v0.4.1

Fixes

• hush import no longer changes values with $ in them. The old parser expanded $VAR from your shell, so abc$HOME came in as abc/home/you and pa$word as pa. Values now come in exactly as written, and import lists any keys containing $
• Import errors on a malformed line now give the line number only. The old error printed the whole line, value included

Hardening

• Vaults saved in a newer format are refused instead of being opened and downgraded on the next save
• New passphrase vaults need at least 12 characters. Existing vaults aren't affected
• hush scan uses the same parser as import, so its counts match
• Dropped the dotenvy dependency in favor of a small built-in parser

Upgrading

No migration needed. If you imported values containing $ with an older version, run hush import on the same file again to fix them.

Grab a static Linux binary (x86_64 or arm64) below, or cargo install hush-env. The command is still hush.