2026.2.0

Important

This release introduces a new file format version 3. Version 3 uses Argon2 for root key derivation, Blake2 for subkey derivation and ChaCha12Poly1305 as cipher (see #126). Along with this a major rewrite of the library has been made beaking most current implementation.

What's Changed

• Bump version from 2025.12.0 to 2026.2.0 (#135) @emontnemery
• Remove dead branch for writing SecureTarFile to path (#133) @emontnemery
• Bump mypy from 1.19.0 to 1.19.1 (#134) @dependabot[bot]
• Lint with mypy (#128) @emontnemery
• Improve docstrings, sort imports (#132) @emontnemery
• Ignore mypy errors (#130) @emontnemery
• Fix tests (#131) @emontnemery
• Improve typing (#127) @emontnemery
• Add SecureTar version 3 (#126) @emontnemery
• Let dependabot update github actions (#124) @emontnemery
• Pin versions of github actions (#125) @emontnemery
• Don't allow creating inner tar if outer tar is not in PAX format (#123) @emontnemery
• Remove useless check in InnerSecureTarFile (#122) @emontnemery
• Improve test coverage (#121) @emontnemery
• Bump black from 25.12.0 to 26.1.0 (#120) @dependabot[bot]
• Minor improvements (#119) @emontnemery
• Add support for password validation (#118) @emontnemery
• Refactor and rename stream helpers (#117) @emontnemery
• Add support for passing SecureTarRootKeyContext to SecureTarArchive (#116) @emontnemery
• Add helper class SecureTarArchive (#115) @emontnemery
• Minor improvements (#114) @emontnemery
• Simplify _SecureTarCipher.close (#113) @emontnemery
• Bump black from 25.11.0 to 25.12.0 (#110) @dependabot[bot]
• Bump pytest from 9.0.1 to 9.0.2 (#111) @dependabot[bot]
• Break up SecureTar class (#112) @emontnemery
• Encapsulate details about handling of nonces (#107) @emontnemery