keyring 0.2.0

Install:

ghr install cataggar/keyring@v0.2.0

Highlights

• Azure Artifacts npm authentication (keyring devops-npm): Parse workspace .npmrc registries directly without failing on ${NPM_TOKEN} placeholders, validate existing ~/.npmrc tokens (--validate-only, -f/--force, -c/--config-file), acquire vso.packaging tokens once per organization via pipeline env vars, az CLI SSO, or the built-in ado backend, and update ~/.npmrc atomically with mode 0600 (#47).
• Zig 0.17.0 and keyring-zig 0.1.1: Upgrade both keyring and keyring-zig to Zig 0.17.0 (-Doptimize=safe), pulling in keyring-zig 0.1.1 with Python SecretService search compatibility and hand-rolled macOS Security / CoreFoundation extern declarations (#49).
• Verified Zig toolchain provenance: Install and verify signed cataggar/zig releases via ghr across CI, integration, and release workflows (#44).

keyring 0.1.0

Highlights

• Python keyring-compatible CLI with set, get, del, backend selection, stable exit codes, and built-in diagnostics.
• Native credential storage on Windows, macOS, and Linux, plus an AES-256-GCM encrypted file backend included by default.
• Azure DevOps feed authentication with OAuth2 + PKCE, secure refresh-token storage, legacy-cache migration, and Windows az login/MSAL SSO.
• Opt-in Linux Secret Service storage for ADO refresh tokens with fail-closed headless behavior and actionable diagnostics.
• Headless Linux guidance and automated coverage for missing D-Bus/Secret Service environments.
• Prebuilt binaries for x86_64 and ARM64 on Linux, macOS, and Windows; Linux binaries are fully static musl builds.

Install

ghr install cataggar/keyring@v0.1.0

keyring 0.1.0-dev.5

Install:

ghr install cataggar/keyring@v0.1.0-dev.5

Highlights

• Fully static Linux binaries: The x86_64 and aarch64 assets now use musl and require no system libc, libsecret, or GLib libraries.
• Static-linking enforcement: Release builds are rejected if an ELF interpreter or dynamic library dependency is detected.
• Broader Linux validation: CI builds and runs both static architectures, while the Linux integration suite exercises the musl binary against Secret Service and Python keyring.

keyring 0.1.0-dev.4

Install with ghr:

ghr install cataggar/keyring@v0.1.0-dev.4

Highlights

• Protected Azure DevOps credentials: Refresh tokens use Windows Credential Manager or macOS Keychain, with user-only files on Linux; session caches use current-user DPAPI on Windows and mode 0600 files on macOS/Linux.
• SSO with az login: The ado backend can redeem eligible Family Refresh Tokens from shared MSAL caches, avoiding a separate Azure DevOps browser prompt when an Azure CLI session is available.
• Reliable caching and interoperability: Fixes eliminate repeated browser authentication, concurrent cache corruption, and inconsistent reads of credentials written by Python Secret Service clients.
• Safe cache migration and diagnostics: Legacy JSON caches migrate automatically to refresh.dat and session.dat, and keyring diagnose reports cache locations and at-rest protection.

keyring 0.1.0-dev.3

Install with ghr:

ghr install cataggar/keyring@v0.1.0-dev.3

Highlights

• Accurate embedded version: Release builds derive their version from the Git tag, so keyring version reports 0.1.0-dev.3 instead of the previous hard-coded 0.0.0.

keyring 0.1.0-dev.2

Install with ghr:

ghr install cataggar/keyring@v0.1.0-dev.2

Highlights

• Azure DevOps feed authentication: The compiled-in ado backend uses browser OAuth2 + PKCE and returns VssSessionToken credentials for Azure Artifacts feeds.
• Automatic feed routing: Supported Azure DevOps URLs select the ado backend without an explicit override, enabling tools such as uv to authenticate through the keyring subprocess interface.
• Working interactive sign-in: Reliable browser launching and the registered http://localhost callback eliminate the process-allocation and redirect failures from the initial implementation.
• More actionable failures: Entry errors include the requested service and username, while the CLI follows Python keyring by exposing version information through keyring version.

keyring 0.1.0-dev.1

Install with ghr:

ghr install cataggar/keyring@v0.1.0-dev.1

Highlights

• Cross-platform native credential CLI: Store, retrieve, delete, list, and diagnose credentials through Linux Secret Service, macOS Keychain, Windows Credential Manager, encrypted file, and null backends.
• Python keyring interoperability: Compatible command shapes and native entry schemas let the Zig and Python CLIs share credentials, with cross-client integration coverage.
• Headless Linux support: Diagnostics explain unavailable Secret Service sessions and guide users toward oo7-daemon, GNOME Keyring, or the file backend.
• Six native release targets: Published binaries cover x64 and ARM64 on Linux, macOS, and Windows.