v1.4.0

Added

• CI runs the Python test suite against a real NetBox (PostgreSQL + Redis service containers, matrix of NetBox 4.5/4.6 × Python 3.12/3.14), plus makemigrations --check and manage.py check
• testing/configuration.py — a ready-made NetBox configuration for running the test suite, used by CI and usable locally
• README: a compatibility matrix (plugin ↔ NetBox ↔ Python), the runtime dependency list, a Support section (where to report bugs, how to report a vulnerability privately) and a plugin icon (docs/img/icon.svg, CC BY 4.0)
• README: a Screenshots section walking through the plugin — the Passwork tab, the secret picker asking for a login, the login and two-factor modals, and the secrets of a bound object

Changed

• Breaking: requires-python is now >=3.12, matching NetBox 4.5+, which does not run on Python 3.11

Fixed

• README: the minimum PostgreSQL version is 14, as required by NetBox 4.5 (13 was stated)
• Secrets tab: with no active Passwork session the header button now reads "Authenticate" and opens the login modal directly, instead of "Bind secret" leading into a picker that can only fail with 401; after a successful login (including TOTP) it switches back to "Bind secret"
• Picker: clicking a vault in the Bind Passwork secret modal now shows its contents in the right pane — subfolders (with drill-down) and passwords — instead of sending the folder ID to the text search and always showing "No secrets found" (new endpoint GET picker/folders/<vault_id>/items/, backed by Passwork's /api/v1/folders and /api/v1/items listing endpoints)