fix(deps): update rust crate russh to 0.60

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
russh	dependencies	minor	0.57 → 0.60

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

warp-tech/russh (russh)

v0.60.0

Compare Source

Changes

• dad8de6: use rand 0.10 (#​673) (Joe Grund) #​673

Fixes

• kex: separate GEX peer request validation from client config (#​684) #​684 (Artem Medvedev)

v0.59.0

Changes

• auth: add certificate-based authentication via SSH agent (#​632) #​632 (wi-adam)
• 6996711: Replace libcrux-ml-kem with RustCrypto ml-kem (#​660) (kpcyrd) #​660

Fixes

• 084dbcf: Replace Deprecated Function Calls to criterion::black_box() (#​683) (Roger Knecht) #​683
• debc93c: Update dev-dependencies (env_logger, clap, termion) (#​671) (kpcyrd) #​671
• 24d7527: Forward ChannelMsg::Close to channel before dropping sender (#​674) (Corey Leavitt) #​674
• bb9cc42: Fix and harden deferred channel EOF/CLOSE replay after rekey (#​670) (Mika Cohen) #​670
• 3047787: Reduce size of ReadSshIdBuffer, add unit tests (#​672) (kpcyrd) #​672
• bcdc9b9: Bump aws-lc-rs to fix RUSTSEC-2026-0044 and RUSTSEC-2026-0048 (#​681) (Roger Knecht) #​681

Misc

• 6270229: Update Rust dependencies (#​676) (Roger Knecht) #​676

v0.58.0

Compare Source

Changes

• eliminate mlock/munlock overhead for non-secret buffers (~21% throughput improvement) (#​653) #​653 (Mika Cohen)

  • Non-sensitive data buffers are no longer wrapped in CryptoVec, reducing the performance overhead. A few public functions that took CryptoVec now take impl Into<Bytes> instead.

• 6f70150: Remove heap allocations from SshId (#​656) (kpcyrd) #​656

  • SshId::Standard() now contains a Cow<'static, str> instead of a String.

• 0f51860: Expose HostConfig fields to external consumers (#​652) (François Bernier) #​652

• e75de5a: Add russh/serde feature to enable serde on russh::keys::PublicKey (#​655) (kpcyrd) #​655

• replace memset with zeroize in resize() method (#​634) #​634 (Eric Rodrigues Pires)

• bump thiserror to latest version (#​651) #​651 (Roger Knecht)

• b7ce487: Remove Home Crate Dependency (#​667) (Roger Knecht) #​667

• bebe8c0: fixed #​658 - make Handle::tcpip_forward and Handle::streamlocal_forward take &self (Eugene)

Fixes

• use remote channel ID in CHANNEL_REQUEST replies (#​662) #​662 (Mota-Link)
• accept full 256k channel packets (#​666) #​666 (Mika Cohen)
• aa43795: Harden Windows memory locking: fix ERROR_WORKING_SET_QUOTA and edge cases (#​661) (Corey Leavitt) #​661

v0.57.1

Compare Source

Fixes

• prevent deadlock when using make_writer for large transfers (#​630) #​630 (wyebin)
• do not send keepalive before authentication (#​642) #​642 (Lyn)
• 46573ed: Fix zlib vs zlib@openssh.com compression timing (#​564) (#​646) (Guilherme Fontes) #​646

Features

• 591ec26: Improve CryptoVec performance (#​627) (Eric Rodrigues Pires) #​627

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.