v0.2.1

0.2.1 (2026-10-26)

Bug Fixes

• dotenv: escape $ in double-quoted values (#25) (adb317d)

Documentation

• change the tagline to "from your vaults" (#23) (f49d4c5)
• make home page buttons readable and fill out its table of contents (#24) (bbc2dd5)
• shorten the tagline and note how to pronounce envhaul (#21) (1dcb46f)

v0.2.0

0.2.0 (2026-10-26)

Features

• add HashiCorp Vault/OpenBao, 1Password, Google Cloud Secret Manager and Azure Key Vault sources (#20) (5e9032c)

Documentation

• split the README install instructions by platform (#17) (b20c2d9)

v0.1.0

0.1.0 (2026-10-26)

Features

• initial envhaul release (ba1c39e)

Bug Fixes

• deps: bump golang.org/x/sys, pin docs dependencies by hash, attach provenance to releases (#5) (bb04cee)
• keep "@" in reference paths and keys when formatting canonically (cfd9064)

Documentation

• add a roadmap of planned sources (#7) (fcec763)
• document the main and release tag rulesets (#3) (2eaf48b)
• empty CHANGELOG.md so release-please writes it cleanly (#14) (43bd768)
• simplify the code of conduct (#4) (836c26d)

v0.1.0-rc.1

What's Changed

• docs: document the main and release tag rulesets by @davidtucker in #3
• docs: simplify the code of conduct by @davidtucker in #4
• fix(deps): bump golang.org/x/sys, pin docs dependencies by hash, attach provenance to releases by @davidtucker in #5
• ci: add a 7-day Dependabot age gate and configurable auto-merge by @davidtucker in #6
• docs: add a roadmap of planned sources by @davidtucker in #7
• ci: run release-please as a GitHub App and harden the release pipeline by @davidtucker in #8
• ci: start the integration emulator from test/integration/compose.yaml by @davidtucker in #10
• test(deps): Bump motoserver/moto from 5.2.3 to 5.2.4 in /test/integration by @dependabot[bot] in #1
• ci: upload coverage with OIDC, request releases from the Go proxy, drop Go Report Card by @davidtucker in #11

New Contributors

• @davidtucker made their first contribution in #3
• @dependabot[bot] made their first contribution in #1

Full Changelog: https://github.com/davidtucker/envhaul/commits/v0.1.0-rc.1

Verify this release

cosign verify-blob --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp '^https://github.com/davidtucker/envhaul/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com checksums.txt
sha256sum --ignore-missing -c checksums.txt
gh attestation verify envhaul_0.1.0-rc.1_linux_amd64.tar.gz --repo davidtucker/envhaul