Repository navigation
Releases: sercanatalik/galata-vault
Release list
0.4.0 - 2026-09-22
Release Notes
Changed
- Ten published crates became one.
galata-vaultis now the only crate on
crates.io;galata_vault::proto,::keys,::seal,::client,
::backend(wasgalata-vault-store),::server_core,::server,
::cliand::mcpare its modules, each behind the feature that needs it.
Code that depended ongalata-vaultand used its re-exports is unaffected.
Code that depended on one of the nine directly moves to the matching
module:galata_vault_proto::api::Scopebecomes
galata_vault::proto::api::Scope, and so on. The nine names stay on
crates.io at 0.2.0 and are not updated again. - The separation the crates enforced is now enforced by features, and
checked.serverdoes not enablesdk, so a server build compiles no
value- or name-crypto code and links none of those crates; the SDK's
default build links no database, HTTP server or async runtime. The four
linkage guards are replaced by one,scripts/check-linkage.sh, which
reads the dependency graph per feature set and reads the source for a
serving module that namescrate::keys,crate::sealorcrate::client
-- the half the compiler used to do for free. - The binaries moved to unpublished crates (
crates/gv,
crates/gv-server,crates/gv-mcp), thin wrappers that exist so each
keeps its own release target list.gvis therefore no longer installable
withcargo install galata-vault-cli: use the installer from a release,
the Python package, orcargo install --git. - Match arms that existed only because an enum was
#[non_exhaustive]in
another crate are gone; inside one crate the compiler proves them
unreachable, and a new variant now fails the build at each site instead of
falling into a fallback.
gv 0.4.0
Install gv 0.4.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sercanatalik/galata-vault/releases/download/v0.4.0/gv-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/sercanatalik/galata-vault/releases/download/v0.4.0/gv-installer.ps1 | iex"Download gv 0.4.0
| File | Platform | Checksum |
|---|---|---|
| gv-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| gv-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| gv-x86_64-pc-windows-msvc.zip | x64 Windows | checksum |
| gv-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| gv-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo sercanatalik/galata-vaultYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>gv-mcp 0.4.0
Install gv-mcp 0.4.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sercanatalik/galata-vault/releases/download/v0.4.0/gv-mcp-installer.sh | shDownload gv-mcp 0.4.0
| File | Platform | Checksum |
|---|---|---|
| gv-mcp-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| gv-mcp-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| gv-mcp-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| gv-mcp-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo sercanatalik/galata-vaultYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>gv-server 0.4.0
Install gv-server 0.4.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sercanatalik/galata-vault/releases/download/v0.4.0/gv-server-installer.sh | shDownload gv-server 0.4.0
| File | Platform | Checksum |
|---|---|---|
| gv-server-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| gv-server-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| gv-server-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| gv-server-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo sercanatalik/galata-vaultYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>0.3.0 - 2026-09-21
Release Notes
Changed
- A release is now a tag, and nothing else.
scripts/release.sh <version>
sets the version everywhere it is written down, dates the changelog entry,
runs the gate, commits and tags; pushing that tag publishes the crates
(.github/workflows/crates.yml, onecargo publish --workspace), the
wheels and the binaries, in parallel, with nothing left to approve. Both
uploads authenticate as their workflow through OIDC, so no publishing token
is stored. release-plz and its release pull request are gone, along with
the by-hand dependency order the ten crates used to be published in --
cargo works that out itself.RELEASING.mdis the whole
procedure.
Added
scripts/check-version.sh, which fails the build when the workspace
version, the versions its path dependencies carry and the newest changelog
entry disagree -- or, in a release workflow, when they disagree with the
tag that started it. The tree is no longer bumped ahead of a release: it
carries the released version, and notes wait under## [Unreleased].scripts/trusted-publishers.sh, which registers this repository as the
trusted publisher of every published crate on crates.io in one pass,
reading the crate list from the workspace.
galata-vault-cli 0.3.0
Install galata-vault-cli 0.3.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sercanatalik/galata-vault/releases/download/v0.3.0/galata-vault-cli-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/sercanatalik/galata-vault/releases/download/v0.3.0/galata-vault-cli-installer.ps1 | iex"Download galata-vault-cli 0.3.0
| File | Platform | Checksum |
|---|---|---|
| galata-vault-cli-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| galata-vault-cli-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| galata-vault-cli-x86_64-pc-windows-msvc.zip | x64 Windows | checksum |
| galata-vault-cli-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| galata-vault-cli-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo sercanatalik/galata-vaultYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>galata-vault-mcp 0.3.0
Install galata-vault-mcp 0.3.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sercanatalik/galata-vault/releases/download/v0.3.0/galata-vault-mcp-installer.sh | shDownload galata-vault-mcp 0.3.0
| File | Platform | Checksum |
|---|---|---|
| galata-vault-mcp-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| galata-vault-mcp-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| galata-vault-mcp-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| galata-vault-mcp-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo sercanatalik/galata-vaultYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>galata-vault-server 0.3.0
Install galata-vault-server 0.3.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sercanatalik/galata-vault/releases/download/v0.3.0/galata-vault-server-installer.sh | shDownload galata-vault-server 0.3.0
| File | Platform | Checksum |
|---|---|---|
| galata-vault-server-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| galata-vault-server-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| galata-vault-server-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| galata-vault-server-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo sercanatalik/galata-vaultYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>0.2.0 - 2026-09-21
Release Notes
The gv ui screenshots in the README and docs/local-ui.md, a logo, and
package badges. Version bumped as a minor release at the maintainer's
request: the changes below are additive, so a 0.1.x would also have been
accurate.
Added
- The audit chain records a token receiving the vault's token list, as
token_list(code 13). The owner's own status reads are not recorded --
an environment opens with one, and the chain would fill with them -- and a
lesser scope reading status is not an attempt to list, so it is not a
refusal either.
Changed
scripts/check-packaging.sh verifybuilds every published crate from its
own.crateagain. It was skipped for 0.1.0 because verification resolves
each crate's siblings from a registry, and they were not published yet.
It no longer passes--offline: a machine that has only built this
workspace has never downloaded these crates, because the workspace uses
path dependencies.
galata-vault-cli 0.2.0
Install galata-vault-cli 0.2.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sercanatalik/galata-vault/releases/download/v0.2.0/galata-vault-cli-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/sercanatalik/galata-vault/releases/download/v0.2.0/galata-vault-cli-installer.ps1 | iex"Download galata-vault-cli 0.2.0
| File | Platform | Checksum |
|---|---|---|
| galata-vault-cli-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| galata-vault-cli-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| galata-vault-cli-x86_64-pc-windows-msvc.zip | x64 Windows | checksum |
| galata-vault-cli-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| galata-vault-cli-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo sercanatalik/galata-vaultYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>galata-vault-mcp 0.2.0
Install galata-vault-mcp 0.2.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sercanatalik/galata-vault/releases/download/v0.2.0/galata-vault-mcp-installer.sh | shDownload galata-vault-mcp 0.2.0
| File | Platform | Checksum |
|---|---|---|
| galata-vault-mcp-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| galata-vault-mcp-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| galata-vault-mcp-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| galata-vault-mcp-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo sercanatalik/galata-vaultYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>galata-vault-server 0.2.0
Install galata-vault-server 0.2.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sercanatalik/galata-vault/releases/download/v0.2.0/galata-vault-server-installer.sh | shDownload galata-vault-server 0.2.0
| File | Platform | Checksum |
|---|---|---|
| galata-vault-server-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| galata-vault-server-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| galata-vault-server-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| galata-vault-server-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo sercanatalik/galata-vaultYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>v0.1.0
galata-vault-cli 0.1.0
Install galata-vault-cli 0.1.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sercanatalik/galata-vault/releases/download/v0.1.0/galata-vault-cli-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/sercanatalik/galata-vault/releases/download/v0.1.0/galata-vault-cli-installer.ps1 | iex"Download galata-vault-cli 0.1.0
| File | Platform | Checksum |
|---|---|---|
| galata-vault-cli-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| galata-vault-cli-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| galata-vault-cli-x86_64-pc-windows-msvc.zip | x64 Windows | checksum |
| galata-vault-cli-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| galata-vault-cli-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo sercanatalik/galata-vaultYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>galata-vault-mcp 0.1.0
Install galata-vault-mcp 0.1.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sercanatalik/galata-vault/releases/download/v0.1.0/galata-vault-mcp-installer.sh | shDownload galata-vault-mcp 0.1.0
| File | Platform | Checksum |
|---|---|---|
| galata-vault-mcp-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| galata-vault-mcp-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| galata-vault-mcp-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| galata-vault-mcp-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo sercanatalik/galata-vaultYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>galata-vault-server 0.1.0
Install galata-vault-server 0.1.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sercanatalik/galata-vault/releases/download/v0.1.0/galata-vault-server-installer.sh | shDownload galata-vault-server 0.1.0
| File | Platform | Checksum |
|---|---|---|
| galata-vault-server-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| galata-vault-server-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| galata-vault-server-aarch64-unknown-linux-gnu.tar.xz | ARM64 Linux | checksum |
| galata-vault-server-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo sercanatalik/galata-vaultYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>