket-v2 mock config (0a76bea)
• update rollup to 4.59.0 for GHSA-mw96-cpmx-2vgc path traversal fix (dbea2df)
• use eslint-disable for no-new in side-effect constructors (bdd7991)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:4.1.0
docker pull billchurch/webssh2:4.1
docker pull billchurch/webssh2:4

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:4.1.0
docker pull ghcr.io/billchurch/webssh2:4.1
docker pull ghcr.io/billchurch/webssh2:4

Image Digest: sha256:e2b5039ce2798ea7b0d3af0d67b060fc3ec8c4024539a0d164da2f8b51aa37f6

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v4.0.1

4.0.1 (2026-02-07)

Bug Fixes

• perf: binary WebSocket transport and backpressure fix (#479) (2cc6ba0)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:4.0.1
docker pull billchurch/webssh2:4.0
docker pull billchurch/webssh2:4

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:4.0.1
docker pull ghcr.io/billchurch/webssh2:4.0
docker pull ghcr.io/billchurch/webssh2:4

Image Digest: sha256:55856d18e5526d38623035a7ef14282ce1c8984d6739c8f10226281fd485747e

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v4.0.0

4.0.0 (2026-02-02)

⚠ BREAKING CHANGES

• ux: Error responses are now JSON-only. Clients must handle the 'connection-error' event to display connection failures.

Features

• ux: client-side connection error modal with algorithm debugging (#476) (2236a4e)

Bug Fixes

• ci: use PAT_WORKFLOW token for Docker build dispatch [skip ci] (0e1c280)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:4.0.0
docker pull billchurch/webssh2:4.0
docker pull billchurch/webssh2:4

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:4.0.0
docker pull ghcr.io/billchurch/webssh2:4.0
docker pull ghcr.io/billchurch/webssh2:4

Image Digest: sha256:0e63ff1b90cc4b8d7a77cced6519f85f7dd23bdf3050a74c9b9f691b8894d661

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v3.1.1

3.1.1 (2026-01-28)

Bug Fixes

• ssh: ensure environment variable algorithms are always honored (#473) (9a9077b)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:3.1.1
docker pull billchurch/webssh2:3.1
docker pull billchurch/webssh2:3

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:3.1.1
docker pull ghcr.io/billchurch/webssh2:3.1
docker pull ghcr.io/billchurch/webssh2:3

Image Digest: sha256:e5782c78487ca8db7d1eb18111bdd9d7018f88d29f61cf5bae7597fc21839615

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v3.1.0

3.1.0 (2026-01-13)

Features

• debug: add ssh2 protocol-level debug logging (#469) (e4ba8fa)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:3.1.0
docker pull billchurch/webssh2:3.1
docker pull billchurch/webssh2:3

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:3.1.0
docker pull ghcr.io/billchurch/webssh2:3.1
docker pull ghcr.io/billchurch/webssh2:3

Image Digest: sha256:dbf561d53c082ef441a2b4e2540732cad8e593b4b31028dd6a33966fb938cfd9

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v3.0.0

3.0.0 (2025-12-30)

⚠ BREAKING CHANGES

• sftp: SFTP protocol updated - clients must not send transferId in start requests; use server-provided ID from response.

Features

• add server-side generic prompt interface (#465) (e96f979)

Bug Fixes

• sftp: server-side transfer ID generation and ownership verification (#467) (e3ebea2)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:3.0.0
docker pull billchurch/webssh2:3.0
docker pull billchurch/webssh2:3

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:3.0.0
docker pull ghcr.io/billchurch/webssh2:3.0
docker pull ghcr.io/billchurch/webssh2:3

Image Digest: sha256:bf3c6c820d07e1565d1c830580d55aea119c33e1ee4c93c1eef3f2a7c1b09abb

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v2.6.1

2.6.1 (2025-12-09)

Bug Fixes

• SSH algorithm env var precedence and debug output improvements (#460) (bceb5b8), closes #459

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:2.6.1
docker pull billchurch/webssh2:2.6
docker pull billchurch/webssh2:2

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:2.6.1
docker pull ghcr.io/billchurch/webssh2:2.6
docker pull ghcr.io/billchurch/webssh2:2

Image Digest: sha256:d9c1e23cd23ab99fb2214e3d13baafd4efa54ba3946af34d21a59dde3881f26a

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v2.6.0

2.6.0 (2025-12-04)

Features

• add SFTP support, fixes #322 (cc5d932)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:2.6.0
docker pull billchurch/webssh2:2.6
docker pull billchurch/webssh2:2

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:2.6.0
docker pull ghcr.io/billchurch/webssh2:2.6
docker pull ghcr.io/billchurch/webssh2:2

Image Digest: sha256:fae3cb522453ea5df6d09f837c5b96601be7af7cf6fda5789be4af0b88926b42

Links:

• Docker Hub Repository
• GitHub Container Registry