v0.12.2

Patch release fixing the audit-logging error that appeared on every re-save of an existing secret record.

Fixed

• "Audit logging failed: Unknown audit action "metadata_update"" on metadata-only saves (#227). Opening a secret record and saving it without re-entering the secret classified the save as a metadata_update audit action, which the audit log rejected as unknown — the editor saw the error on every such save, and the audit entry for the metadata change was silently never written. The action is now a valid audit action: metadata-only saves are sealed into the tamper-evident audit chain and appear as "Metadata Update" in the audit-module action filter. The path became reachable with the v0.12.1 fix that preserves an untouched secret on re-save. (#228)

Regression coverage was added at both levels: a functional test asserting the clean save plus the sealed audit entry, and a Playwright E2E test replaying the backend flow from the report.

Thanks to @lradloff for reporting #227.

Installation

composer require netresearch/nr-vault

Publication status

• TER: extensions.typo3.org/extension/nr_vault — 0.12.2 verified
• Packagist: packagist.org/packages/netresearch/nr-vault — 0.12.2 verified
• Documentation: docs.typo3.org/p/netresearch/nr-vault/0.12/en-us/ — render verified

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-vault-0.12.2.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-vault-0.12.2.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.