v0.12.1

nr-vault 0.12.1

A patch release fixing a data-loss bug in vault secret fields.

Fixed

• Vault secrets are no longer wiped on an untouched save. Saving a record that holds a vault secret (for example a provider's API key) without re-entering it previously removed the secret from both the record and the vault — the stored secret is never rendered back into the edit form, so an untouched re-save submitted an empty value that the DataHandler hooks treated as "delete." Empty saves now keep the existing secret; deletion requires an explicit clear (which also repairs the previously no-op clear control). Applies to both regular TCA fields and FlexForm-embedded vault fields (#223, fixed in #225).

Thanks to @lradloff for reporting #223.

All changes since v0.12.0

• fix(hook): preserve vault secret on an untouched re-save (#223) (#225)
• Update traefik:v3.7 Docker digest to 652929a (#224)
• chore: release v0.12.1 (#226)

Installation

composer require netresearch/nr-vault

Publication status

• TER: extensions.typo3.org/extension/nr_vault — 0.12.1 verified
• Packagist: packagist.org/packages/netresearch/nr-vault — 0.12.1 verified
• Documentation: docs.typo3.org/p/netresearch/nr-vault/0.12/en-us/ — render verified

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-vault-0.12.1.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-vault-0.12.1.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.