Skip to content

v0.1.3

Choose a tag to compare

View all tags
@nikicat nikicat released this 11 May 11:33
v0.1.3
c6ca976
This commit was signed with the committer’s verified signature.
nikicat Nik B
GPG key ID: 846FFFEFC1039264
Verified
Learn about vigilant mode.

Changes since v0.1.2

  • fix: honor ephemeral auto-approve rules for gpg_sign requests. HandleGPGSignRequest only consulted permanent TrustedSigners before falling through to a desktop notification, so "approve and auto-approve" added a rule that never matched subsequent gpg_sign calls. Bursts of signing (e.g. kubelogin rotating its token cache) silently failed any time the user missed a notification within the 5-minute timeout. Manager now exposes CheckAutoApproveRules, and the handler consults it before opening a notification.
  • fix: strip " (deleted)" suffix from /proc/PID/exe so trust rules match after package upgrades. Linux appends the suffix to the readlink target when the on-disk binary has been replaced while the process is still running, which silently broke exe-based trust rules for long-running daemons (e.g. EDS) after system updates.
  • feat: propagate caller context to all upstream D-Bus calls for slow-upstream notifications, so prompts on slow keyring/gpg unlocks identify the triggering client.
Assets 4
Loading