OpenSSH 9.9 disables the DSA signature algorithm by default and plans to remove it by 2025. It introduces a hybrid post-quantum key exchange mechanism, enhanced connection controls, and faster NTRUPrime key exchange.
https://alternativeto.net/news/2024/9/openssh-9-9-released-with-dsa-disabled-and-hybrid-ml-kem-post-quantum-key-exchange/