Currently, the DynamicKeyExchangeAction does send SSH_MSG_NEWKEYS as well as receive and process it from the remote peer. However, this is not desirable as it prevents someone to implement actions which are executed just before encryption is being activated.
The branch feat/ext-downgrade-probe-compat will remove sending the SSH_MSG_NEWKEYS within this action. However, not receiving it requires major changes to how SSH-Attacker receives messages.