v2.72.0

Changelog

Features

• f81cb32 feat: Fix multiple security vulns thanks to secur0.com
• 1e51cc5 feat: Add shellQuote and shellQuoteList template funcs
• 4249f4f feat: Add gopassCat template function
• a7d91a5 feat: Add debugf template function

Fixes

• 0ad679a fix: Tighten permissions on temporary files
• 4031be1 fix: Ensure HTTP cache dir is private
• ba5a19a fix: Disallow relative paths with /.. suffix
• 1fe7627 fix: Disallow .. in ignore and remove patterns
• 3c9e70b fix: Disallow .. paths in mackup files
• 01b60dd fix: Disallow filenames that resolve to .
• 5cdaf4e fix: Improve handling of untrusted relative paths
• e8a57dc fix: Disallow .. paths in .chezmoiroot
• 76e2ddf fix: Reject negative format-indent-width template directives
• 840f682 fix: Ensure that secret keyring get command always writes a private file
• f7282b8 fix: Ensure that age-keygen always writes a private file
• e7cbe71 fix: Make persistent state directory private by default
• 0d6fc2b fix: Prevent directory escape in tar and rar archives
• 239cc6b fix: Disallow file and dir names that resolve to ..

Documentation

• a331111 docs: Use more robust quoting functions in examples
• 80441a5 docs: Add link to article
• 6cd634d docs: Add link to article