chore(main): release 0.2.1 #2

Merged

github-actions[bot] merged 2 commits from release-please--branches--main into main

2026-03-21 16:38:24 +01:00

github-actions[bot] commented

2026-03-21 10:19:30 +01:00

(Migrated from github.com)

🤖 I have created a release beep boop

0.2.1 (2026-03-21)

Bug Fixes

ci: escape awk variables in Nix postPatch string (440c5b9)
ci: handle Cargo.lock version drift in Nix build (a65b5dd)
ci: ignore unfixable SDK transitive advisories in cargo audit (44e5564)
ci: remove broken postPatch and sync Cargo.lock in release PR (a8b542f)

Security

auth: persist password backoff counter across restarts (51293ff)
ci: add cargo-audit to CI pipeline (e593343)
common: reject world/group-writable config file and sync docs (8c11a56)
common: warn on world/group-writable config file (b44441a)
ipc: add connection limits, timeouts, and reduce message size (7449a23)
sdk: pass Zeroizing<String> through SDK boundary and bound KDF params (61037d7)
service: make memory hardening fatal, add macOS PT_DENY_ATTACH (e704431)
service: remove --allow-insecure-memory escape hatch (b351158)
service: remove PATH fallback for prompt binary discovery (91582a6)
ssh: add UID peer verification to SSH agent socket (49d2bdf)
ssh: zeroize SSH private key material after signing (0a6b9a7)

Other Changes

apply cargo fmt formatting (288a36d)

This PR was generated with Release Please. See documentation.

:robot: I have created a release *beep* *boop* --- ## [0.2.1](https://github.com/morten-olsen/grimoire/compare/v0.2.0...v0.2.1) (2026-03-21) ### Bug Fixes * **ci:** escape awk variables in Nix postPatch string ([440c5b9](https://github.com/morten-olsen/grimoire/commit/440c5b983295d1b11a3c26d3407848441f277695)) * **ci:** handle Cargo.lock version drift in Nix build ([a65b5dd](https://github.com/morten-olsen/grimoire/commit/a65b5dda2f70b659bacfade45dc84c77d54243f9)) * **ci:** ignore unfixable SDK transitive advisories in cargo audit ([44e5564](https://github.com/morten-olsen/grimoire/commit/44e556418615ac6e7a35e05e726aa76281596ac3)) * **ci:** remove broken postPatch and sync Cargo.lock in release PR ([a8b542f](https://github.com/morten-olsen/grimoire/commit/a8b542f73f6ac2a59cef9e62078b8817ecade7f2)) ### Security * **auth:** persist password backoff counter across restarts ([51293ff](https://github.com/morten-olsen/grimoire/commit/51293ffa46cac9b27d63614f29f1b5b456e00b53)) * **ci:** add cargo-audit to CI pipeline ([e593343](https://github.com/morten-olsen/grimoire/commit/e5933431a2be3b6e315f8900581d8e2cea26bf35)) * **common:** reject world/group-writable config file and sync docs ([8c11a56](https://github.com/morten-olsen/grimoire/commit/8c11a5604c58f8af9f8aeeb3463cf6a517d218d9)) * **common:** warn on world/group-writable config file ([b44441a](https://github.com/morten-olsen/grimoire/commit/b44441ad53f918d5e00fd81b730899235b66e296)) * **ipc:** add connection limits, timeouts, and reduce message size ([7449a23](https://github.com/morten-olsen/grimoire/commit/7449a239c6e0fc456ffd7f264965cfb510f43504)) * **sdk:** pass Zeroizing<String> through SDK boundary and bound KDF params ([61037d7](https://github.com/morten-olsen/grimoire/commit/61037d7cbfdb5b9e78cd20fca31536a748e8a4ec)) * **service:** make memory hardening fatal, add macOS PT_DENY_ATTACH ([e704431](https://github.com/morten-olsen/grimoire/commit/e704431600684a9556c4259105846d2297f9e9f8)) * **service:** remove --allow-insecure-memory escape hatch ([b351158](https://github.com/morten-olsen/grimoire/commit/b351158bbd2cbdcb7be157cd29ac4153dd656970)) * **service:** remove PATH fallback for prompt binary discovery ([91582a6](https://github.com/morten-olsen/grimoire/commit/91582a6e145f0aaffe0dfcdd3c74a87f011edbbb)) * **ssh:** add UID peer verification to SSH agent socket ([49d2bdf](https://github.com/morten-olsen/grimoire/commit/49d2bdf0b60315113ad08e16363bf494ac520536)) * **ssh:** zeroize SSH private key material after signing ([0a6b9a7](https://github.com/morten-olsen/grimoire/commit/0a6b9a71d6c8cc97d39a20cf6a86579ffd45941a)) ### Other Changes * apply cargo fmt formatting ([288a36d](https://github.com/morten-olsen/grimoire/commit/288a36dc5b98463fe4ccdc71d7f32e46dfa3606c)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).

github-actions[bot] commented

2026-03-21 16:38:33 +01:00

(Migrated from github.com)

🤖 Created releases: