Skip to content

PyQtPass v0.4.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Oct 05:23
v0.4.0
2af895b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The rest of the QtPass 2.0 feature set (field editing, store templates,
pwgen, GnuPG home, ssh agent, WSL), an installable package, sturdier release
builds and a redrawn icon.

Upgrade notes

  • Release files are named by version and platform, like
    PyQtPass-0.4.0-windows-x64.exe; check them against SHA256SUMS.
  • Running from a checkout is now python -m pyqtpass (or pip install .
    and pyqtpass); the old pyqtpass.py script is gone.

New features

  • Field names can be edited in the password dialog, and fields added and
    removed; template fields keep their fixed name.
  • Templates kept in the store, like QtPass: a .templates file in the store
    root defines named field lists, and a .default_template file in a folder
    (or a parent) picks the one its entries use. The password dialog can switch
    templates and keeps everything typed.
  • Passwords can be generated with pwgen, with the QtPass options (avoid
    capitals or numbers, symbols, easier to remember). The built-in generator
    is used when pwgen is missing or fails.
  • A GnuPG home other than the default one (System tab).
  • Git over ssh works without an ssh agent in the session: a configured
    socket, or the ssh socket of a running gpg-agent (on macOS also the launchd
    one), becomes SSH_AUTH_SOCK.
  • Windows: programs inside WSL, configured like wsl gpg2, run through
    wsl --exec with Windows paths translated.
  • pip install . installs a pyqtpass command; python -m pyqtpass works.
    A Linux .desktop file and an AppImage build are included.
  • The icon is redrawn as clean vector shapes (it was a traced bitmap of 270
    KB with visible seams); scripts/update_icons.py makes the PNG, ICO and
    ICNS files from it.

Release builds

  • File names carry the version and platform; every release has SHA256SUMS
    and a signed build provenance attestation.
  • The macOS app is a folder bundle, so it starts without unpacking itself
    first.
  • Every GitHub Action is pinned to a commit.

Downloads

Each file is listed in SHA256SUMS. A signed build provenance
attestation records the workflow run and commit that produced them:
gh attestation verify <file> --repo annejan/PyQtPass.

Assets 14
Loading