v0.4.2 - Security Hardening

Security Fixes

This release addresses findings from a security audit:

Severity	Issue	Fix
HIGH	SecurityType::None allowed insecure connections	Removed entirely - all connections now require TLS
MEDIUM	IMAP query injection via control characters	Now filters \r, \n, and \0 from queries
MEDIUM	Path traversal in attachments	Paths are canonicalized and verified as regular files
MEDIUM	Passwords stored in plaintext memory	Now uses SecretString with automatic zeroing on drop

New Features

• Multi-folder query support - Query across multiple IMAP folders in a single command

  # Using in:folder syntax
  protoncli query "from:alice in:Sent in:Archive"
  
  # Using --folder flags
  protoncli query "from:alice" -F Sent -F Archive

• Automatic deduplication by message ID when querying multiple folders
• Results sorted by date (newest first) across all folders

Changes

• Added secrecy crate for secure credential handling
• Added documentation for TLS certificate bypass rationale (localhost Bridge connections)
• Pre-commit hook for cargo fmt enforcement

Upgrade

brew upgrade protoncli

Full Changelog: v0.4.1...v0.4.2