derivepassphrase.git

@@ -1,11 +0,0 @@

-### Fixed

-

-  - Work around a bug in the OpenSSH `ssh-agent` where a `query`

-    request would receive a spurious

-    [`SUCCESS`][derivepassphrase._types.SSH_AGENT.SUCCESS] response, so

-    subsequent interactions (request-response pairs) would be misaligned.

-    This only affects OpenSSH 10.3/10.3p1.

-    →[:material-bug:][BUG_OPENSSH_BUG3967_WORKAROUND]

-

-[BUG_OPENSSH_BUG3967_WORKAROUND]: wishlist/openssh-bug3967-workaround.md "Bug entry: “Work around faulty query response in OpenSSH 10.3”"

-

@@ -1,41 +0,0 @@

-### Changed

-

-  - For developers: The [SSH agent

-    client][derivepassphrase.ssh_agent.SSHAgentClient] has separate internal

-    methods for the "send" and the "receive" halves of a request, each of

-    which can be stubbed individually.

-

-  - For developers: Several internal and mostly-minor changes to the

-    categorization and organization of the test suite should make it

-    altogether faster to run if "correctness tests" are not desired, but

-    fast feedback/"regression tests" are:

-

-      - The `dev` and `intense` [hypothesis][] profiles are

-        replaced by `regression`/`debug-regression` and `correctness`.

-        The `flaky` profile has been dropped without replacement.

-      - Some parametrized tests that should be property-based tests are now

-        stubbed property-based tests.

-        Likewise, some exhaustive property-based tests with only few inputs

-        are now parametrized tests.

-        There is explicit machinery for converting parametrized tests into

-        stubbed property-based tests without too much writing effort.

-

-    Other test suite improvements are not primarily based on the

-    "correctness"/"regression" split, but nonetheless should make the test

-    suite faster and/or easier to use:

-

-      - SSH agent configurations and built-in SSH agent socket providers are

-        now stored as an enum.

-        SSH protocol numbers serialize as their byte representation.

-      - A new "agent protocol response queue" class provides stub methods

-        for the "send" and "receive" halves of an SSH agent request which

-        map fixed request messages to fixed lists of response messages.

-      - The stubbed SSH agent better mimics real-world agent communication

-        channel behavior (incomplete requests, pipelined requests, channel

-        shutdown).

-      - SSH agent interaction tests run against the stubbed SSH agent or the

-        agent protocol response queue where possible.

-      - Some common functionality has been moved into `tests.data`,

-        `tests.machinery` or `conftest`.

-

-[hypothesis]: https://pypi.org/project/hypothesis/

@@ -1,6 +0,0 @@

-### Fixed

-

-  - Changes in the test runner behavior of `click` 8.2.0 and higher are now

-    accomodated in the test suite.

-    (User-visible behavior is still the same.)

-

@@ -51,6 +51,61 @@ specifically marked as such.)

 <!-- scriv changelog start -->

+## 0.6.1 (2026-07-06) {#v0.6.1}

+

+### Changed {#changed-in-v0.6.1}

+

+  - For developers: The [SSH agent

+    client][derivepassphrase.ssh_agent.SSHAgentClient] has separate internal

+    methods for the "send" and the "receive" halves of a request, each of

+    which can be stubbed individually.

+

+  - For developers: Several internal and mostly-minor changes to the

+    categorization and organization of the test suite should make it

+    altogether faster to run if "correctness tests" are not desired, but

+    fast feedback/"regression tests" are:

+

+      - The `dev` and `intense` [hypothesis][] profiles are

+        replaced by `regression`/`debug-regression` and `correctness`.

+        The `flaky` profile has been dropped without replacement.

+      - Some parametrized tests that should be property-based tests are now

+        stubbed property-based tests.

+        Likewise, some exhaustive property-based tests with only few inputs

+        are now parametrized tests.

+        There is explicit machinery for converting parametrized tests into

+        stubbed property-based tests without too much writing effort.

+

+    Other test suite improvements are not primarily based on the

+    "correctness"/"regression" split, but nonetheless should make the test

+    suite faster and/or easier to use:

+

+      - SSH agent configurations and built-in SSH agent socket providers are

+        now stored as an enum.

+        SSH protocol numbers serialize as their byte representation.

+      - A new "agent protocol response queue" class provides stub methods

+        for the "send" and "receive" halves of an SSH agent request which

+        map fixed request messages to fixed lists of response messages.

+      - The stubbed SSH agent better mimics real-world agent communication

+        channel behavior (incomplete requests, pipelined requests, channel

+        shutdown).

+      - SSH agent interaction tests run against the stubbed SSH agent or the

+        agent protocol response queue where possible.

+      - Some common functionality has been moved into `tests.data`,

+        `tests.machinery` or `conftest`.

+

+### Fixed {#fixed-in-v0.6.1}

+

+  - Work around a bug in the OpenSSH `ssh-agent` where a `query`

+    request would receive a spurious

+    [`SUCCESS`][derivepassphrase._types.SSH_AGENT.SUCCESS] response, so

+    subsequent interactions (request-response pairs) would be misaligned.

+    This only affects OpenSSH 10.3/10.3p1.

+    →[:material-bug:][BUG_OPENSSH_BUG3967_WORKAROUND]

+

+  - Changes in the test runner behavior of `click` 8.2.0 and higher are now

+    accomodated in the test suite.

+    (User-visible behavior is still the same.)

+

 ## 0.6 (2026-04-02)  {#v0.6}

 ### Added  {#added-in-v0.6}

@@ -834,6 +889,7 @@ specifically marked as such.)

 [BUG_FALSY_VAULT_CONFIG_VALUES]: wishlist/falsy-vault-config-values.md "Bug entry: “derivepassphrase vault differs from vault(1) behavior with falsy stored configuration values”"

 [BUG_NO_STDLIB_MODULE_NAMES]: wishlist/no-stdlib-module-names.md "Bug entry: “Rename types submodules to _types”"

 [BUG_ONE_TIME_KEY_OVERRIDE_FAILS]: wishlist/one-time-key-override-fails.md "Bug entry: “derivepassphrase -k fails when overriding the chosen key on the command-line”"

+[BUG_OPENSSH_BUG3967_WORKAROUND]: wishlist/openssh-bug3967-workaround.md "Bug entry: “Work around faulty query response in OpenSSH 10.3”"

 [BUG_PRINT_SERVICE_NOTES]: wishlist/print-service-notes.md "Bug entry: “derivepassphrase vault does not print service notes”"

 [BUG_SINGLE_TOPLEVEL_MODULE]: wishlist/single-toplevel-module.md "Bug entry: “Move sequin and ssh_agent_client modules into derivepassphrase package”"

 [BUG_TEST_FILESYSTEM_ISOLATION]: wishlist/test-filesystem-isolation.md "Bug entry: “Isolate tests properly from the filesystem”"

@@ -6,7 +6,7 @@ build-backend = "hatchling.build"

 name = "derivepassphrase"

 description = "An almost faithful Python reimplementation of James Coglan's vault."

 readme = "README.md"

-version = "0.6"

+version = "0.6.1"

 requires-python = ">= 3.9"

 license = { text = "zlib/libpng" }

 keywords = []

@@ -123,7 +123,7 @@ Issues = "https://the13thletter.info/derivepassphrase/latest/wishlist/"

 Source = "https://git.schokokeks.org/derivepassphrase.git"

 [tool.bumpversion]

-current_version = "0.6"

+current_version = "0.6.1"

 # As of bump-my-version 0.32.0, version components are strictly

 # hierarchical in the order of occurrence, and there is no support for

 # pre-release markers.  The documentation suggests a fake "dev/rc/final"

@@ -1,6 +1,6 @@

-.Dd 2026-04-02

+.Dd 2026-07-06

 .Dt DERIVEPASSPHRASE-EXPORT-VAULT 1

-.Os derivepassphrase 0.6

+.Os derivepassphrase 0.6.1

 .

 .Sh NAME

 .

@@ -1,6 +1,6 @@

-.Dd 2026-04-02

+.Dd 2026-07-06

 .Dt DERIVEPASSPHRASE-EXPORT 1

-.Os derivepassphrase 0.6

+.Os derivepassphrase 0.6.1

 .

 .Sh NAME

 .

@@ -1,6 +1,6 @@

-.Dd 2026-04-02

+.Dd 2026-07-06

 .Dt DERIVEPASSPHRASE-VAULT 1

-.Os derivepassphrase 0.6

+.Os derivepassphrase 0.6.1

 .

 .Sh NAME

 .

@@ -1,6 +1,6 @@

-.Dd 2026-04-02

+.Dd 2026-07-06

 .Dt DERIVEPASSPHRASE 1

-.Os derivepassphrase 0.6

+.Os derivepassphrase 0.6.1

 .

 .Sh NAME

 .

@@ -9,5 +9,5 @@ __distribution_name__ = "derivepassphrase"

 # Automatically generated.  DO NOT EDIT! Use importlib.metadata instead

 # to query the correct values.

-__version__ = "0.6"

+__version__ = "0.6.1"

 # END automatically generated.