nodePass 0.1.0

Added

• First stable nodePass release, promoting the initial release candidate with the changes below.
• Hourly server-side release checks, cumulative security-fix metadata, administrator update notices and deduplicated SMTP notifications.
• Application-administrator version overview with manifest-verified release history and safe Markdown display.
• User-management sign-in controls and validation feedback, plus success notifications after saving changes across account and administration views.

Compatibility and upgrade notes

• Node.js 24; MariaDB 10.11, 11.4 and 11.8; MySQL 8.4. Published application images target Linux amd64.
• sysPass compatibility targets 3.2.11, schema 310.19042701. Preserve the original configuration, master password and pre-migration backup, and stop sysPass writers before takeover.
• Migration changes stored data and encryption state. Returning to sysPass requires restoring the original backup into a separate database; replacing the application image does not undo migration.
• Existing nodePass installations must preserve their deployment key, secrets and volumes. Back up the database and required historical keys and rehearse authenticated restore before updating to the release's verified image digest.
• One application process per installation is supported. Validate the actual dataset, proxy and integration settings before production use. No independent external security audit is claimed.
• This release records no publicly disclosed security corrections in release-security.json; this is not a security certification.

Verified artifacts

• Source commit: d304a94efe77d780c8278a72beeb7a1508fcfb31
• Container: ghcr.io/sapientorius/nodepass@sha256:b14c608e4f243672a90f630190f312939b74be2599313577361a4b19d592b693
• Platform: Linux amd64
• Complete verification run

Verify SHA256SUMS and the release attestations before installation. The deployment bundle contains Compose files pinned to this image digest.