0.7.0.alpha

oo7-daemon

Various fixes and improvements following oo7-daemon's inclusion in GNOME OS. Most notably, successfully migrated keyrings are no longer deleted. Instead, a <keyring-name>.stamp file is created to prevent re-migration, leaving the cleanup of old data to the user rather than risking loss of sensitive data.

oo7-pam

The PAM module no longer fork/exec's oo7-daemon directly. oo7-daemon is started as a systemd user service, and a dedicated oo7-daemon-login binary is fork/exec'd with a single responsibility: hand the login password to oo7-daemon once it is up and ready, reducing the risk of race conditions.

oo7-cli

The CLI received several new features:

• --json flag for JSON output
• migrate command to migrate v0 (gnome-keyring) or KWallet keyrings to the v1 format supported by oo7-daemon, allowing users to test migration before switching
• Built-in prompter for headless environments: when no keyring is unlocked, the CLI asks for the password directly on the terminal

kwallet-parser / kwallet-cli

Two new crates. kwallet-parser parses KWallet keyring files in both legacy (Blowfish-ECB + SHA1) and modern (Blowfish-CBC + PBKDF2-SHA512) formats, used by both oo7-cli and oo7-daemon for migration. kwallet-cli is a small debugging tool for reading KWallet files directly.

git-credential-oo7

A new binary crate for handling git credentials, a replacement for git-credential-libsecret.

oo7-macros

Addition of the dont_match_name attribute, mimicking libsecret's SECRET_SCHEMA_DONT_MATCH_NAME. See the library documentation for more details.

oo7

The client library now uses oo7-daemon to run its test suite, meaning tests no longer affect the currently running keyring and no longer require a running keyring implementation. The D-Bus code path is now almost fully covered.

Along with various little bug fixes here and there, translations updates and more!