v0.7.1

🚀 Release v0.7.1

0.7.1 — 2026-08-11

🐛 Bug Fixes

• Update golang.org/x/crypto to v0.54.0

🧹 Miscellaneous

• Add demo functionality with recording script and assets

v0.7.0

🚀 Release v0.7.0

0.7.0 — 2026-07-22

🚀 Features

• Update Whoami output to include default name for add-member command
• Enhance terminal output with styled messages and add style package

🧹 Miscellaneous

• Bump softprops/action-gh-release from 3.0.1 to 3.0.2
• Bump actions/checkout from 7.0.0 to 7.0.1
• Bump actions/setup-go from 6.5.0 to 7.0.0

v0.6.1

🚀 Release v0.6.1

0.6.1 — 2026-07-08

🚀 Features

• Implement process hardening and in-memory secret zeroing

v0.6.0

🚀 Release v0.6.0

0.6.0 — 2026-07-08

📚 Documentation

• Add detailed security model documentation + updated README [skip ci]

🚀 Features

• Implement shenv edit command for secure secret management

🧪 Testing

• Enhance editor rejection test for Windows compatibility

🧹 Miscellaneous

• Bump golang.org/x/term from 0.44.0 to 0.45.0
• Add group for Go dependencies in Dependabot configuration

v0.5.0

🚀 Release v0.5.0

0.5.0 — 2026-07-03

🚀 Features

• Add shenv status command for repo state overview

v0.4.0

🚀 Release v0.4.0

0.4.0 — 2026-07-03

🔒 Security

• Harden updater download policy and release pipeline

🚀 Features

• Renamed push to seal for creating the env.shenv
• Renamed pull to open for extracing the env.shenv
• Implement self-update functionality for shenv with version check and notification
• Implement release signing for checksums to enhance security during updates
• Support multiple trusted release keys for safe key rotation
• Rotate key for signed release
• Enhance shenv init command to default to git/OS username and sanitize input
• Enhance name validation to reject invisible and format characters

🚜 Refactor

• Rename push/pull to seal/open, keep deprecated aliases

🧹 Miscellaneous

• Bump filippo.io/age from 1.2.1 to 1.3.1

v0.3.1

🚀 Release v0.3.1

0.3.1 — 2026-07-02

🚀 Features

• Ensure decrypted plaintext is ignored in git and improve signature verification checks
• Enhance security by rejecting symlinks and validating recipient names
• Enhance security by validating recipient keys and rejecting control characters in config
• Enhance validation to reject reserved paths and duplicate keys in config

v0.3.0

🚀 Release v0.3.0

0.3.0 — 2026-07-02

🚀 Features

• Implement sender authentication for env.shenv

🧹 Miscellaneous

• Correct indentation in changelog template for better readability

v0.2.0

🚀 Release v0.2.0

0.2.0 — 2026-07-02

🚀 Features

• Add key generation and member management commands with lockout protection
• BREAKING - rename env.age to env.shenv for consistency in encryption handling
• BREAKING - .shenv folder is gone. Root now has recipients.shenv and config.shenv

v0.1.0

🚀 Release v0.1.0

0.1.0 — 2026-07-01

🐛 Bug Fixes

• Tag current commit when VERSION is already at the target release

📚 Documentation

• Update README to include logo and improve layout

🚀 Features

• Add passphrase support for key encryption and management- Add 'shenv run' command to inject secrets as environment variables- Implement pluggable storage backends for encrypted blobs- Implement trust-on-first-use for exec backends and add recipient confirmation for pushes- Enhance security by validating blob paths and rejecting symlinks in file backend- Implement release workflow with versioning and changelog generation

🚜 Refactor

• Use Node release scripts instead of PowerShell

🧪 Testing

• Add comprehensive tests for command functionality and internal logic