v1.2.1: age v1.2.1: security fix

Compare Source

This release fixes a security vulnerability that could allow an attacker to execute an arbitrary binary under certain conditions.

See GHSA-32gq-x56h-299c.

Plugin names may now only contain alphanumeric characters or the four special characters +-._.

Thanks to ⬡-49016 for reporting this issue.

v1.2.0: age v1.2.0

Compare Source

A small release to build the release binaries with a more recent Go toolchain, and to fix a couple CLI edge cases (#​491, #​555).

The Go module now exposes a plugin package that provides an age plugin client. That is, Recipient and Identity implementations that invoke a plugin binary, allowing the use of age plugins in Go programs.

Finally, Recipients can now return a set of "labels" by implementing RecipientWithLabels. This allows replicating the special behavior of the scrypt Recipient in third-party Recipients, or applying policy useful for authenticated or post-quantum Recipients.

// RecipientWithLabels can be optionally implemented by a Recipient, in which
// case Encrypt will use WrapWithLabels instead of Wrap.
//
// Encrypt will succeed only if the labels returned by all the recipients
// (assuming the empty set for those that don't implement RecipientWithLabels)
// are the same.
//
// This can be used to ensure a recipient is only used with other recipients
// with equivalent properties (for example by setting a "postquantum" label) or
// to ensure a recipient is always used alone (by returning a random label, for
// example to preserve its authentication properties).
type RecipientWithLabels interface {
	WrapWithLabels(fileKey []byte) (s []*Stanza, labels []string, err error)
}

v0.8.1

Compare Source

This release fixes a bug introduced in v0.8.0 breaking path resolution on Windows, along with some other small features and bugs.

New features:

• Added @genqlient(alias) directive to customize field names without requiring GraphQL aliases (fixes #​367)
• Added auto_camel_case config option to automatically convert snake_case to camelCase in both field names and type names

Bug fixes:

• fixed path resolution on Windows
• fixed documentation link in introduction.md
• upgraded version of alexflint/go-arg from 1.4.2 to 1.5.1
• fixed a typo in the struct + fragment error message

v0.8.0

Compare Source

This release adds support for genqlient subscriptions; see the documentation for more, and thanks to @​matthieu4294967296moineau for the original implementation and @​HaraldNordgren for additional testing and improvements.

Note that genqlient now requires Go 1.22.5 or higher, and is tested through Go 1.23.3.

Breaking changes:

• genqlient now forbids omitempty: false (including implicit behaviour) when using pointer on non-null input field.
• The error text for HTTP errors has changed slightly. If you were parsing it, switch to As-ing to graphql.HTTPError.

New features:

• genqlient now supports subscriptions; the websocket protocol is by default graphql-transport-ws but can be set to another value.
  See the documentation for more details on how to use subscriptions.
• genqlient now supports double-star globs for schema and query files; see genqlient.yaml docs for more.
• genqlient now generates slices containing all enum values for each enum type.
• genqlient now returns Is/As-able errors when the HTTP request returns a non-200 status.

Bug fixes:

• omitempty validation:
  • allow omitempty on non-nullable input field, if the field has a default
  • allow omitempty: false on an input field, even when it is non-nullable
• don't do omitempty and pointer input types validation when use_struct_reference is used, as the generated type is often not compatible with validation logic.
• the allow_broken_features option, which no longer did anything, has been removed

v1.3.0

Compare Source

What's Changed

• API v2: Tolerate invalid key signatures if one verifies in #​284
• Enforce acceptable hash functions in clearsign in #​281
• Allow to set a decompressed message size limit in #​285
• API v1: Only allow acceptable hashes when writing signatures in #​286

Full Changelog: ProtonMail/go-crypto@v1.2.0...v1.3.0

v1.2.0

Compare Source

What's Changed

• Update min go version to 1.22.0 by @​lubux in #​278
• Change the max AEAD chunk size to 4MiB from 64KiB by @​lubux in #​280

Full Changelog: ProtonMail/go-crypto@v1.1.6...v1.2.0

v1.1.6

Compare Source

What's Changed

• Fix PublicKey.KeyIdString to return a valid key id by @​lubux in #​269
• Allow Key Flags override @​davrux in #​272
• Only check that message signatures are newer than the key by @​twiss in #​275
• openpgp/clearsign: just use rand.Reader in tests by @​mdosch in #​276
• Make Issuer Key ID signature subpacket non-critical by @​caarlos0 in #​266
• v2 API: Improve error messages for encryption key selection by @​lubux in #​271

Full Changelog: ProtonMail/go-crypto@v1.1.5...v1.1.6

v1.1.5

Compare Source

What's Changed

• Check binding signature details against primary key by @​twiss in #​264

Full Changelog: ProtonMail/go-crypto@v1.1.4...v1.1.5

v1.1.4

Compare Source

What's Changed

• Emit armor headers in sorted order by @​andrewgdotcom in #​255
• Reduce memory usage when AEAD en/decrypting large messages by @​twiss in #​259
• Update artifact actions to v4 by @​twiss in #​260

Full Changelog: ProtonMail/go-crypto@v1.1.3...v1.1.4

v1.1.3

Compare Source

What's Changed

• Add argon2 test vector for 32-bit platforms by @​lubux in #​245
• Validate argon2 params on read by @​lubux in #​246
• Adapt aead preferences on key generation by @​lubux in #​248
• Improve AEAD handling by @​twiss in #​247
• Improve error message for decryption with a session key by @​lubux in #​237
• Flag to allow signing key decryption by @​lubux in #​251

Full Changelog: ProtonMail/go-crypto@v1.1.2...v1.1.3

v1.1.2

Compare Source

What's Changed

• Cleartext Framework: Exclude the line-ending separator when decoding plaintext by @​lubux in #​242

Full Changelog: ProtonMail/go-crypto@v1.1.1...v1.1.2

v1.1.1

Compare Source

What's Changed

• Fix clearsign.Encode backwards compatibility #​239 by @​mdosch in #​240

Full Changelog: ProtonMail/go-crypto@v1.1.0...v1.1.1

v1.1.0

Compare Source

What's Changed

This release adds full support for the new version of the OpenPGP standard, RFC 9580. In addition, the release introduces an improved non-backwards compatible v2 API. The API in the openpgp package remains fully backwards compatible while the new v2 API is located in a separate v2 package in openpgp.

For the full changes since v1.0.0, see the previous release notes. For the full changelog, see ProtonMail/go-crypto@v1.0.0...v1.1.0.

Changes since v1.1.0-beta.0:

• Replace expiring curve448 integration test vector by @​lubux
• Validate input key size in SEIPDv2 decryption by @​lubux

Changelog since v1.1.0-beta.0: ProtonMail/go-crypto@v1.1.0-beta.0...v1.1.0.

v2.9.0

Compare Source

What's Changed

Changed

• Update go-crypto fork to v1.3.0.
• Change min go version to 1.22.0.

Full Changelog: ProtonMail/gopenpgp@v2.8.3...v2.9.0

v2.8.3

Compare Source

What's Changed

Changed

• Update go-crypto fork to v1.1.6

Full Changelog: ProtonMail/gopenpgp@v2.8.2...v2.8.3

v2.8.2

Compare Source

What's Changed

Changed

• Update go-crypto fork to v1.1.4

Full Changelog: ProtonMail/gopenpgp@v2.8.1...v2.8.2

v2.8.1

Compare Source

What's Changed

Changed

• Update go-crypto fork to v1.1.3

Full Changelog: ProtonMail/gopenpgp@v2.8.0...v2.8.1

v2.8.0

Compare Source

What's Changed

Support for RFC 9580

Adds support for reading and writing messages with RFC 9580 by updating the underlying go-crypto fork library to the latest version. Note that GopenPGP v2 currently does not support:

• RFC 9580 intended recipients
• RFC 9580 key generation

For full RFC 9580 support, we recommend upgrading to GopenPGP v3.

Full Changelog: ProtonMail/gopenpgp@v2.7.5...v2.8.0

v1.2.1

Compare Source

v1.2.0

Compare Source

v1.6.0

Compare Source

Hey friends, here is the latest go-arg. What fun. I enjoy maintaining this library a lot. Lots of contributions from new contributors since last release -- check out new contributors section below. Very impressive work everyone.

I'm working on completions support for this library. It's going to be a separate library, in a separate repository, that will (if all goes according to plan) be a general-purpose cross-language cross-shell completion-support binary. I'll then add some options in this library to make use of that project, probably mostly in the form of documentation and examples rather than any significant changes to default behavior. If you'd like to give input on any of that, please reach out via email (see email address in my github profile).

As always, sorry for all the open issues and un-merged PRs!

What's Changed

• Use standard exit status code for usage errors by @​hhromic in #​256
• Fix usage when using custom version flag by @​hhromic in #​224
• Move program version from usage to help by @​hhromic in #​259
• Fix help text for positional args with default and env var by @​hhromic in #​262
• Allow passing the string "--" twice or more by @​alexflint in #​273
• Add support for setting a global env var prefix by @​hhromic in #​258
• Make field name output consistent when using placeholders by @​zanvd in #​276
• Fix Missing Global Options by @​Areson in #​278
• Improve handling of negative numbers by @​alexflint in #​285

New Contributors

• @​purpleidea made their first contribution in #​237
• @​testwill made their first contribution in #​233
• @​zanvd made their first contribution in #​276
• @​Areson made their first contribution in #​278

Full Changelog: alexflint/go-arg@v1.6.0...v1.5.2

v1.5.1

Compare Source

• Fixes a bug introduced in v1.5.0 where bad struct tags and other parser-level initialization problems would result in a crash rather than a clean exit in MustParse (thanks @​hhromic !)

v1.5.0: Version 1.5.0

Compare Source

• Argument structs can define Description() and Epilogue(), which are added to the usage string

• Subcommands can have multiple aliases like this:

var args struct {
    Remove *struct{} `arg:"subcommand:remove|rm|r" help:"remove something from somewhere"`
}

• Improves formatting of usage string when the placeholder tag is set to empty string

• Do not handle --version when the args struct lacks a Version() function

• Add StructSubcommands to Config struct

v1.4.3: Version 1.4.3

Compare Source

• Correctly brackets non-required positional arguments in usage strings
• Fixes help and usage strings for subcommands.
• Add native support for url.URL via go-scalar
• Add environment variables names to error messages when relevant

v1.2.0: Add support for hex, oct, and binary integer literals

Compare Source

Adds support for int literals described in https://go.dev/ref/spec#Integer_literals. This includes hex literals 0x123, oct literals 0o123, binary literals 0b101, and underscores in any integer literlal 123_456_789

v1.1.0: Add support for URLs

Compare Source

This release adds support for parsing URLs represented via the standard library type url.URL.

v1.39.2

Compare Source

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/aws-sdk-go-v2/service/accessanalyzer: v1.34.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/account: v1.21.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/acm: v1.30.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/acmpca: v1.37.6
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/amp: v1.30.2
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/amplify: v1.27.3
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/amplifybackend: v1.27.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/amplifyuibuilder: v1.23.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/apigateway: v1.27.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/apigatewaymanagementapi: v1.23.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/apigatewayv2: v1.24.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/appconfig: v1.35.3
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/appconfigdata: v1.18.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/appfabric: v1.11.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/appflow: v1.45.6
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/appintegrations: v1.30.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/applicationautoscaling: v1.33.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/applicationcostprofiler: v1.21.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/applicationdiscoveryservice: v1.28.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/applicationinsights: v1.29.3
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/applicationsignals: v1.6.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/appmesh: v1.29.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/apprunner: v1.32.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/appstream: v1.41.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/appsync: v1.39.2
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/apptest: v1.4.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/arczonalshift: v1.14.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/artifact: v1.6.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/athena: v1.48.3
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/auditmanager: v1.37.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/autoscaling: v1.48.0
  • Feature: Auto Scaling groups now support the ability to strictly balance instances across Availability Zones by configuring the AvailabilityZoneDistribution parameter. If balanced-only is configured for a group, launches will always be attempted in the under scaled Availability Zone even if it is unhealthy.
• github.com/aws/aws-sdk-go-v2/service/autoscalingplans: v1.24.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/b2bi: v1.0.0-preview.51
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/backup: v1.39.6
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/backupgateway: v1.20.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/batch: v1.47.2
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/bcmdataexports: v1.7.5
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/bedrock: v1.22.2
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/bedrockagent: v1.27.0
  • Feature: Add prompt support for chat template configuration and agent generative AI resource. Add support for configuring an optional guardrail in Prompt and Knowledge Base nodes in Prompt Flows. Add API to validate flow definition
  • Bug Fix: Adds case-insensitive handling of error message fields in service responses
• github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime: v1.23.3
  • Bug Fix: Adds case-insensitive handling of erro