az ssh prints warning to upgrade to >=2.0.4 but 2.0.9 already installed

[phillies]

Describe the bug

I freshly installed az cli with ssh on a Mac 26.5.1 but every time I run az ssh arc/config I get

[08:58:45]❯ az ssh config --subscription xxxx--resource-group xxxx --name xxxx --local-user xxxx -f xxx --keys-dest-folder xxxx
On May 21st 2025, any ssh commands connecting to ARC machines on versions <2.0.4 will no longer work. Please upgrade to az ssh version >=2.0.4
Generated relay information xxxx is valid until 2026-06-12 09:54:37 AM in local time.
xxxx contains sensitive information. Please delete it once you no longer need this config file.

Latest version is installed:

[08:58:36]❯ az extension update --name ssh
Latest version of 'ssh' is already installed.

Use --debug for more information

Related command

az ssh arc / config

Errors

On May 21st 2025, any ssh commands connecting to ARC machines on versions <2.0.4 will no longer work. Please upgrade to az ssh version >=2.0.4

Issue script & Debug output

az ssh arc --subscription xxxxx --resource-group xxxx --name xxxx --local-user xxxx

Expected behavior

No warning

Environment Summary

azure-cli                         2.87.0

core                              2.87.0
telemetry                          1.1.0

Extensions:
ssh                                2.0.9

Dependencies:
msal                              1.36.0
azure-mgmt-resource               24.0.0

Python location '/opt/homebrew/Cellar/azure-cli/2.87.0/libexec/bin/python'
Config directory '/Users/xxxx/.azure'
Extensions directory '/Users/xxxxx/.azure/cliextensions'

Python (Darwin) 3.13.13 (main, Apr  7 2026, 18:19:01) [Clang 21.0.0 (clang-2100.0.123.102)]

Legal docs and information: aka.ms/AzureCliLegal


Your CLI is up-to-date.

Additional context

No response

[yonzhan]

Thank you for opening this issue, we will look into it.

[Klaas-]

I can independently confirm the issue with azure-cli on Windows 11.

az --version
azure-cli                         2.87.0

core                              2.87.0
telemetry                          1.1.0

Extensions:
connectedmachine                   1.0.0
resource-graph                     2.1.1
serial-console                   1.0.0b3
ssh                                2.0.9

Dependencies:
msal                              1.36.0
azure-mgmt-resource               24.0.0

Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe'
Config directory 'C:\Users\xxx\.azure'
Extensions directory 'C:\Users\xxx\.azure\cliextensions'

Python (Windows) 3.13.13 (tags/v3.13.13:01104ce, Apr  7 2026, 19:25:48) [MSC v.1944 64 bit (AMD64)]

Legal docs and information: aka.ms/AzureCliLegal


Your CLI is up-to-date.

[Klaas-]

so I flew over the code, the warning is coming from here: Azure/azure-cli-extensions@be61a0f added by @StevenBucher98 -- if I read docs correctly this is by design and it the announcement should have been removed when they pushed release 2.0.4 of ssh ...

[azclibot]

Routed to Azure/azure-cli-extensions as #9949 (Azure/azure-cli-extensions#9949) because this targets the ssh extension, whose source lives in Azure/azure-cli-extensions.

---

Posted by agent-assist (autonomous bug-fix pipeline).