mirror of
https://github.com/sobolevn/git-secret
synced 2024-10-31 21:20:29 +00:00
13 KiB
13 KiB
Changelog
{{Next Version}}
Misc
- Temporarily disable apk builds on alpine (#881, #878)
- NOTE: Arch and Alpine instructions now say to install from source. Arch tests removed temporarily (#878, #916)
- NOTE: There is an issue when repo directory (or a parent dir) contains a space (#135)
- Improve error messaging when we cannot find git repo (#874)
- Have
hide -v
show output from gnupg - Documentation updates and fixes
0.5.0
Features
- Adds
SECRETS_GPG_ARMOR
env variable to usegpg --armor
when encrypting files, so secret files are stored in text format rather than binary (#631) - Allow gnupg permission warnings in
tell
,hide
,reveal
, andremoveperson
(#811) git secret init
now sets.gitsecret/keys
permission to 0700 (#811)- Improve verbose and non-verbose output
Bugfixes
- Fix adding newlines to
.gitignore
entries (#643) - Fix
cat
andreveal
on named files while in repo subdir (#710) - Fix
clean
,hide
,reveal
so they only remove marked secret files (#833) - Fix for
removeperson
if same email is present multiple times (#638) - Correct error message about files missing from .gitignore
Misc
- Rename
killperson
command toremoveperson
(#684) - Improve error messaging decrypting nonexistent files (#706)
- Improve, expand, correct, and update docs (#699)
- Update docs for use with CI/CD server (#675)
- Upgrade bats-core to v1.6.0 (#755)
- Test, and build RPMS, with Rocky and Alma Linux instead of CentOS (#765)
- Automate testing code on windows using WSL (#846)
- Automate testing code on FreeBSD (#455)
- Improve testing of .gitignore contents (#792)
- Automate running verbose tests with SECRETS_TEST_VERBOSE=1 (#794)
- Improve documentation about installing on Windows (#843)
0.4.0
Bugfixes
- Escape filenames with special characters before adding to
.gitignore
- Better error handling around telling an email twice (#634)
- Fix for
-P
(#647)
Misc
- Removed
test-kitchen
- Moved from
travis
to GitHub Actions - Changed almost all infrastructure code
- Moved away from Bintray to Artifactory
- Changes how GitHub Pages work
- Add security disclaimer for git-secret-killperson
- Improve documentation about releases
- Man page improvements
Version 0.3.3
Bugfixes
- In 'tell', warn about disabled, revoked, expired, or invalid keys (#552, #508, #317, #290, #283, #238)
- Error if 'tell' is used on an email address with multiple keys (#552)
- Don't let 'reveal' clobber secret files (#579)
- Updated test key fixture that had expired (#607)
Misc
- Improve docs about using gpg with git-secret (#577)
- Text improvements and More about security in git-secret.7 man page (#603)
- Reflect changes in ruby bundler during build process
- Upgrade build process to ansible 2.9
- Use shellcheck 0.7.1 with CI, not 'latest' (#609)
- Improve output of
git-secret add
Version 0.3.2
Bugfixes
- Fix mention of version in git-secret add man page (#544)
Misc
- Update developer docs, especially regarding mac, docker, and test-kitchen (#195)
- Update man pages to mention version documented (#420)
Version 0.3.1
Misc
- Update man pages
Version 0.3.0
Features
- Support SECRETS_PINENTRY env var for gnupg --pinentry-mode parameter (#221)
- Show output from gnupg if 'hide' fails (#516, #202, #317)
- Add support for Busybox (#478)
Bugfixes
- Use OSX's mktemp on OSX, even if there's another version in PATH. (#485)
- Make rsync a build requirement on debian (#500)
- Use gnupg1, not gnupg2, when tests specify gnupg1 (#241)
- Note dependencies gawk, bash, and coreutils in linux packages (#493)
- Handle case of key having no email and a comment (#527)
- Avoid blank lines from output of 'clean -v'
Misc
- Improve messaging and logic around deleting tmp files.
- Add note about secrets and old keys (#499)
- Transition build process from python 2 to python 3 (#487)
- Upgrade build process from ansible 2.5 to ansible 2.8
- Fix build process when installing gnupg2 source deps on Ubuntu
- Close file descriptor 3 when running gnupg subprocesses (#521)
- Small optimization in 'hide'
- Improve code comments
- Update docs to note that git-secret repos modified by git-secret 0.2.3 and later are not backward compatible with pre-0.2.3 versions of git-secret. (#536)
Version 0.2.6
Features
- git-secret is now available in Fedora, link added to README.md. (#315)
- Support automated testing on windows with Travis CI (#372)
- Support SECRETS_VERBOSE env var to enable verbosity (#323)
- Use gpg without --quiet when decrypting in verbose mode (#394)
- Add -v options to 'tell' and 'reveal', showing gpg output (#320, #395)
- Change 'init' to never ignore .secret files (#362)
- 'add' appends filepaths to .gitignore by default (#225)
- Automate the GitHub release (#411)
Bugfixes
- Fix 'hide -m' when used as first hide operation (#466)
- Fix code to respect $TMPDIR when generating tmp files (#451)
- Be more careful when deleting test files (#360)
- Use separate directory when testing, instead of using $BATS_TMPDIR directly (#407)
- Fix 'whoknows -l' and related tests on FreeBSD (#454)
- Fix git-secret init when used on busybox (#475)
- Update git-secret.io, fix utils/gh-branch.sh to use 'git all --add' (#344)
- Fix link to homebrew's git-secret in README.md (#310)
- Remove diagnostic output from test results (#324)
- Remove un-needed redirection in 'reveal' (#325)
- Fix link to current contributors in CONTRIBUTING.md (#331)
- Fix tests when running from git hooks (#334)
- Fix typo, remove temp directory in utils/tests.sh (#347)
- Spelling fixes
- Fix re: SECRETS_DIR in 'init' and SECRETS_EXTENSION in test_reveal.bats (#364)
- git-secret will fail if you pass params or filenames that are not understood (#390)
- Use SECRETS_GPG_COMMAND env var in gpg version check (#389)
- Add header to git-secret.7 man page, for debian and doc improvement (#386)
- Respect DESTDIR when installing as per GNU/debian/etc recommendations (#424)
- Use git check-ignore to test for files ignored by git
Misc
- Improve docs about hide -m option (#467)
- Document SECRETS_VERBOSE and improve env var docs (#396)
- Setting SECRETS_TEST_VERBOSE env var shows debug info during tests (EXPERIMENTAL)
- Add documentation about how to write tests.
- Suppress 'cleaning up temp files' messages unless in a verbose mode.
- Improve git-secret user messaging.
- Update CHANGELOG.md to mention fix for #281 in v0.2.5 (#311)
- Add text explaining git-secret Style Guide and Development Philosophy
- Use Shellcheck on tests/ files, changes for Shellcheck in tests/ (#368)
- Use Shellcheck on MacOS/osx travis tests (#403)
- Show commands run by Makefile as per debian upstream recommendations (#386)
- Upgrade bats-core to v1.1.0, import bats-core into vendor/bats-core (#377)
- Use gawk to parse emails from gpg output
- Optimize code that parses keyrings
- Remove unused code
Version 0.2.5
Features
- Add support for FreeBSD (#244)
- Add -l option to whoknows, which shows key expiration dates (#283)
- Add -P option (preserve permissions) to reveal and hide (#172)
- Add -F option (force, changing some errors to warnings) to hide and reveal (#253)
- Allow user to specify name of secret dir at runtime using SECRETS_DIR env var, and test (#247, #250)
Bugfixes
- Fix issues with spaces in paths and filenames (#226, #135)
- Fix issue when 'hide' used in subdir of repo (#230)
- Fix issues in 'changes' with trailing newlines (#291)
- Fix 'hide' to only count actually hidden files as hidden (#280)
- Fixed bugs and improved error messages (#174)
- Issue error message when unable to hide a secret (#202, #238)
- Accept gpg key with no name, only an email (#227)
- Require keys to be specified by email, as documented (#267)
- Disallow 'git secret tell' or 'killperson' with emails that are not in keyring (also #267)
Misc
- Added notes about packages and for package maintainers (#281)
- Improve documentation regarding operation with different versions of GPG (#274, #182)
- Documentation improvements, error message and text improvements, and typo fixes (#254)
- git-secret RFC#001 added, documenting a path towards independence from gpg binary formats (#208)
- Add tests for expired gpg keys, and gpg keys with only emails (#276)
Version 0.2.4
Features
- Added
git secret cat
feature (#141)
Bugfixes
git secret hide
andgit secret changes
check for files more carefully (#153, #154)
Misc
- Documentation and error message improvements (#126, #136, #144, #150)
- Build and CI fixes (#152, #179, #186, #188, #189)
- Migrate to
bats-core
bash testing framework
Version 0.2.3
Features
- Added
-m
option tohide
command, files will only be hidden when modifications are detected (#92) - Changed how path mappings file works: colon delimited FSDB in `.gitsecret/paths/mapping.cfg', so git-secret can store checksums of hidden files. Note this means git-secret repos modified by git-secret 0.2.3 or later are not backward compatible with pre-0.2.3 versions of git-secret. (#92)
git secret init
now addsrandom_seed
to.gitignore
(#93)
Bugfixes
- Dropped
git check-ignore
, usinggit add --dry-run
instead to check for ignored files (#105,#38) - Fixed
gnupg
>= 2.1 CI tests (#6)
Misc
- Now users can run local CI tests using test-kitchen (#6)
- Migrated travis ci tests to test-kitchen for Linux platforms.
- Added more
gpg
version to test matrix (#99) - Added CentOS to test matrix (#38,#91)
- All tested Linux platforms now use latest release of
shellcheck
- Added Alpine to test matrix, and apk is now built. (#75)
Version 0.2.2
Features
- Change how the
usage
command works (#48) - Now
git-secret
works from any place insidegit-tree
(#56) - Added
-d
option to thehide
command: it deletes unencrypted files (#62) - Added new command
changes
to see the diff between the secret files (#64) - Now it is possible to provide multiple emails to the
killperson
command (#73) - Now it is possible to provide multiple emails to the
tell
command (#72)
Bugfixes
- Fixed bug when
_user_required
was not working after re-importing keys (#74) - Refactored
hide
andclean
commands to be shorter
Misc
- Now every doc in this project refer to
git-secret.io
instead of oldgh-pages
website (#71) - Now installation section is removed from main
man
file (#70) - Now "See also" sections in the
man
pages are clickable (#69) - Added "Manual" section to the manuals (#61)
- Added
CentOS
container forci
testing (#38) - Tests are refactored. Added
clean
command tests, removed a lot of hard-coded things, moved tests execution from./temp
folder to/tmp
, added a lot of new check in old tests, and some new test cases (#52) shellcheck
is now supported withmake lint
Version 0.2.1
Misc
- Added
CONTRIBUTING.md
andLICENSE.md
. - New brand logo in the
README.md
. - Added autodeploy to
bintray
in.travis.yml
. - Now everything is tested inside the
docker
-containers andOSX
(MacOS) images ontravis
. - Added
.ci/
folder for continuous integration, refactoredutils/
folder. - Everything is
shellcheck
ed (excepttests/
).
Version 0.2.0
Features
- Added
changes
command to see the difference between current version of the hidden files and the committed one - Added
-f
option to thereveal
command to remove prompts
Bugfixes
- Some bugs are fixed
Misc
- New installation instructions
- Changed the way files were decrypted, now it is a separate function
Version 0.1.2
Features
- Added
-i
option to thegit-secret-add
command, which auto adds unignored files to the.gitignore
Misc
.github
templates added- Documentation improved with
Configuration
section Makefile
improvements with.PHONY
andinstall
target- Added extra tests: for custom filenames and new features
Version 0.1.1
Features
- Added
--dry-run
option to thegit secret
command, which prevents any actions.
Misc
- Removed animation from docs, now using
asciinema.org
install_full_fixture()
returns a fingerprintuninstall_full_fixture()
receives two args- Fixed bug when tests were failing with
gpg2
- New travis strategy: testing both
gpg
andgpg2
Version 0.1.0
Features
- Implementation of git secret add
- Implementation of git secret clean, with -v option
- Implementation of git secret hide, with -c 'clean' and -v option
- Implementation of git secret init
- Implementation of git secret killperson
- Implementation of git secret list
- Implementation of git secret remove, with -c option
- Implementation of git secret reveal, with -d homedir and -p passphrase options
- Implementation of git secret tell, with -m email and -d homedir options
- Implementation of git secret usage