Bump versions and update changelogs

Author: mkj

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "sunset"
-version = "0.3.0"
+version = "0.4.0"
 edition = "2021"
 description = "A SSH library suitable for embedded and larger programs"
 repository = "https://github.com/mkj/sunset"
@@ -18,9 +18,9 @@ members = [
 ]
 
 [workspace.dependencies]
-sunset = { path = ".", version = "0.3" }
+sunset = { path = ".", version = "0.4" }
 sunset-sshwire-derive = { version = "0.2", path = "sshwire-derive" }
-sunset-async = { path = "async", version = "0.3" }
+sunset-async = { path = "async", version = "0.4" }
 sunset-demo-common = { path = "demo/common" }
 
 portable-atomic = "1"

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sunset-async"
-version = "0.3.0"
+version = "0.4.0"
 edition = "2021"
 repository = "https://github.com/mkj/sunset"
 categories = ["network-programming", "embedded", "no-std"]

async/Cargo.toml

@@ -1,5 +1,12 @@
 # `sunset-async` Changelog
 
+## 0.4.0 - 2026-01-11
+
+- Fix discarded channel input data. If async `progress()`
+  ran before `ChanIn` data was consumed, it could result
+  in discarded data. This didn't seem to affect sunsetc,
+  but could affect other applications.
+
 ## 0.3.0 - 2025-06-16
 
 ### Changed

async/changelog.md

@@ -1,11 +1,11 @@
 # Sunset Changelog
 
-# unreleased
+## 0.4.0 - 2026-01-11
 
 ### Added
 
 - Add server authentication helpers `matches_username()`,
-  `matches_password()`.
+  `matches_password()` for constant time comparison.
 
 - Add environment session variable support
 
@@ -14,7 +14,8 @@
 
 ### Fixed
 
-- Fix public key authentication. Github #30
+- Fix public key authentication for the server, previously signatures
+  would not validate. Github #30
 
 - Don't fail in some circumstances during key exchange when
   packets are received in particular order. Github #25, Github #27
@@ -24,13 +25,24 @@
 
 - Fix using sshwire-derive outside of sunset
 
-- Fix winch signal for sunsetc (regression in 0.3.0)
-
 ### Changed
 
+- Server auth events such as `ServFirstAuth` can enable or disable
+  password or public key auth for subsequent attempts. Now no authentication methods are enabled by default, they must be explicitly enabled with eg `enable_password_auth()`, `enable_pubkey_auth()`.
+
+- Minimum Rust version is 1.87
+
+- `Channels::by_handle_mut()` renamed from `from_handle_mut()` to be
+  more idiomatic.
+
 - Log a better warning when host key signatures fail
 
-- Improve exit code handling in sunsetc
+- Code size improvements.
+
+- Fail with `PacketWrong` when calling an event method, rather
+  than on a subsequent `progress()` call.
+
+- CI scripts now build in `target/ci` rather than `testing/target`
 
 ## 0.3.0 - 2025-06-16
 

changelog.md

@@ -1,6 +1,6 @@
 [package]
 name = "sunset-sshwire-derive"
-version = "0.2.0"
+version = "0.2.1"
 edition = "2021"
 repository = "https://github.com/mkj/sunset"
 license = "0BSD"

sshwire-derive/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sunset-stdasync"
-version = "0.3.0"
+version = "0.4.0"
 edition = "2021"
 repository = "https://github.com/mkj/sunset"
 license = "0BSD"

stdasync/Cargo.toml

@@ -1,5 +1,25 @@
 # `sunset-stdasync` Changelog
 
+## 0.4.0 - 2026-01-11
+
+### Fixed
+
+- `CmdlineClient`: fix exit code, flush logs on completio n
+
+- `sunsetc`: fix winch signal being lost (regression in 0.3.0)
+
+### Added
+
+- `sunsetc`: `--version` argument
+
+- `sunsetc`: Allow `%p` in tracefile filename for PID
+
+### Changed
+
+- `sunsetc`: buffer tracefile output for performance
+
+- `sunsetc`: escape banner sent from a server
+
 ## 0.3.0 - 2025-06-16
 
 ### Changed