v5.5

• fail fast if digest is unsafe
• refuse to use xor digest for passwords over insecure connections
• add RHEL10 builds
• prevent simple XSS from server menu data
• preserve disconnection message
• hide file transfers if not supported by the server
• add 'Download' file menu entry
• password attribute is a list
• don't try to convert strings to strings
• ignore whitespace when updating vcs info
• newer python compatibility: prefer setuptools, also add setuptools to the build dependencies
• consistency: always return a string