v0.3.12

Fixes contextual redaction grammars so key/value secrets consume ampersands, bracketed values stay idempotent, and URL query parameters keep their own boundary rules.

v0.3.11

Correctness patch for contextual redaction edge cases.

Fixed:

• Redacts full key-value secrets when the live value contains the active redaction label as a substring, for example password=real[REDACTED]still-secret.
• Preserves punctuation wrappers around bare CLI secret arguments, including ), ], }, ,, ;, and >.
• Makes the browser demo placeholder check exact instead of treating any bracketed value as already redacted.

Validated:

• python -m unittest discover -s tests -v
• python -m compileall -q src tests
• node --check docs/app.js
• python -m build --sdist --wheel
• python -m twine check dist/*

v0.3.10

Correctness release for contextual wrapper preservation and built-in idempotency.

Fixed:

• Preserves closing quotes and common wrappers around Bearer auth, URL query secrets, cookie values, and bare key-value secrets.
• Adds placeholder guards across contextual built-in rules so a second ShareClean pass produces zero repeat findings.
• Keeps support for both the default [REDACTED] label and custom labels such as <SECRET>.

Validated:

• python -m unittest discover -s tests -v
• python -m compileall -q src tests
• node --check docs/app.js
• python -m build --sdist --wheel
• python -m twine check dist/*

v0.3.9

Preserve wrapping quotes and punctuation around HTTP Basic auth redaction.

• Fixes the boundary bug where quoted curl headers lost their closing quote.
• Keeps Authorization: Basic ... redaction idempotent on a second pass.
• Adds regression coverage for quoted headers, uppercase BASIC, bare headers, and custom labels.

v0.3.8

Added HTTP Basic auth redaction for Authorization: Basic ... headers and kept it idempotent on repeated runs.

v0.3.7

Added generic URL userinfo redaction for scheme://user:password@host URLs and kept it idempotent on repeated runs.

v0.3.6

Made bare key/value redaction idempotent so already-redacted output such as password=[REDACTED] is not expanded on a second pass.

ShareClean 0.3.5

Added

• Explain-mode report payloads for built-in and custom regex findings.
• Custom regex metadata for category, severity, and description.

Verified

• python -m unittest discover -s tests -v
• python -m shareclean --version

ShareClean 0.3.4

Changed

• Improved large-log redaction performance by caching line offsets, building sanitized output in one pass, using faster overlap resolution, and skipping impossible detector regex scans with conservative literal prefilters.
• Bumped package, CLI, docs, and tests to version 0.3.4.

Validation

• py -3 -m unittest discover -s tests

ShareClean v0.3.3

Security

• Fixed a filesystem safety issue where equivalent output path spellings, such as input.txt and ./input.txt, could bypass the in-place overwrite guard and modify the input file.
• The output writer now checks canonical filesystem identity before opening the output file.

Validation

• python -m unittest discover
• Manual temp-file repro now exits with code 2 and leaves the input unchanged.
• Built shareclean-0.3.3 wheel and sdist in a fresh temp directory.
• python -m twine check passed for both distributions.
• python -m shareclean --version reports shareclean 0.3.3.