v0.4.1

Changelog v0.4.1

All notable changes to kprun are documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

[0.4.1] - 2026-07-09

Changed

• Core refactored to insulate kprun-core from keepass types via owned newtypes
  (VaultKey, EntryHandle), preventing API churn breakage on future keepass
  version bumps.
• Extracted shared keyring-attempt helper in unlock flow for DRY principle.

Fixed

• DatabaseSaveError matching now handles structured enum variants instead of
  string matching, preventing silent error classification on keepass rewording.
• VaultKey Debug trait redacted to prevent accidental plaintext password leaks
  in debug output (the wrapped keepass::DatabaseKey prints passwords as-is).

Security

• Redacted VaultKey Debug impl prevents leaking master password through stray
  {:?} formatting in logs or panic messages.

---

Full commit list

• refactor(core): insulate kprun-core from keepass types
• fix(core): match structured DatabaseSaveError variants instead of string
• refactor(core): extract shared keyring-attempt helper in unlock.rs
• fix(core): redact VaultKey Debug impl instead of deriving it