Repository navigation
[ssh] az ssh prints warning to upgrade to >=2.0.4 but 2.0.9 already installed #9949
Description
Source: Azure/azure-cli#33539 (by Philipp (@phillies))
Affected extension: ssh (src/ssh/)
<<UNTRUSTED:issue-33539>>
Issue #33539 (by Philipp (@phillies))
Title
az ssh prints warning to upgrade to >=2.0.4 but 2.0.9 already installed
Body
Describe the bug
I freshly installed az cli with ssh on a Mac 26.5.1 but every time I run az ssh arc/config I get
'''
[08:58:45]❯ az ssh config --subscription xxxx--resource-group xxxx --name xxxx --local-user xxxx -f xxx --keys-dest-folder xxxx
On May 21st 2025, any ssh commands connecting to ARC machines on versions <2.0.4 will no longer work. Please upgrade to az ssh version >=2.0.4
Generated relay information xxxx is valid until 2026-06-12 09:54:37 AM in local time.
xxxx contains sensitive information. Please delete it once you no longer need this config file.
'''
Latest version is installed:
'''
[08:58:36]❯ az extension update --name ssh
Latest version of 'ssh' is already installed.
Use --debug for more information
'''
Related command
az ssh arc / config
Errors
On May 21st 2025, any ssh commands connecting to ARC machines on versions <2.0.4 will no longer work. Please upgrade to az ssh version >=2.0.4
Issue script & Debug output
az ssh arc --subscription xxxxx --resource-group xxxx --name xxxx --local-user xxxx
Expected behavior
No warning
Environment Summary
'''
azure-cli 2.87.0
core 2.87.0
telemetry 1.1.0
Extensions:
ssh 2.0.9
Dependencies:
msal 1.36.0
azure-mgmt-resource 24.0.0
Python location '/opt/homebrew/Cellar/azure-cli/2.87.0/libexec/bin/python'
Config directory '/Users/xxxx/.azure'
Extensions directory '/Users/xxxxx/.azure/cliextensions'
Python (Darwin) 3.13.13 (main, Apr 7 2026, 18:19:01) [Clang 21.0.0 (clang-2100.0.123.102)]
Legal docs and information: aka.ms/AzureCliLegal
Your CLI is up-to-date.
'''
Additional context
No response
Comments
Comment by Yong Zhang (@yonzhan)
Thank you for opening this issue, we will look into it.
Comment by Klaas Weyermann (@Klaas-)
I can independently confirm the issue with azure-cli on Windows 11.
'''
az --version
azure-cli 2.87.0
core 2.87.0
telemetry 1.1.0
Extensions:
connectedmachine 1.0.0
resource-graph 2.1.1
serial-console 1.0.0b3
ssh 2.0.9
Dependencies:
msal 1.36.0
azure-mgmt-resource 24.0.0
Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe'
Config directory 'C:\Users\xxx.azure'
Extensions directory 'C:\Users\xxx.azure\cliextensions'
Python (Windows) 3.13.13 (tags/v3.13.13:01104ce, Apr 7 2026, 19:25:48) [MSC v.1944 64 bit (AMD64)]
Legal docs and information: aka.ms/AzureCliLegal
Your CLI is up-to-date.
'''
Comment by Klaas Weyermann (@Klaas-)
so I flew over the code, the warning is coming from here: be61a0f added by Steven Bucher (@StevenBucher98) -- if I read docs correctly this is by design and it the announcement should have been removed when they pushed release 2.0.4 of ssh ...
<<END:issue-33539>>
Activity
azclibot commentedon Jun 17, 2026
This bug was reported in Azure/azure-cli#33539.
Summary: The
az sshextension (v2.0.9) incorrectly prints a warning message saying to upgrade to>=2.0.4, even though a version higher than that (2.0.9) is already installed.Affected command:
az ssh config/az ssh arcError message shown:
Environment:
Root cause hypothesis: The version comparison logic in the
sshextension is likely doing a string comparison instead of a semantic version comparison, causing2.0.9to be incorrectly considered less than2.0.4(since'9' < '4'is false but perhaps the comparison is checking against a hardcoded string or using incorrect logic).Expected behavior: No warning should be shown when the installed version (2.0.9) is already >= 2.0.4.
Please investigate the version check in the ssh extension and fix the comparison to use proper semantic versioning.
Posted by agent-assist (autonomous bug-fix pipeline).
yonzhan commentedon Jun 17, 2026
Thank you for opening this issue, we will look into it.
vthiebaut10 commentedon Jun 22, 2026
Yong Zhang (@yonzhan) What is the guidance for removing the breaking change warning? Should we just delete the _breaking_change.py file for all versions moving forward?
Klaas- commentedon Jun 22, 2026
so I made a pr in #9937 it seems there is no way to tell azure-cli to only show a deprecation warning until a certain version -- at least not that I found :) so I am guessing it would have been correct to remove this when 2.0.4 was released, but it was forgotten