v2.0.0 - for the users (and their experience)
V2.0.0: Better user experience and documentation
Besides the many improvements, you will also find a complete book about
the capabilities so far!
We also sign our binaries from here on, and make them available via homebrew.
Improvements
vault listnow produces precise URLs.vault removecan remove resources from the vault.vault recipient addnow signs and re-exports added fingerprints to make
recipient verification part of adding them, and help build a Web of Trust.vault recipients removeremoves recipients and re-encrypts the vaults content.vault recipient addalso adds recipients which are only in your gpg keychain.
Previously it would always require an exported public key in the right spot.vault recipient add --verifiedallows to add any recipient by name, but requires
you to assure you are able to encrypt for that recipient.vault addnow creates sub-directories automatically.vault editnow tries to encrypt before launching the editor.vault add :somethingwith a tty as standard input will open an editor automatically.
Breaking Changes
The breaking change requiring a major version increment is changes to the sy-vault.yml file.
- The
atfield is now calledsecrets recipientsandgpg-keyspaths are no relative to thesy-vault.ymlfile, not relative to the
secretsdirectory.- The '--at/-a' flag of
sy vaultis now--secrets-dir-dir/-s recipients addwill now require fingerprints unless--verifiedis specified.
These improvements make handling paths consistent and less suprising.