OpenSSH 10.0 (a regular bump from 9.9) is out, and it makes the post-quantum ML-KEM hybrid mlkem768x25519-sha256 the default. https://www.openssh.com/txt/release-10.0

The next release of x/crypto/ssh will support it, too, when used with Go 1.24, making SSH…