Skip to content

v1.0.0

Choose a tag to compare

@github-actions github-actions released this 29 Jul 15:52

1.0.0 (2026-07-29)

  • feat!: encrypt by default, add migrate, and add the headless ladder as tests (2be02c8)

Bug Fixes

  • hand back the refresh lease when a read is not followed by a write (43d0f26)

Features

  • add a programmatic facade so a second front-end cannot drift (6cbbcf1)
  • add keyring import, CLI, and fix a self-deadlock in the refresh lease (451a6c3)
  • add locking, three-way merge, and the credential vault (0c73718)
  • add the KeyChain shim, CJS preload, and now-sdk wrapper (fd5bb22)
  • scaffold sn-credstore with file and systemd-creds backends (ba6c9bb)

BREAKING CHANGES

  • the default backend is now systemd-creds rather than an
    unencrypted file. Existing plaintext stores keep working via SN_CRED_STORE=file,
    or convert with sn-credstore migrate --to systemd-creds. Hosts without
    systemd (containers) must set SN_CRED_STORE=file explicitly — there is no silent
    downgrade to plaintext.

Co-Authored-By: Claude Opus 5 noreply@anthropic.com
Claude-Session: https://claude.ai/code/session_01MggifJUgccB2gu3NsPbtUV