derivepassphrase.git

1) # Changelog for `derivepassphrase`
2) 
3) [![Keeping a changelog][CHANGELOG_BADGE]][KEEP_A_CHANGELOG]
4) [![Using Semantic Versioning][SEMVER_BADGE]][SEMANTIC_VERSIONING]
5) 
6)   [CHANGELOG_BADGE]: Keep_a_changelog-E05735.svg
7)   [SEMVER_BADGE]: SemVer-3F4551.svg
8)   [KEEP_A_CHANGELOG]: https://keepachangelog.com/en/1.1.0/ 'Keeping a changelog'
9)   [SEMANTIC_VERSIONING]: https://semver.org/ 'Using Semantic Versioning'
10) 
11) <aside markdown><small>
12) (All entries are from the perspective of a user, not a developer.
13) The <q>public API</q>, as defined by Semantic Versioning, is outlined in the
14) [Reference section][REFERENCE]: the set of documented modules, classes,
15) methods and functions, and the documented behavior, options and arguments of
16) the command-line tools.
17) As per the Semantic Versioning and the Keep a Changelog terminology,
18) <q>Fixed</q> entries justify a <q>patch</q> release,
19) <q>Added</q> and <q>Deprecated</q> entries a <q>minor</q> release,
20) and <q>Changed</q> and <q>Removed</q> entries a <q>major</q> release.
21) <q>Security</q> can justify any type of release;
22) if <q>major</q> or <q>minor</q>, these are accompanied by corresponding
23) entries of the respective types above.
24) Again as per Semantic Versioning, at major version zero, the above
25) justification is not yet binding, and <em>any</em> new release may
26) effectively constitute a new <q>major</q> release.)
27) </small></aside>
28) 

29)   [REFERENCE]: reference/index.md

30) 

31) <!-- scriv changelog start -->

32) 

33) ## 0.3.2 (2024-10-21)
34) 
35) ### Fixed
36) 
37)   - _*Actually* actually_ remove the `derivepassphrase_export` program, which was
38)     turned into a subcommand in v0.2.0 and supposed to have been removed in
39)     v0.3.1 already.  Removed on disk is not the same as removed in
40)     version control.
41) 

42) ## 0.3.1 (2024-10-21)
43) 
44) ### Fixed
45) 
46)   - Improve the [basic setup (passphrase)][TUTORIAL_BASIC_PASSPHRASE]
47)     tutorial.  Also incorporate feedback.
48)   - Fix PyPI classification: Python 3.9 is supported.
49)   - *Actually* remove the `derivepassphrase_export` program, which was
50)     turned into a subcommand in v0.2.0.
51) 
52) [TUTORIAL_BASIC_PASSPHRASE]: tutorials/basic-setup-passphrase.md
53) 

54) ## 0.3.0 (2024-10-15)
55) 
56) ### Added
57) 
58)   - Convert changelog management from towncrier to [scriv][].
59)   - Add SSH agent spawning support to the test suite.  Use this support to
60)     test the agent functionality on all known major SSH agent
61)     implementations automatically. ([#12])
62)   - Add [hypothesis][]-based tests to the test suite.
63)   - Update README to add explanations for virtual environments and package
64)     extras.
65)   - Update README to demonstrate configuration storing and SSH agent use.
66)     Include comments on Windows support for SSH agents.
67)   - Use cross-references in the documentation of function signatures.
68)   - Add proper support for Buffer types in the SSH agent client.  Any
69)     Python object supporting the buffer protocol can be used as input to
70)     a function of the client, and any output from the client is returned
71)     as bytes objects.  Because of the zero-copy semantics of the
72)     underlying data/memory block, this should stay relatively time- and
73)     space-efficient.
74)   - Add [hypothesis][]-based tests for serialization to and
75)     deserialization from the SSH agent wire format.
76)   - Support Python 3.9 and 3.13.
77) 
78) [#12]: https://github.com/the-13th-letter/derivepassphrase/issues/12
79) [hypothesis]: https://pypi.org/project/hypothesis/
80) [scriv]: https://pypi.org/project/scriv
81) 
82) ### Changed
83) 
84)   - Change links to point to public project repositories, if possible.  For
85)     legal reasons.
86) 
87)   - Use the same filename/URL convention for API reference as the Python
88)     standard library does.
89) 
90)   - Rewrite functionality for checking for valid vault(1) configurations:
91)     include an actual validation function which throws errors upon
92)     encountering format violations, and which allows specifying which types
93)     of extensions (unknown settings, `derivepassphrase`-only settings) to
94)     tolerate during validation.
95) 
96)     This is a **breaking API change** because the function return annotation
97)     changed, from [`typing.TypeGuard`][] to [`typing_extensions.TypeIs`][].
98)     These were the originally intended semantics, but when
99)     `derivepassphrase` was first designed, the Python type system did not
100)     support this kind of partial type narrowing.
101) 
102)   - Fail earlier, and more gracefully/specifically, when we cannot talk to
103)     the SSH agent because Python does not support UNIX domain sockets on
104)     this system.  In particular, this is the current situation on Windows.
105) 
106)     This adds another failure case to the `SSHAgentClient` constructor, and
107)     therefore constitutes a **breaking API change**.
108) 
109)   - In `derivepassphrase vault`, accept `key` and `phrase` entries just like
110)     vault(1) does: `key` always overrides `phrase` in the configuration, no
111)     matter the level.
112) 
113)     This is a command-line only change.
114) 
115)   - In `derivepassphrase vault`, when importing settings, accept falsy values
116)     everywhere `vault` does, with a warning.  Depending on the setting, they
117)     are equivalent to zero, the empty string, or "not set".  ([#17])
118) 
119)     This is a command-line only change, and only affects importing.  The API
120)     provides a new function to normalize falsy settings, but still otherwise
121)     requires settings to be of the correct type.  Storing a malformed
122)     configuration with such falsy values will still generate errors when
123)     `derivepassphrase vault` loads the settings from disk.
124) 
125)   - In `derivepassphrase vault`, when importing configurations,
126)     correctly merge them with the existing one, same as vault(1): keep
127)     all named services and their settings (and the global settings if
128)     applicable) that are not mentioned in the imported configuration.
129)     The import procedure is thus more akin to a section-wise import of
130)     the configurations, instead of a "full" import, and the resulting
131)     configuration generally is a merge of both inputs.  ([#16])
132) 
133)   - The following operations or configuration settings now raise
134)     warnings:
135) 
136)       * in imported configurations: using falsy values of the wrong type
137)       * in imported configurations: using falsy values with no practical
138)         effect
139)       * setting a passphrase in the configuration if a key is already
140)         set
141)       * using an empty service name on the command-line or in an
142)         imported configuration
143) 
144) [#16]: https://github.com/the-13th-letter/derivepassphrase/issues/16
145) [#17]: https://github.com/the-13th-letter/derivepassphrase/issues/17
146) 
147) ### Fixed
148) 
149)   - Fixed the textual description of the return value for
150)     [`SSHAgentClient.request`][derivepassphrase.ssh_agent.SSHAgentClient.request],
151)     which didn't match the declared type annotation.
152) 

153) ## 0.2.0 (2024-09-12)
154) 

155) ### Added

156) 

157)   - Support configuration data export from `vault` in v0.2, v0.3 and
158)     storeroom formats.

159) 
160)     This feature requires the `cryptography` Python module, but is available

161)     even if `vault` is not installed. ([#1])

162) 
163) [#1]: https://github.com/the-13th-letter/derivepassphrase/1
164) 

165) ### Fixed
166) 
167)   - Deploy versioned documentation with [mike][].  Set up a "latest" tag and
168)     the "0.<var>x</var>" version of the documentation with the contents so
169)     far.
170) 
171) [mike]: https://pypi.org/project/mike
172) 
173) ### Changed
174) 
175)   - Changed `sequin` and `ssh_agent_client` to be submodules of
176)     `derivepassphrase`.  Further moved `derivepassphrase.Vault` and
177)     `derivepassphrase.AmbiguousByteRepresentation` into a new submodule
178)     `vault`, and renamed submodule `ssh_agent_client` to `ssh_agent`. ([#3])
179)   - Changed internal error handling and error messages, to better work in
180)     the context of a command-line tool. ([#4])
181)   - Combine and consolidate `derivepassphrase.types` and
182)     `derivepassphrase.ssh_agent.types` into a new submodule
183)     `derivepassphrase._types`.  Despite the name, the module is public.
184)     ([#7])
185)   - Warn the user when entering (directly, or via configuration
186)     editing/importing) a passphrase that is not in the configured Unicode
187)     normalization form. (But don't otherwise reject any textual master
188)     passphrases.) ([#9])
189)   - Move all existing functionality into a subcommand, in anticipation of
190)     other passphrase derivation schemes, with different settings.
191)     Automatically forward calls without a subcommand to the "vault"
192)     subcommand.

193) 
194)     Also store the settings in a file specific to the respective subsystem,

195)     instead of globally.  Automatically fall back to, and migrate, the old
196)     global settings file if no subsystem-specific configuration was found.
197)     ([#10])

198) 

199)   - Make `derivepassphrase_export` a subcommand: `derivepassphrase export`.
200)     ([#11])

201) 
202) [#3]: https://github.com/the-13th-letter/derivepassphrase/3
203) [#4]: https://github.com/the-13th-letter/derivepassphrase/4
204) [#7]: https://github.com/the-13th-letter/derivepassphrase/7
205) [#9]: https://github.com/the-13th-letter/derivepassphrase/9
206) [#10]: https://github.com/the-13th-letter/derivepassphrase/10
207) [#11]: https://github.com/the-13th-letter/derivepassphrase/11
208) 

209) ### Deprecated

210) 

211)   - Using the implied subcommand or the implied global configuration file is
212)     deprecated, and will be removed in v1.0.

213) 
214) 

215) ## 0.1.3 (2024-07-28)
216) 

217) ### Fixed

218) 

219)   - Do not crash upon selecting a key on the command-line if there already
220)     is a key stored in the configuration. ([#5])
221)   - Create the configuration directory upon saving, if it does not yet
222)     exist.  ([#6])
223)   - Isolate the tests properly and consistently from the user's
224)     configuration, so that user configuration problems do not cause
225)     unrelated test failures. ([#8])
226)   - Add an alternate MkDocs configuration for building the documentation in
227)     offline mode.
228)   - Fix typing issues according to `mypy`'s strict mode.

229) 
230) [#5]: https://github.com/the-13th-letter/derivepassphrase/5
231) [#6]: https://github.com/the-13th-letter/derivepassphrase/6
232) [#8]: https://github.com/the-13th-letter/derivepassphrase/8
233) 
234) 

235) ## 0.1.2 (2024-07-22)
236) 

237) ### Fixed

238) 

239)   - Include and exclude the correct files in the `sdist` and `wheel`
240)     distributions.  (Previously, `sdist` contained VCS artifacts, and
241)     `wheel` was missing some paths.)

242)   - Lint and reformat all code using [ruff](https://pypi.org/package/ruff/).
243)   - Mention
244)     [`mkdocstrings-python`](https://pypi.org/package/mkdocstrings-python/)

245)     in the documentation's page footer.
246)   - Remove JavaScript and external font loading from documentation website,
247)     so that the site works even in restricted browser settings.
248)   - Set up a changelog, using
249)     [towncrier](https://pypi.org/package/towncrier).

250) 
251) 

252) ## 0.1.1 (2024-07-14)
253) 

254) ### Fixed

255) 

256)   - Restore the `__version__` attribute in all top-level packages.
257)   - Declare compatibility with Python 3.10 in project metadata, and include
258)     necessary version-specific dependencies.
259)   - Publish the documentation online, and link to it in the repository
260)     metadata and the Python package metadata.

261) 
262) 
263) ## 0.1.0 (2024-07-14)
264) 

265) ### Added

266)