• v0.2.1 2904c82af0

    v0.2.1 Stable

    github-actions[bot] released this 2026-03-21 16:38:24 +01:00 | 13 commits to main since this release

    0.2.1 (2026-03-21)

    Bug Fixes

    • ci: escape awk variables in Nix postPatch string (440c5b9)
    • ci: handle Cargo.lock version drift in Nix build (a65b5dd)
    • ci: ignore unfixable SDK transitive advisories in cargo audit (44e5564)
    • ci: remove broken postPatch and sync Cargo.lock in release PR (a8b542f)

    Security

    • auth: persist password backoff counter across restarts (51293ff)
    • ci: add cargo-audit to CI pipeline (e593343)
    • common: reject world/group-writable config file and sync docs (8c11a56)
    • common: warn on world/group-writable config file (b44441a)
    • ipc: add connection limits, timeouts, and reduce message size (7449a23)
    • sdk: pass Zeroizing<String> through SDK boundary and bound KDF params (61037d7)
    • service: make memory hardening fatal, add macOS PT_DENY_ATTACH (e704431)
    • service: remove --allow-insecure-memory escape hatch (b351158)
    • service: remove PATH fallback for prompt binary discovery (91582a6)
    • ssh: add UID peer verification to SSH agent socket (49d2bdf)
    • ssh: zeroize SSH private key material after signing (0a6b9a7)

    Other Changes

    • apply cargo fmt formatting (288a36d)
    Downloads
  • v0.2.0 61ca3a8565

    v0.2.0 Stable

    github-actions[bot] released this 2026-03-21 09:30:18 +01:00 | 31 commits to main since this release

    0.2.0 (2026-03-21)

    ⚠ BREAKING CHANGES

    • common: hardcode security parameters and zeroize all credentials

    Features

    • ci: add FlakeHub publish workflow (4700e04)
    • ci: add release-please for automated versioning (7c41a73)
    • ci: auto-update Homebrew tap on release (11ca558)
    • ci: implement release pipeline with signing, changelog, and Nix flake (eb549dc)

    Bug Fixes

    • ci: remove release-type override from release-please workflow (0482320)
    • ci: use simple release type for virtual workspace (0719f0e)
    • cli: reuse password from authorize request when vault is locked (f949260)
    • cli: use stopReason instead of hookSpecificOutput in stop hook (ccfaf55)
    • resolve CI build failures from missing libc dep and unused import (c74847b)
    • resolve clippy warnings across all crates (8c63f5b)

    Security

    • common: hardcode security parameters and zeroize all credentials (a96da70)
    • comprehensive audit fixes across all crates (2f0304e)

    Other Changes

    • apply cargo fmt formatting across all crates (437bb57)
    • rename project from BitSafe to Grimoire (be6fab1)
    Downloads