diff --git a/releasenotes/notes/add-ansible-pylibssh-35f42c53da60aa5b.yaml b/releasenotes/notes/add-ansible-pylibssh-35f42c53da60aa5b.yaml
new file mode 100644
index 000000000..1e16704ff
--- /dev/null
+++ b/releasenotes/notes/add-ansible-pylibssh-35f42c53da60aa5b.yaml
@@ -0,0 +1,13 @@
+---
+features:
+  - |
+    Adds ``ansible-pylibssh`` to Kayobe's Python requirements. It is used by
+    ``kayobe physical network configure`` for switches using the
+    ``ansible.netcommon.network_cli`` connection, as the ``paramiko``
+    transport for ``network_cli`` is deprecated in ``ansible.netcommon``.
+upgrade:
+  - |
+    Switches using the ``ansible.netcommon.network_cli`` connection now use
+    ``libssh`` rather than ``paramiko``. Set
+    ``ansible_network_cli_ssh_type`` to ``paramiko`` to keep the previous
+    behaviour.
diff --git a/requirements.txt b/requirements.txt
index 67091f5ae..2a7442433 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -7,6 +7,7 @@ PyYAML>=3.10.0 # MIT
 # INI parsing
 oslo.config>=5.2.0 # Apache-2.0
 paramiko # LGPL
+ansible-pylibssh # LGPL
 jsonschema<5 # MIT
 wcmatch>=8.2,<=9.0 # MIT
 hvac>=0.10.1