envite v1.4.0

Added

• (env) .env.example mode in DeployConfig with migration
• (env) Render .env.example emptied per mode
• (env) Joint .env + .env.example deploy with form choice

envite v1.3.0

Added

• (update) Check for updates on every startup

Maintenance

• Quote the release-commit skip condition
• Audit dependencies weekly only, never on pushes

envite v1.2.0

Added

• (sync) Reconcile metadata union in both directions
• (sync) Wire participation checkbox into environment form

Maintenance

• Skip dependency audit on release commits

envite v1.1.0

Added

• (sync) Persist environment participation
• (sync) Reconcile participating environments
• (sync) Propagate metadata edits safely

Fixed

• (sync) Resolve reconciliation comments consistently
• (sync) Keep source comment when renaming synced section

envite v1.0.0

First public release.

Security

• Core dumps are disabled and new files are created owner-only at startup; envite warns when its configuration, logs or a local vault are readable by other users
• Updates are downloaded over HTTPS and verified against the release's SHA256SUMS.txt before the binary is replaced; the checksums come from the same release (there is no signature yet)
• Known limitation: SQLite pages held in memory cannot be guaranteed to be wiped

Added

• Encrypted vaults: one .envite file per vault — a compressed SQLite database encrypted with XChaCha20-Poly1305 behind an authenticated header, with Argon2id key derivation (Standard and High presets)
• Team members: every member opens the vault with their own password (per-member X25519 keys); add members, change your password or preset, and remove members with automatic key rotation
• Projects, environments, sections and variables: project details, per-environment deploy targets, section comments, secret masking with on-demand reveal, enabled / disabled / commented states and custom ordering
• Deploying .env files: a key-by-key diff with masked values, a warning when the target was changed outside envite, a backup of the previous file, and an atomic write with owner-only or group permissions — locally or over SSH
• Importing existing .env files, deciding per key whether to overwrite or skip
• Remote vaults over SSH, with connection reuse and terminal hand-over for interactive authentication; autosave, polling for changes saved elsewhere, and a three-way merge with a conflict resolution screen
• History of the last 10 changes of every item — who, when and which fields — filterable by member, item type and action, without ever showing a value
• Terminal interface: keyboard-driven screens with Ctrl-G help, auto-lock, a save-state indicator and NO_COLOR support
• Command line and updates: envite --version, envite --help and envite update; Check for updates in the home menu and an optional daily check at startup
• One-line installer for Linux x86_64 that verifies the SHA-256 of the download