chore(deps): bump asyncssh from 2.21.1 to 2.22.0

[dependabot]

Bumps asyncssh from 2.21.1 to 2.22.0.

Changelog

Sourced from asyncssh's changelog.

Release 2.22.0 (21 Dec 2025)

• Added a new config option utf8_decode_errors for handling UTF-8 decode errors when parsing certain fields in SSH packets (disconnect error, debug message, userauth banner, channel open failure reason, channel exit signal reason, and SFTP error reason). The default continues to behave as before, raising a ProtocolError exception, but this option allows invalid bytes to be removed or replaced. Thanks go to GitHub user Le-Syl21 for suggesting this.

• Changed config parser to Ignore subdirectories and parse only plain files matching a glob pattern in include directives, better matching the behavior of other SSH implementations. Thanks go to Jacopo Nespolo for contributing this change.

• Improved a previous fix for a race condition which sometimes triggered assertion errors in SSHForwarder. Thanks go to Mike Barry for reporting the issue and helping to test the improved fix.

• Removed optional dependency on libnacl/libsodium for chacha20 and Edwrds curves, now that these are available in all supported versions of the cryptography package.

• Updated asyncssh to use version 2 of the fido2 package, and update minimum Python version to 3.10, required by that updated package.

• Fixed issue with the OpenSSL legacy provider on Windows and re-enabled OpenSSL use in unit tests on Windows.

• Inproved "run multiple clients" example to show the hostname being accessed by each task.

• Added unit testing for Python 3.14 and dropped 3.8 and 3.9.

Commits

• af5a81e Bump version number up to 2.22.0 and update change log
• 254d735 Add an option handling UTF-8 decode errors in certain SSH packets
• c7bc3aa Add unit tests for filtering directories from config include glob match
• 54f83ac Skip directories within ~/.ssh/config.d
• 8d5d7be Remove optional dependency on libnacl/libsodium
• 00600f0 Update Python version in examples to Python 3.10 and update copyright
• c54ded6 Add support for client reported version 1.99
• 6c46e76 Remove unnecessary key exchange unit test
• 0b9e5b6 Build and workflow updates
• d281290 Disable reliance on OpenSSL on Windows for now due to GitHub runner issues
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)