chore(deps): bump the all group across 1 directory with 2 updates

[dependabot]

Bumps the all group with 2 updates in the / directory: github.com/kevinburke/ssh_config and golang.org/x/oauth2.

Updates github.com/kevinburke/ssh_config from 1.5.0 to 1.6.0

Changelog

Sourced from github.com/kevinburke/ssh_config's changelog.

Changes

Version 1.7 (unreleased)

Update default values to match current openssh-portable (previously based on OpenSSH 7.4p1 from 2016).

Breaking changes:

• Remove Cipher default (SSH protocol 1 only, deprecated in openssh-portable)
• Remove ChallengeResponseAuthentication default (alias for KbdInteractiveAuthentication)
• Remove CompressionLevel default (unsupported in openssh-portable)
• Remove Protocol default (silently ignored in openssh-portable)
• Remove RhostsRSAAuthentication default (SSH protocol 1 only, unsupported)
• Remove RSAAuthentication default (SSH protocol 1 only, unsupported)
• Remove UsePrivilegedPort default (deprecated in openssh-portable)
• Remove IdentityFile default of ~/.ssh/identity (SSH protocol 1 only)
• Change CheckHostIP default from "yes" to "no"
• Change UpdateHostKeys default from "no" to "yes"
• Change Ciphers default to remove CBC ciphers
• Change KexAlgorithms default to add post-quantum algorithms and remove SHA1 variants
• Change HostKeyAlgorithms default to add sk-, webauthn-, rsa-sha2-* and remove ssh-rsa
• Change HostbasedKeyTypes default (same as HostKeyAlgorithms)
• Change PubkeyAcceptedKeyTypes default (same as HostKeyAlgorithms)
• Change ForwardX11Timeout default from "20m" to "1200" (same duration, now in seconds)
• Rename defaultProtocol2Identities to defaultIdentityFiles
• Remove ~/.ssh/id_dsa from default identity files
• Remove ForwardAgent from strict yes/no validation (now also accepts a socket path)
• Remove CompressionLevel from uint validation

Other changes:

• Add ControlPersist default ("no")
• Add RequestTTY default ("auto")
• Add SessionType default ("default")
• Add CASignatureAlgorithms default
• Add HostbasedAcceptedAlgorithms default (new name for HostbasedKeyTypes)
• Add PubkeyAcceptedAlgorithms default (new name for PubkeyAcceptedKeyTypes)
• Add ~/.ssh/id_ecdsa_sk and ~/.ssh/id_ed25519_sk to default identity files

Version 1.6 (released February 16, 2026)

• Support ~ as the user's home directory in Include directives, matching the behavior described in ssh_config(5). Thanks to Neil Williams for the report (#31).

• Strip surrounding double quotes from parsed values. OpenSSH allows values like IdentityFile "/path/to/file", but Get/GetAll previously returned the quotes as literal characters. Quotes are now stripped from the returned value while preserving the original text for faithful roundtripping via String() and

... (truncated)

Commits

• ac007ea CHANGELOG.md: add v1.6.0 changes, backfill v1.5.0 section
• 6f3abd7 config: support ~ as user's home directory in Include
• cc9f700 config: simplify composite literal in newConfig
• 538d5a7 config: default to a space before '#' in EOL comments
• 04e0fd6 config: strip surrounding double quotes from parsed values
• 568811a ci: disable setup-go cache, update checkout to v6
• See full diff in compare view

Updates golang.org/x/oauth2 from 0.35.0 to 0.36.0

Commits

• 4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions