v0.6.9

• Add hex_api_release:publish/3

v0.6.8

• Fix tarball file extraction through symlinks

v0.6.7

• Fix compatibility with OTP 18 and 17

v0.6.6

• Do not crash on empty tarballs
• Fix directory traversal vulnerability for symlinks in tarballs

v0.6.5

• Transition away from http_uri when using newer OTP releases
• Ensure Role is given as an atom in hex_api_organization_member:add/3
• Add http_headers to the hex_core:config() type
• Add default http_headers to hex_core:default_config/0
• Fix hex_registry:decode_and_verify_signed/2 spec
• Fix hex_tarball:files/0 type

v0.6.3

• Add organization API
• Add level and transfer params to add owner API
• Add hex_tarball:unpack_docs/2
• Add hex_api_auth:test_key/3

v0.6.1

• Fix bug when publishing with configuration that does not have repo_organization key set

v0.5.1

Fix bug when publishing with configuration that does not have repo_organization key set

v0.6.0

• Backwards-incompatible: Change successful return value of hex_tarball:create/2 from
  {ok, {Tarball, Checksum}} to {ok, Map}. Currently, Map has tarball, inner_tarball,
  and outer_tarball keys
• Rename existing tarball checksum to inner checksum and deprecate it
• Add tarball outer checksum
• Do not allow comments in safe_erl_term
• Forward compatible tarball contents by not failing on unknown files

v0.5.0

• Fetch package data from proper repository organization and don't verify origin if configured
• Backwards-incompatible: Make hex_api module private
• Backwards-incompatible: organization config key has been replaced with api_organization
  and api_repository keys
• Add repo_organization config key
• vendor.sh: Add missing hex_pb_*.erl files
• vendor.sh: Fix replacing hex_core