0.7.1

Server

• Implement multi-step ChangePassword for locked collections (#661)
• Deduplicate collection aliases during initialization (#662)
• Emit Completed(dismissed) when a prompt action fails
• Pick the prompter for callers without a session (#647)
• Fix concurrent lookup during CreateItem(replace=true) (#652)
• Replace placeholder collection on PAM migration (#651)
• Treat empty secret as unencrypted keyring (#650)
• Use data_dir for v0 placeholder keyring path
• Propagate prompt action errors without re-wrapping

Client

• Match items without xdg:schema against Generic schema queries (#586)
• Derive xdg:schema from the item type when migrating v0 keyrings
• Replace schema-less items with Generic schema ones
• Fix encrypted session fallback (#643)
• Clean up temp file on failed keyring dump

CLI

• Accept binary secrets from stdin in store command (#658)

PAM

• Fall back to PAM_AUTHTOK in absence of a stashed password
• Spawn oo7-daemon-login using std::process

CI

• Unload bwrap AppArmor profile for privileged PAM tests