v0.4.3

What's Changed

• docs: verify release images against the release-image.yml signer by @Yoshiofthewire in #47
• Polish KyRecovery interface while preserving controls and settings by @Yoshiofthewire in #50
• fix: secure compose defaults, stop printing credentials, report IdP errors; quick start by @Yoshiofthewire in #49
• docs: clarify standalone installation and test coverage by @Yoshiofthewire in #51
• Shorten README and organize documentation by topic by @Yoshiofthewire in #52
• feat: rotate the suite recovery key by @Yoshiofthewire in #53
• fix: launch-video bugs in restore plan, rotation refusal and dashboard copy by @Yoshiofthewire in #54
• Write the generated admin password to a file, not the log by @Yoshiofthewire in #55
• chore(ci): bump github/codeql-action/upload-sarif from 4.38.3 to 4.39.0 in the actions group by @dependabot[bot] in #56
• chore(release): 0.4.3 by @Yoshiofthewire in #57
• Release Dependabot changes daily as vX.Y.Z.N by @Yoshiofthewire in #58
• build: Go 1.27.3 for GO-2026-6809; pin base images by @Yoshiofthewire in #59

Full Changelog: v0.4.2...v0.4.3

v0.4.2

What's Changed

• refactor: give the module an importable path by @Yoshiofthewire in #2
• security(capsule): bind manifests and verify payloads by @Yoshiofthewire in #3
• kyrecovery as a blind store for kycap/3 capsules by @Yoshiofthewire in #4
• ci: Dependabot bumps ky-primitives in its own PR by @Yoshiofthewire in #5
• chore(deps): bump alpine from 3.21 to 3.24 by @dependabot[bot] in #8
• chore(deps): bump golang from 1.26.6-alpine to 1.27.1-alpine by @dependabot[bot] in #7
• chore(deps): bump modernc.org/sqlite from 1.56.0 to 1.57.0 in the go group by @dependabot[bot] in #6
• fix: self-heal ./data ownership on container start by @Yoshiofthewire in #9
• feat: SFTP and SMB replication targets by @Yoshiofthewire in #10
• fix: accept UNC and smb:// forms for the SMB endpoint by @Yoshiofthewire in #11
• design: vault-and-ledger pass on the dashboard by @Yoshiofthewire in #12
• design: danger borders use the same red as --bad by @Yoshiofthewire in #13
• dashboard: revoke a product's pairing by @Yoshiofthewire in #14
• Adopt shared offsite transports with legacy compatibility by @Yoshiofthewire in #15
• chore(deps): bump the go group with 3 updates by @dependabot[bot] in #17
• chore(deps): bump github.com/Busness-app/ky-primitives from 0.4.1 to 0.6.0 in the ky-primitives group across 1 directory by @dependabot[bot] in #16
• Tiered capsule retention policy and pairing clear by @Yoshiofthewire in #18
• ci: publish image to GHCR on green pushes to main by @Yoshiofthewire in #19
• ci: pin attestation identity to main; verified digest for restores by @Yoshiofthewire in #20
• docs: build-overlay snippet appends to the existing COMPOSE_FILE chain by @Yoshiofthewire in #21
• rename: move module and image namespace to Busnes-app by @Yoshiofthewire in #22
• chore(deps): bump golang.org/x/crypto from 0.56.0 to 0.57.0 in the go group by @dependabot[bot] in #23
• rename: review follow-ups (attestation identity, CI coordinate check, recorded history) by @Yoshiofthewire in #24
• chore(deps): bump modernc.org/sqlite from 1.58.0 to 1.59.0 in the go group by @dependabot[bot] in #26
• Adopt Busnes theme defaults and shared product icons by @Yoshiofthewire in #27
• Fix retention form spacing and neutralize routine badges by @Yoshiofthewire in #28
• use versioned ky-ui tokens in KyRecovery by @Yoshiofthewire in #29
• Adopt shared UI foundation and verify responsive KyRecovery by @Yoshiofthewire in #30
• Add shared health endpoint for kyPulse monitoring by @Yoshiofthewire in #31
• chore(deps): bump modernc.org/sqlite from 1.59.0 to 1.60.1 in the go group by @dependabot[bot] in #32
• chore: build with Go 1.26.9 for GO-2026-6617 by @Yoshiofthewire in #34
• ci: add OpenSSF Scorecard workflow by @Yoshiofthewire in #35
• ci: bump Node 22 to 26 by @Yoshiofthewire in #36
• chore: standard Go bump method by @Yoshiofthewire in #37
• Backup status, restic scanner and guided restore plan by @Yoshiofthewire in #33
• feat: apply-setup and signed directory for KyQuickStart installs (G3) by @Yoshiofthewire in #38
• fix(auth): fence every non-password session against managed activation by @Yoshiofthewire in #40
• ci: publish an attested :X.Y.Z image and move :stable on release by @Yoshiofthewire in #39
• feat: record the KyRecovery version and check it on release by @Yoshiofthewire in #41
• chore(deps): bump golang from 1.27.1-alpine to 1.27.2-alpine by @dependabot[bot] in #42
• chore(deps): bump golang.org/x/crypto from 0.57.0 to 0.58.0 in the go group by @dependabot[bot] in #43
• chore(ci): bump the actions group with 4 updates by @dependabot[bot] in #44
• release: v0.4.2 by @Yoshiofthewire in #45
• ci(release): check out the release tag, not a same-named branch by @Yoshiofthewire in #46

New Contributors

• @Yoshiofthewire made their first contribution in #2
• @dependabot[bot] made their first contribution in #8

Full Changelog: https://github.com/Busnes-app/KyRecovery-server/commits/v0.4.2