v0.2.1

Fixed

• README: the development commands now invoke the opt-in SOPS suite as
  pnpm run test:sops, matching the surrounding command tables and CI.
  Documentation only; no runtime change.

Full changelog: v0.2.0...v0.2.1

v0.2.0

Added

• Configurable storagePasswordVar and accountApiKeyVar options for keeping
  credentials for production, staging, and other Angular configurations side
  by side while preserving the existing defaults.
• Optional secretsFile support for SOPS-encrypted dotenv files with age,
  usable directly through ng deploy and ng deploy --configuration=....

Security

• SOPS credentials are decrypted in memory from an external process and are
  never written to plaintext files or copied into process.env. Encrypted
  files, age identities, and private key material remain the operator's
  responsibility; builder diagnostics redact exact credential values.

Full changelog: v0.1.3...v0.2.0

v0.1.3

Changed

• Bump the dotenv runtime dependency from 16 to 17 and load it with quiet: true, so it no longer prints injected env ... into the builder output (dotenv 17 flipped that default to logging on load).

Security

• Override vite to ^8.0.16 to close GHSA-fx2h-pf6j-xcff (high) and GHSA-v6wh-96g9-6wx3 (moderate). vite only reaches this repo transitively through vitest's dev server, so runtime installs of the published package were never affected.

Full Changelog: v0.1.2...v0.1.3

v0.1.2

What's changed

• Credentials loader now falls back to .env when .env.local is absent. .env.local still takes precedence when both files exist.
• Error messages updated to mention both file options.

Full changelog: https://github.com/lostium/angular-deploy-bunny/blob/main/CHANGELOG.md

v0.1.1

Fixed

• Ship .env.local.example in the published package so the README's cp node_modules/angular-deploy-bunny/.env.local.example .env.local instruction works.

First release published via npm Trusted Publishing (OIDC) — no stored token, with provenance.