build(deps): bump github.com/kevinburke/ssh_config from 1.4.0 to 1.6.0

[dependabot]

Bumps github.com/kevinburke/ssh_config from 1.4.0 to 1.6.0.

Changelog

Sourced from github.com/kevinburke/ssh_config's changelog.

Changes

Version 1.7 (unreleased)

Update default values to match current openssh-portable (previously based on OpenSSH 7.4p1 from 2016).

Breaking changes:

• Remove Cipher default (SSH protocol 1 only, deprecated in openssh-portable)
• Remove ChallengeResponseAuthentication default (alias for KbdInteractiveAuthentication)
• Remove CompressionLevel default (unsupported in openssh-portable)
• Remove Protocol default (silently ignored in openssh-portable)
• Remove RhostsRSAAuthentication default (SSH protocol 1 only, unsupported)
• Remove RSAAuthentication default (SSH protocol 1 only, unsupported)
• Remove UsePrivilegedPort default (deprecated in openssh-portable)
• Remove IdentityFile default of ~/.ssh/identity (SSH protocol 1 only)
• Change CheckHostIP default from "yes" to "no"
• Change UpdateHostKeys default from "no" to "yes"
• Change Ciphers default to remove CBC ciphers
• Change KexAlgorithms default to add post-quantum algorithms and remove SHA1 variants
• Change HostKeyAlgorithms default to add sk-, webauthn-, rsa-sha2-* and remove ssh-rsa
• Change HostbasedKeyTypes default (same as HostKeyAlgorithms)
• Change PubkeyAcceptedKeyTypes default (same as HostKeyAlgorithms)
• Change ForwardX11Timeout default from "20m" to "1200" (same duration, now in seconds)
• Rename defaultProtocol2Identities to defaultIdentityFiles
• Remove ~/.ssh/id_dsa from default identity files
• Remove ForwardAgent from strict yes/no validation (now also accepts a socket path)
• Remove CompressionLevel from uint validation

Other changes:

• Add ControlPersist default ("no")
• Add RequestTTY default ("auto")
• Add SessionType default ("default")
• Add CASignatureAlgorithms default
• Add HostbasedAcceptedAlgorithms default (new name for HostbasedKeyTypes)
• Add PubkeyAcceptedAlgorithms default (new name for PubkeyAcceptedKeyTypes)
• Add ~/.ssh/id_ecdsa_sk and ~/.ssh/id_ed25519_sk to default identity files

Version 1.6 (released February 16, 2026)

• Support ~ as the user's home directory in Include directives, matching the behavior described in ssh_config(5). Thanks to Neil Williams for the report (#31).

• Strip surrounding double quotes from parsed values. OpenSSH allows values like IdentityFile "/path/to/file", but Get/GetAll previously returned the quotes as literal characters. Quotes are now stripped from the returned value while preserving the original text for faithful roundtripping via String() and

... (truncated)

Commits

• ac007ea CHANGELOG.md: add v1.6.0 changes, backfill v1.5.0 section
• 6f3abd7 config: support ~ as user's home directory in Include
• cc9f700 config: simplify composite literal in newConfig
• 538d5a7 config: default to a space before '#' in EOL comments
• 04e0fd6 config: strip surrounding double quotes from parsed values
• 568811a ci: disable setup-go cache, update checkout to v6
• e0b4ce9 1.5.0
• f2e12b8 CHANGELOG.md: improve fidelity and dates
• f1fac02 all: implement Match support
• 482de70 SECURITY.md: add
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)