v0.7.0

What's Changed

• chore(deps): update dependency philhartung/bao-wrapper to v0.6.1 by @renovate[bot] in #46
• test(integration): cover namespace selection and fallback by @philhartung in #47
• fix!: preserve borrowed tokens by default by @philhartung in #48
• chore(deps): update node.js to 2255392 by @renovate[bot] in #50
• chore(deps): update dependency ubuntu to v26 by @renovate[bot] in #49
• chore(deps): update node.js to 64af381 by @renovate[bot] in #51
• chore(deps): update dependency golangci/golangci-lint to v2.14.0 by @renovate[bot] in #53
• chore(deps): update openbao to v2.7.0 by @philhartung in #54

Full Changelog: v0.6.1...v0.7.0

v0.6.1

What's Changed

• chore(deps): update dependency philhartung/bao-wrapper to v0.6.0 by @renovate[bot] in #45

Full Changelog: v0.6.0...v0.6.1

v0.6.0

What's Changed

• chore(deps): update dependency philhartung/bao-wrapper to v0.5.0 by @renovate[bot] in #42
• chore(deps): update node.js to 6dac556 by @renovate[bot] in #43
• ci: add govulncheck and attested release SBOMs by @philhartung in #44

Full Changelog: v0.5.0...v0.6.0

v0.5.0

What's Changed

• chore(tests): run native OpenBao integration tests across platforms by @philhartung in #30
• chore(deps): update module github.com/securego/gosec/v2 to v2.29.0 by @renovate[bot] in #37
• chore(deps): update dependency actions/checkout to v7 by @renovate[bot] in #39
• chore(deps): pin node.js to 8a34c4a by @renovate[bot] in #38
• chore(deps): pin dependencies by @renovate[bot] in #31
• chore(deps): update dependency golangci/golangci-lint to v2.13.2 by @renovate[bot] in #35
• chore(deps): update softprops/action-gh-release action to v3.0.3 - autoclosed by @renovate[bot] in #32
• chore(deps): update dependency macos to v26 by @renovate[bot] in #40
• chore(deps): update node.js to v24 - autoclosed by @renovate[bot] in #41
• chore(deps): update go module directive to v1.27.1 by @renovate[bot] in #36

New Contributors

• @renovate[bot] made their first contribution in #37

Full Changelog: v0.4.0...v0.5.0

v0.4.0

What's Changed

• feat(auth): support configurable authentication mounts by @philhartung in #25
• fix(security): bound Vault and OIDC response bodies by @philhartung in #26
• fix!: restrict file secrets to temporary files by @philhartung in #27
• fix(template): prevent secret disclosure in render errors by @philhartung in #28

Full Changelog: v0.3.0...v0.4.0

v0.3.0

What's Changed

• chore(deps): bump openbao/openbao from 2.6.1 to 2.6.2 by @dependabot[bot] in #21
• chore(deps): bump softprops/action-gh-release from 2.6.2 to 3.0.2 by @dependabot[bot] in #14
• chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #15
• fix(runner): return nonzero status on cleanup failure by @philhartung in #22
• fix(auth): harden GitHub OIDC HTTP requests by @philhartung in #23
• fix(runner): harden cross-platform outfile security by @philhartung in #24

Full Changelog: v0.2.1...v0.3.0

v0.2.1

What's Changed

• ci(integration): expand openbao feature coverage by @philhartung in #12
• fix: prevent retries for token-issuing login requests by @philhartung in #13
• chore(deps): bump openbao/openbao from 2.6.0 to 2.6.1 by @dependabot[bot] in #18
• fix(runner): revoke token immediately on signals by @philhartung in #19
• fix(parser): require explicit schemes for secret references by @philhartung in #20

New Contributors

• @dependabot[bot] made their first contribution in #18

Full Changelog: v0.2.0...v0.2.1

v0.2.0

What's Changed

• fix(security): prevent credential exfiltration via HTTP redirects by @philhartung in #6
• fix(security): securely write explicit outfile secrets by @philhartung in #7
• chore(ci): harden binary release supply chain by @philhartung in #8
• fix(security): block system endpoints for legacy secrets by @philhartung in #9
• fix(security): prevent case-insensitive env token leaks on windows by @philhartung in #10
• fix(masker): prevent partial leaks from overlapping secrets by @philhartung in #11

Full Changelog: v0.1.1...v0.2.0

v0.1.1

What's Changed

• feat: add integration test by @philhartung in #5

New Contributors

• @philhartung made their first contribution in #5

Full Changelog: v0.1.0...v0.1.1

v0.1.0

Full Changelog: https://github.com/philhartung/bao-wrapper/commits/v0.1.0