v0.11.0

[0.11.0] - 2026-09-01

Added

• feat: enforce agent grant TTLs and add one-command renewal
• feat: discover vault keys across git worktrees of the same repo
• feat: allow setting an example when creating secrets
• feat: add a write API to the Node binding

Changed

• refactor: split the CLI and vault-core monoliths into cohesive modules

Documentation

• docs: drop the unenforced short-lived claim from agent copy
• docs: document the git worktree workflow
• docs: add a 0.x suitability matrix and release contract
• docs: document delegating-host MCP wiring and an agent allow/ask matrix
• docs: document the Node binding write API on the library bindings page
• docs: cover tier aliases and the self-scope policy opt-in for bindings

Fixed

• fix: wrap key error guidance into short hint lines
• fix: keep worktree paths in one coordinate system on windows

Other

• chore: pin ci build dependencies and refresh the fuzz lockfile
• build(deps): bump pyo3 from 0.29.1 to 0.29.2
• build(deps): bump clap from 4.6.5 to 4.6.6
• build(deps): bump rmcp from 3.1.1 to 3.1.2
• build(deps): bump clap_complete from 4.6.8 to 4.6.9
• build(deps): bump Swatinem/rust-cache from 2.9.1 to 2.9.2
• build(deps): bump ureq from 3.3.0 to 3.4.0
• build(deps): bump constant_time_eq from 0.4.2 to 0.5.0 in /fuzz
• build(deps): sync the root lockfile with constant_time_eq 0.5
• Revert "build(deps): sync the root lockfile with constant_time_eq 0.5"
• Revert "build(deps): bump constant_time_eq from 0.4.2 to 0.5.0 in /fuzz"
• build(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2
• build(deps): stop constant_time_eq bumps that outrun our msrv
• build(deps): bump blake3 from 1.8.5 to 1.8.6
• build(deps): bump clap_mangen from 0.3.1 to 0.3.2
• build: keep the fuzz lockfile in step with the workspace version
• ci: record the toolchain the msrv job actually runs
• ci: note why the msrv job records its toolchain
• build(deps): bump napi from 3.12.0 to 3.12.1
• build(deps): bump napi-derive from 3.6.2 to 3.6.3
• build(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.0
• chore: fix a lint from the new stable clippy
• build(deps): bump clap_mangen from 0.3.2 to 0.3.3
• build(deps): bump rmcp from 3.1.2 to 3.1.4
• build(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1
• build(deps): bump rmcp from 3.1.2 to 3.1.4 in /fuzz
• build(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0
• build(deps): bump the codeql-action group across 1 directory with 3 updates
• ci: fuzz pull requests and persist the fuzz corpus across runs
• build(deps): bump napi from 3.12.1 to 3.12.2
• build(deps): bump blake3 from 1.8.6 to 1.8.7 in /fuzz
• build(deps): bump the codeql-action group with 3 updates
• build(deps): bump blake3 from 1.8.6 to 1.8.7
• build(deps): bump actions/cache/restore from 4.3.0 to 6.1.0
• build(deps): bump actions/cache/save from 4.3.0 to 6.1.0
• chore: release 0.11.0