v0.2.1

Security: the never-commit guarantee (secrets, credentials, .storage/, addon runtime files) now holds for migrated repos too — not just ones the add-on bootstrapped. Patterns are enforced via .git/info/exclude on every run, and any secret a prior run already committed is untracked (removal flows out through the next backup PR). Previously a repo migrated in with its own .gitignore lacking these entries could leak an OAuth token (.google.token) or key.

v0.2.0

Guaranteed 100% restore via a two-pillar backup model.

• Docs: config repo (this add-on) + encrypted HA full backup (e.g. Google Drive Backup) = 100% restorable — neither alone is enough. Sharpened the what is backed up where table: names exactly what .storage/ holds (UI-added integrations, logins/tokens, registries, dashboards) and flags data outside /config (add-on data, /ssl) the add-on can't see.
• Security: seed .gitignore now excludes *.token / .google.token so OAuth tokens never leak into the repo.
• First bootstrap logs a disaster-recovery warning pointing users at full backups.

v0.1.1

Fix: keep the addon's own runtime files (.gitops_backup_status, gitops_backup.log) out of backups when migrating a repo that already has a .gitignore. They were previously swept into backup PRs and risked a status-file PR feedback loop. Now excluded via .git/info/exclude on every run, and untracked if a prior run committed them.