Release v0.2.1

New feature: Signature algorithm selection for inspect command

- Added --sig-alg flag to force ECDSA or RSA certificate selection
- Useful for testing servers with dual-certificate configurations
- Works by controlling cipher suite advertisement in TLS ClientHello
- Compatible with TLS 1.2 and below

Example usage:
  cert inspect cloudflare.com --sig-alg ecdsa  # Forces ECDSA certificate
  cert inspect cloudflare.com --sig-alg rsa    # Forces RSA certificate

Release v0.2.0

Major refactoring release with improved security, reliability, and maintainability.

Key improvements:
- Secure 0600 permissions for generated private keys
- CA chain verification support
- Network timeouts for inspect command
- Centralized environment and JSON helpers
- Consistent error handling with RunE

Release v0.1.10 - Critical fix for cert update command

Release v0.1.9 - Added --connect flag for proxy/tunnel support

Release v0.1.8 - Critical macOS update fixes and improved UX

Release v0.1.7 - Fixed goreleaser v2 compatibility and build issues

Release v0.1.6

Major features:
- PKI functionality with CA, CSR, and certificate signing
- JSON output support for automation
- CI/CD and cross-platform compatibility improvements

See CHANGELOG.md for full details

Release v0.1.4

- 🔄 **Self-Update Command**: Run 'cert update' to automatically check for and install updates
- 📦 **Smart Upgrades**: Installer detects existing installations and upgrades in place
- 🔍 **Version Comparison**: Only upgrades when newer version is available
- 💾 **Automatic Backups**: Creates backup before upgrading

- Added 'cert update' command for self-updating
- Installer now detects existing installations automatically
- Added --force flag to force reinstall same version
- Improved upgrade experience with clear version messaging
- Automatic backup of existing binary before upgrade
- Fixed test suite to include update command
- Updated all documentation with update instructions

Fresh install:
```bash
curl -sSL https://raw.githubusercontent.com/trahma/certwiz/main/install.sh | bash
```

Update existing installation:
```bash
cert update
```

```bash
cert update

cert update --force

cert version
```

Release v0.1.2

- Fixed Windows CI test failures with proper path resolution
- Fixed installer script for curl piping compatibility
- Improved binary detection in installer for multiple naming conventions
- Fixed test command parsing issue on Windows
- Added runtime-based testdata path resolution for cross-platform tests
- Multiple CI/CD improvements and stability fixes

```bash
curl -sSL https://raw.githubusercontent.com/trahma/certwiz/main/install.sh | bash
```

- All CI tests now pass on Windows, macOS, and Linux
- Installer works seamlessly with curl piping
- Improved test stability across all platforms

Release v0.1.0 - Initial release of certwiz