v0.2.2

Highlights

• Sign tab: explicit CAdES / PAdES / XAdES radio selector. PAdES is enabled only for .pdf sources, XAdES only for .xml, CAdES is always available — so you can now sign a PDF as .p7m enveloping when you need to.
• Verify: reports every signer on multi-signed CAdES and XAdES, and transparently descends into nested re-enveloping (name-signed-signed.p7m) so each signature in the chain is checked and listed.
• New sigillum extract subcommand and "Extract content…" GUI button: recover the original document carried inside a .p7m, automatically peeling through nested CMS layers. Pass --shallow from the CLI to extract a single layer instead.
• Bash and zsh shell completion shipped with the .deb and .rpm; PyPI/source users source the scripts from completion/ manually (see README).

Fixes

• CAdES-signing a file already ending in .p7m no longer produces a double .p7m.p7m extension (suggested output becomes <stem>-signed.p7m).
• Passwordless PKCS#12 files are accepted on both Sign and Decrypt (only PKCS#11 tokens still require a PIN; symmetric decryption still requires the key).

Full Changelog: v0.2.1...v0.2.2

v0.2.1

• ci: add release workflow for .rpm, .deb and PyPI
• feat(gui): confirm before leaving Settings with unsaved changes
• feat(pkcs11): user-configurable driver search paths
• feat(gui): add keyboard shortcuts for quit and tab switching
• docs(readme): note OpenSC limitation on Italian CNS qualified certs

Full Changelog: v0.2.0...v0.2.1

v0.1.0

packaging: extend endesive workaround with certifi and fonttools

endesive's bundled PyPDF2_annotate / email / verify modules import
`certifi` and `fontTools` alongside `attr` without declaring them in
pyproject.toml. Extend the existing attrs workaround to pull both in
explicitly, in the Fedora specs and the Debian control files for
sigillum and python3-endesive.