Skip to content

nodePass 0.1.6

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Oct 15:44
Immutable release. Only release title and notes can be modified.
nodepass-v0.1.6
2e53f74
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • sysPass XML imports verify the original export's signed encrypted-node hash and accept separate export and original master passwords. The import form explains both passwords in all 14 supported languages.
  • Incorrect import passwords and damaged encrypted data return actionable validation errors instead of a generic server error. Correcting an error and retrying clears the previous message; successful previews clear uploaded XML and password fields.
  • Added interoperability regressions using original upstream sysPass XML fixtures, including preview, atomic import, rejected-input cleanup and one-time import challenges.

Compatibility and upgrade notes

  • Existing nodePass XML exports remain importable, including the earlier authenticated hash format. New exports use the original sysPass hash convention. Unencrypted sysPass XML still requires the original master password for encrypted account passwords.
  • No database schema change is introduced. Preserve existing secrets, persistent volumes and historical backup keys, and update using the release's verified image digest.
  • The cumulative security catalogue retains NP-2026-001 and NP-2026-002 from version 0.1.3; this release adds no new advisory identifiers.

Verified artifacts

  • Source commit: 2e53f74fd57cb7fa4c8ba0a16633f0fefd76fb8b
  • Container: ghcr.io/sapientorius/nodepass@sha256:93b932490011a3fa947661fed2c406931729b167ea324528a313b024c92f39ca
  • Platform: Linux amd64
  • Complete verification run

Verify SHA256SUMS and the release attestations before installation. The deployment bundle contains Compose files pinned to this image digest.

Assets 7
Loading