Release 1.6.0

Author: langemeijer

package.xml

@@ -31,9 +31,9 @@
         <email>pollita@php.net</email>
         <active>no</active>
     </lead>
-    <date>2026-04-04</date>
+    <date>2026-10-17</date>
     <version>
-        <release>1.5.0</release>
+        <release>1.6.0</release>
         <api>1.0</api>
     </version>
     <stability>
@@ -42,19 +42,15 @@
     </stability>
     <license uri="http://www.php.net/license">PHP License</license>
     <notes>
-        - PIE (PHP Installer for Extensions) compatibility
-        - Fix crash on ECDSA pubkey auth due to libssh2 allocator mismatch [PR #92] (Fixes #91, #84)
-        - Fix fragment part of path lost for files with # in name [PR #93] (Fixes #90)
-        - Fix segfault when disconnecting with open SFTP streams [PR #94] (Fixes #81)
-        - Add ssh2_keepalive_config() and ssh2_keepalive_send() [PR #95] (Fixes #79)
-        - Add ssh2_set_timeout() [PR #70] (Jille Timmermans)
-        - Add ssh2_send_signal() [PR #89] (herrecito)
-        - Fix ssh2_poll() rejecting valid resource inputs [PR #96] (Fixes #82)
-        - Fix Homebrew libssh2 autodetection on macOS Apple Silicon [Fixes #87]
-        - Initialize php_stream_wrapper_ops explicitly [PR #68] (Gerdriaan Mulder)
-        - Bump minimum PHP version to 8.0
-        - Drop PHP 8.0 from CI, add PHP 8.5
-        - Fix Windows CI (setup-php-sdk TLS issue)
+        - Fix: SFTP path corruption for root-path URLs [PR #107] (transcendtient)
+        - Add SHA-256 and raw host key inspection [PR #104] (Raj Siva-Rajah)
+        - Fix: Fix concurrent SSH authentication state and redact secrets [PR #102] (Raj Siva-Rajah)
+        - PHP 8.6 compatibility: use zval_ptr_dtor_nogc instead of zval_dtor alias [PR #108] (Remi Collet)
+        - PHP 8.6 compatibility: Replace zval_is_true [PR #101] (Rainer Jung)
+        - Fix PHP 8.1 Windows CI - missed check in PR #89 [PR #97] (Rasmus Lerdorf)
+        - Add timeout to close path [PR #97] (Rasmus Lerdorf)
+        - Fix: correct SSH2 shell and exec environments [PR #105] (Raj Siva-Rajah)
+        - Fix: preserve SSH2 resource and stream lifecycles [PR #103] (Raj Siva-Rajah)
     </notes>
     <contents>
         <dir name="/">
@@ -73,24 +69,30 @@
                 <file role="test" name="ssh2_auth.phpt"/>
                 <file role="test" name="ssh2_auth_pubkey.phpt"/>
                 <file role="test" name="ssh2_auth_pubkey_file.phpt"/>
+                <file role="test" name="ssh2_channel_stream_semantics.phpt"/>
+                <file role="test" name="ssh2_close_timeout.phpt"/>
                 <file role="test" name="ssh2_connect.phpt"/>
                 <file role="test" name="ssh2_exec.phpt"/>
                 <file role="test" name="ssh2_hostkey.phpt"/>
                 <file role="test" name="ssh2_keepalive.phpt"/>
                 <file role="test" name="ssh2_poll.phpt"/>
+                <file role="test" name="ssh2_resource_lifetime.phpt"/>
                 <file role="test" name="ssh2_send_eof.phpt"/>
                 <file role="test" name="ssh2_send_signal.phpt"/>
+                <file role="test" name="ssh2_sensitive_auth_parameters.phpt"/>
                 <file role="test" name="ssh2_sftp_001.phpt"/>
                 <file role="test" name="ssh2_sftp_002.phpt"/>
+                <file role="test" name="ssh2_sftp_stream_semantics.phpt"/>
+                <file role="test" name="ssh2_sftp_wrapper_auth_failure.phpt"/>
+                <file role="test" name="ssh2_sftp_wrapper_release.phpt"/>
+                <file role="test" name="ssh2_sftp_wrapper_session_ownership.phpt"/>
                 <file role="test" name="ssh2_shell.phpt"/>
                 <file role="test" name="ssh2_shell_arguments.phpt"/>
                 <file role="test" name="ssh2_shell_exec_environment_iteration.phpt"/>
                 <file role="test" name="ssh2_shell_exec_environment_redaction.phpt"/>
                 <file role="test" name="ssh2_skip.inc"/>
                 <file role="test" name="ssh2_stream_select.phpt"/>
                 <file role="test" name="ssh2_test.inc"/>
-                <file role="test" name="testkey_rsa"/>
-                <file role="test" name="testkey_rsa.pub"/>
             </dir>
         </dir>
     </contents>
@@ -109,6 +111,28 @@
         <configureoption name="with-ssh2" default="autodetect" prompt="libssh2 prefix?"/>
     </extsrcrelease>
     <changelog>
+        <release>
+            <date>2026-04-04</date>
+            <version>
+                <release>1.5.0</release>
+                <api>1.0</api>
+            </version>
+            <notes>
+                - PIE (PHP Installer for Extensions) compatibility
+                - Fix crash on ECDSA pubkey auth due to libssh2 allocator mismatch [PR #92] (Fixes #91, #84)
+                - Fix fragment part of path lost for files with # in name [PR #93] (Fixes #90)
+                - Fix segfault when disconnecting with open SFTP streams [PR #94] (Fixes #81)
+                - Add ssh2_keepalive_config() and ssh2_keepalive_send() [PR #95] (Fixes #79)
+                - Add ssh2_set_timeout() [PR #70] (Jille Timmermans)
+                - Add ssh2_send_signal() [PR #89] (herrecito)
+                - Fix ssh2_poll() rejecting valid resource inputs [PR #96] (Fixes #82)
+                - Fix Homebrew libssh2 autodetection on macOS Apple Silicon [Fixes #87]
+                - Initialize php_stream_wrapper_ops explicitly [PR #68] (Gerdriaan Mulder)
+                - Bump minimum PHP version to 8.0
+                - Drop PHP 8.0 from CI, add PHP 8.5
+                - Fix Windows CI (setup-php-sdk TLS issue)
+            </notes>
+        </release>
         <release>
             <date>2024-02-09</date>
             <version>

php_ssh2.h

@@ -28,7 +28,7 @@
 #error "The ssh2 extension requires libssh2 1.9.0 or newer"
 #endif
 
-#define PHP_SSH2_VERSION				"1.5.0"
+#define PHP_SSH2_VERSION				"1.6.0"
 #define PHP_SSH2_DEFAULT_PORT			22
 
 /* Exported Constants */