Bump asyncssh from 2.23.1 to 2.24.0

[dependabot]

Bumps asyncssh from 2.23.1 to 2.24.0.

Changelog

Sourced from asyncssh's changelog.

Release 2.24.0 (27 Jun 2026)

• Added support for creating and validating SSHSIG signatures, as well as OpenSSH "allowed signers" files.

• Added support for ML-KEM key exchange from the PyCA cryptography package when it is available. This avoids the need to have the liboqs library installed to use ML-KEM. However, liboqs is still required to support SNTRUP kex exchange.

• Fixed an issue with handling of SSH maximum packet size when opening a new SSH channel, aborting with a protocol error if a peer attempts to set this size to 0. Thanks go to GitHub user afldl for reporting this issue and providing analysis and reproduction code.

• Fixed an issue with include directives in OpenSSH config files. Thanks go to GitHub users sethholmes and tazle for reporting this issue and providing analysis and a proposed fix.

Commits

• 3577224 Bump version number up to 2.24.0 and update change log
• 321588d Avoid a coverage issue on a protocol definition
• eefa2fa Update the documentation to list supported SSHSIG options
• 9c35427 Add input validation on maximum packet size
• c3ab96f Remove unused import
• b3039b2 Bump cryptography from 2.8 to 48.0.1 in /docs
• 9ef998c Bump cryptography min version to pick up security vulnerability fix
• d1caa62 Add support for ML-KEM implementation in PyCA
• c0d349b Fix an issue with include directives in SSH confid files
• 87c58b2 Add support for creating and validating SSHSIG format signatures
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)