Skip to content

[ssh] az ssh prints warning to upgrade to >=2.0.4 but 2.0.9 already installed #9949

Open

Description

Source: Azure/azure-cli#33539 (by Philipp (@phillies))
Affected extension: ssh (src/ssh/)


<<UNTRUSTED:issue-33539>>

Issue #33539 (by Philipp (@phillies))

Title

az ssh prints warning to upgrade to >=2.0.4 but 2.0.9 already installed

Body

Describe the bug

I freshly installed az cli with ssh on a Mac 26.5.1 but every time I run az ssh arc/config I get
'''
[08:58:45]❯ az ssh config --subscription xxxx--resource-group xxxx --name xxxx --local-user xxxx -f xxx --keys-dest-folder xxxx
On May 21st 2025, any ssh commands connecting to ARC machines on versions <2.0.4 will no longer work. Please upgrade to az ssh version >=2.0.4
Generated relay information xxxx is valid until 2026-06-12 09:54:37 AM in local time.
xxxx contains sensitive information. Please delete it once you no longer need this config file.
'''
Latest version is installed:
'''
[08:58:36]❯ az extension update --name ssh
Latest version of 'ssh' is already installed.

Use --debug for more information
'''

Related command

az ssh arc / config

Errors

On May 21st 2025, any ssh commands connecting to ARC machines on versions <2.0.4 will no longer work. Please upgrade to az ssh version >=2.0.4

Issue script & Debug output

az ssh arc --subscription xxxxx --resource-group xxxx --name xxxx --local-user xxxx

Expected behavior

No warning

Environment Summary

'''
azure-cli 2.87.0

core 2.87.0
telemetry 1.1.0

Extensions:
ssh 2.0.9

Dependencies:
msal 1.36.0
azure-mgmt-resource 24.0.0

Python location '/opt/homebrew/Cellar/azure-cli/2.87.0/libexec/bin/python'
Config directory '/Users/xxxx/.azure'
Extensions directory '/Users/xxxxx/.azure/cliextensions'

Python (Darwin) 3.13.13 (main, Apr 7 2026, 18:19:01) [Clang 21.0.0 (clang-2100.0.123.102)]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.
'''

Additional context

No response

Comments

Comment by Yong Zhang (@yonzhan)

Thank you for opening this issue, we will look into it.

Comment by Klaas Weyermann (@Klaas-)

I can independently confirm the issue with azure-cli on Windows 11.
'''
az --version
azure-cli 2.87.0

core 2.87.0
telemetry 1.1.0

Extensions:
connectedmachine 1.0.0
resource-graph 2.1.1
serial-console 1.0.0b3
ssh 2.0.9

Dependencies:
msal 1.36.0
azure-mgmt-resource 24.0.0

Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe'
Config directory 'C:\Users\xxx.azure'
Extensions directory 'C:\Users\xxx.azure\cliextensions'

Python (Windows) 3.13.13 (tags/v3.13.13:01104ce, Apr 7 2026, 19:25:48) [MSC v.1944 64 bit (AMD64)]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.
'''

Comment by Klaas Weyermann (@Klaas-)

so I flew over the code, the warning is coming from here: be61a0f added by Steven Bucher (@StevenBucher98) -- if I read docs correctly this is by design and it the announcement should have been removed when they pushed release 2.0.4 of ssh ...
<<END:issue-33539>>

Activity

  1. azclibot commented on Jun 17, 2026

    @azclibot
    CollaboratorAuthor

    This bug was reported in Azure/azure-cli#33539.

    Summary: The az ssh extension (v2.0.9) incorrectly prints a warning message saying to upgrade to >=2.0.4, even though a version higher than that (2.0.9) is already installed.

    Affected command: az ssh config / az ssh arc

    Error message shown:

    On May 21st 2025, any ssh commands connecting to ARC machines on versions <2.0.4 will no longer work. Please upgrade to az ssh version >=2.0.4
    

    Environment:

    • azure-cli: 2.87.0
    • ssh extension: 2.0.9
    • Python 3.13.13 on macOS (Darwin)

    Root cause hypothesis: The version comparison logic in the ssh extension is likely doing a string comparison instead of a semantic version comparison, causing 2.0.9 to be incorrectly considered less than 2.0.4 (since '9' < '4' is false but perhaps the comparison is checking against a hardcoded string or using incorrect logic).

    Expected behavior: No warning should be shown when the installed version (2.0.9) is already >= 2.0.4.

    Please investigate the version check in the ssh extension and fix the comparison to use proper semantic versioning.


    Posted by agent-assist (autonomous bug-fix pipeline).

  2. yonzhan commented on Jun 17, 2026

    @yonzhan
    Collaborator

    Thank you for opening this issue, we will look into it.

  3. vthiebaut10 commented on Jun 22, 2026

    @vthiebaut10
    Contributor

    Yong Zhang (@yonzhan) What is the guidance for removing the breaking change warning? Should we just delete the _breaking_change.py file for all versions moving forward?

  4. Klaas- commented on Jun 22, 2026

    @Klaas-

    so I made a pr in #9937 it seems there is no way to tell azure-cli to only show a deprecation warning until a certain version -- at least not that I found :) so I am guessing it would have been correct to remove this when 2.0.4 was released, but it was forgotten

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions