git-secret/CHANGELOG.md

Changelog

{{Next Version}}

Features

• Adds SECRETS_GPG_ARMOR env variable to use gpg --armor when encrypting files, so secret files are stored in text format rather than binary (#631)

Bugfixes

• Fix adding newlines to .gitignore entries (#643)
• Fix cat and reveal on named files while in repo subdir (#710)
• Fix for removeperson if same email is present multiple times (#638)

Misc

• Rename killperson command to removeperson (#684)
• Moves file_has_line utility to tests and fixes how it is used
• Refactor docs: new pages, new content
• Upgrade bats-core to v1.5.0 (#755)
• Update docs for use with CI/CD server (#675)
• Test, and build RPMS, with Rocky and Alma Linux instead of CentOS (#765)

0.4.0

Bugfixes

• Escape filenames with special characters before adding to .gitignore
• Better error handling around telling an email twice (#634)
• Fix for -P (#647)

Misc

• Removed test-kitchen
• Moved from travis to GitHub Actions
• Changed almost all infrastructure code
• Moved away from Bintray to Artifactory
• Changes how GitHub Pages work
• Add security disclaimer for git-secret-killperson
• Improve documentation about releases
• Man page improvements

Version 0.3.3

Bugfixes

• In 'tell', warn about disabled, revoked, expired, or invalid keys (#552, #508, #317, #290, #283, #238)
• Error if 'tell' is used on an email address with multiple keys (#552)
• Don't let 'reveal' clobber secret files (#579)
• Updated test key fixture that had expired (#607)

Misc

• Improve docs about using gpg with git-secret (#577)
• Text improvements and More about security in git-secret.7 man page (#603)
• Reflect changes in ruby bundler during build process
• Upgrade build process to ansible 2.9
• Use shellcheck 0.7.1 with CI, not 'latest' (#609)
• Improve output of git-secret add

Version 0.3.2

Bugfixes

• Fix mention of version in git-secret add man page (#544)

Misc

• Update developer docs, especially regarding mac, docker, and test-kitchen (#195)
• Update man pages to mention version documented (#420)

Version 0.3.1

Misc

• Update man pages

Version 0.3.0

Features

• Support SECRETS_PINENTRY env var for gnupg --pinentry-mode parameter (#221)
• Show output from gnupg if 'hide' fails (#516, #202, #317)
• Add support for Busybox (#478)

Bugfixes

• Use OSX's mktemp on OSX, even if there's another version in PATH. (#485)
• Make rsync a build requirement on debian (#500)
• Use gnupg1, not gnupg2, when tests specify gnupg1 (#241)
• Note dependencies gawk, bash, and coreutils in linux packages (#493)
• Handle case of key having no email and a comment (#527)
• Avoid blank lines from output of 'clean -v'

Misc

• Improve messaging and logic around deleting tmp files.
• Add note about secrets and old keys (#499)
• Transition build process from python 2 to python 3 (#487)
• Upgrade build process from ansible 2.5 to ansible 2.8
• Fix build process when installing gnupg2 source deps on Ubuntu
• Close file descriptor 3 when running gnupg subprocesses (#521)
• Small optimization in 'hide'
• Improve code comments
• Update docs to note that git-secret repos modified by git-secret 0.2.3 and later are not backward compatible with pre-0.2.3 versions of git-secret. (#536)

Version 0.2.6

Features

• git-secret is now available in Fedora, link added to README.md. (#315)
• Support automated testing on windows with Travis CI (#372)
• Support SECRETS_VERBOSE env var to enable verbosity (#323)
• Use gpg without --quiet when decrypting in verbose mode (#394)
• Add -v options to 'tell' and 'reveal', showing gpg output (#320, #395)
• Change 'init' to never ignore .secret files (#362)
• 'add' appends filepaths to .gitignore by default (#225)
• Automate the GitHub release (#411)

Bugfixes

• Fix 'hide -m' when used as first hide operation (#466)
• Fix code to respect $TMPDIR when generating tmp files (#451)
• Be more careful when deleting test files (#360)
• Use separate directory when testing, instead of using $BATS_TMPDIR directly (#407)
• Fix 'whoknows -l' and related tests on FreeBSD (#454)
• Fix git-secret init when used on busybox (#475)
• Update git-secret.io, fix utils/gh-branch.sh to use 'git all --add' (#344)
• Fix link to homebrew's git-secret in README.md (#310)
• Remove diagnostic output from test results (#324)
• Remove un-needed redirection in 'reveal' (#325)
• Fix link to current contributors in CONTRIBUTING.md (#331)
• Fix tests when running from git hooks (#334)
• Fix typo, remove temp directory in utils/tests.sh (#347)
• Spelling fixes
• Fix re: SECRETS_DIR in 'init' and SECRETS_EXTENSION in test_reveal.bats (#364)
• git-secret will fail if you pass params or filenames that are not understood (#390)
• Use SECRETS_GPG_COMMAND env var in gpg version check (#389)
• Add header to git-secret.7 man page, for debian and doc improvement (#386)
• Respect DESTDIR when installing as per GNU/debian/etc recommendations (#424)
• Use git check-ignore to test for files ignored by git

Misc

• Improve docs about hide -m option (#467)
• Document SECRETS_VERBOSE and improve env var docs (#396)
• Setting SECRETS_TEST_VERBOSE env var shows debug info during tests (EXPERIMENTAL)
• Add documentation about how to write tests.
• Suppress 'cleaning up temp files' messages unless in a verbose mode.
• Improve git-secret user messaging.
• Update CHANGELOG.md to mention fix for #281 in v0.2.5 (#311)
• Add text explaining git-secret Style Guide and Development Philosophy
• Use Shellcheck on tests/ files, changes for Shellcheck in tests/ (#368)
• Use Shellcheck on MacOS/osx travis tests (#403)
• Show commands run by Makefile as per debian upstream recommendations (#386)
• Upgrade bats-core to v1.1.0, import bats-core into vendor/bats-core (#377)
• Use gawk to parse emails from gpg output
• Optimize code that parses keychains
• Remove unused code

Version 0.2.5

Features

• Add support for FreeBSD (#244)
• Add -l option to whoknows, which shows key expiration dates (#283)
• Add -P option (preserve permissions) to reveal and hide (#172)
• Add -F option (force, changing some errors to warnings) to hide and reveal (#253)
• Allow user to specify name of secret dir at runtime using SECRETS_DIR env var, and test (#247, #250)

Bugfixes

• Fix issues with spaces in paths and filenames (#226, #135)
• Fix issue when 'hide' used in subdir of repo (#230)
• Fix issues in 'changes' with trailing newlines (#291)
• Fix 'hide' to only count actually hidden files as hidden (#280)
• Fixed bugs and improved error messages (#174)
• Issue error message when unable to hide a secret (#202, #238)
• Accept gpg key with no name, only an email (#227)
• Require keys to be specified by email, as documented (#267)
• Disallow 'git secret tell' or 'killperson' with emails that are not in keychain (also #267)

Misc

• Added notes about packages and for package maintainers (#281)
• Improve documentation regarding operation with different versions of GPG (#274, #182)
• Documentation improvements, error message and text improvements, and typo fixes (#254)
• git-secret RFC#001 added, documenting a path towards independence from gpg binary formats (#208)
• Add tests for expired gpg keys, and gpg keys with only emails (#276)

Version 0.2.4

Features

• Added git secret cat feature (#141)

Bugfixes

• git secret hide and git secret changes check for files more carefully (#153, #154)

Misc

• Documentation and error message improvements (#126, #136, #144, #150)
• Build and CI fixes (#152, #179, #186, #188, #189)
• Migrate to bats-core bash testing framework

Version 0.2.3

Features

• Added -m option to hide command, files will only be hidden when modifications are detected (#92)
• Changed how path mappings file works: colon delimited FSDB in `.gitsecret/paths/mapping.cfg', so git-secret can store checksums of hidden files. Note this means git-secret repos modified by git-secret 0.2.3 or later are not backward compatible with pre-0.2.3 versions of git-secret. (#92)
• git secret init now adds random_seed to .gitignore (#93)

Bugfixes

• Dropped git check-ignore, using git add --dry-run instead to check for ignored files (#105,#38)
• Fixed gnupg >= 2.1 CI tests (#6)

Misc

• Now users can run local CI tests using test-kitchen (#6)
• Migrated travis ci tests to test-kitchen for Linux platforms.
• Added more gpg version to test matrix (#99)
• Added CentOS to test matrix (#38,#91)
• All tested Linux platforms now use latest release of shellcheck
• Added Alpine to test matrix, and apk is now built. (#75)

Version 0.2.2

Features

• Change how the usage command works (#48)
• Now git-secret works from any place inside git-tree (#56)
• Added -d option to the hide command: it deletes unencrypted files (#62)
• Added new command changes to see the diff between the secret files (#64)
• Now it is possible to provide multiple emails to the killperson command (#73)
• Now it is possible to provide multiple emails to the tell command (#72)

Bugfixes

• Fixed bug when _user_required was not working after re-importing keys (#74)
• Refactored hide and clean commands to be shorter

Misc

• Now every doc in this project refer to git-secret.io instead of old gh-pages website (#71)
• Now installation section is removed from main man file (#70)
• Now "See also" sections in the man pages are clickable (#69)
• Added "Manual" section to the manuals (#61)
• Added CentOS container for ci testing (#38)
• Tests are refactored. Added clean command tests, removed a lot of hard-coded things, moved tests execution from ./temp folder to /tmp, added a lot of new check in old tests, and some new test cases (#52)
• shellcheck is now supported with make lint

Version 0.2.1

Misc

• Added CONTRIBUTING.md and LICENSE.md.
• New brand logo in the README.md.
• Added autodeploy to bintray in .travis.yml.
• Now everything is tested inside the docker-containers and OSX (MacOS) images on travis.
• Added .ci/ folder for continuous integration, refactored utils/ folder.
• Everything is shellchecked (except tests/).

Version 0.2.0

Features

• Added changes command to see the difference between current version of the hidden files and the committed one
• Added -f option to the reveal command to remove prompts

Bugfixes

• Some bugs are fixed

Misc

• New installation instructions
• Changed the way files were decrypted, now it is a separate function

Version 0.1.2

Features

• Added -i option to the git-secret-add command, which auto adds unignored files to the .gitignore

Misc

• .github templates added
• Documentation improved with Configuration section
• Makefile improvements with .PHONY and install target
• Added extra tests: for custom filenames and new features

Version 0.1.1

Features

• Added --dry-run option to the git secret command, which prevents any actions.

Misc

• Removed animation from docs, now using asciinema.org
• install_full_fixture() returns a fingerprint
• uninstall_full_fixture() receives two args
• Fixed bug when tests were failing with gpg2
• New travis strategy: testing both gpg and gpg2

Version 0.1.0

Features

• Implementation of git secret add
• Implementation of git secret clean, with -v option
• Implementation of git secret hide, with -c 'clean' and -v option
• Implementation of git secret init
• Implementation of git secret killperson
• Implementation of git secret list
• Implementation of git secret remove, with -c option
• Implementation of git secret reveal, with -d homedir and -p passphrase options
• Implementation of git secret tell, with -m email and -d homedir options
• Implementation of git secret usage