AIKIDO-2026-10340

TL;DR

Affected versions of this package use asynchronous transport disconnection during connection setup in ClientSecureChannelLayer. Under connection break or teardown, that allowed a race where _backoff_completion was invoked with undefined instead of the cancellation error, leading to false successful connection paths and internal assertion errors. The application could believe the channel was still valid when the transport was already disconnected. The patch reverts to synchronous disposal (abortConnection then dispose) and corrects _backoff_completion to propagate the cancellation error so connection state stays consistent.