v0.7.0

Vault format: 0.7.0 introduces integrity-MAC schemes v6–v9 (blake3v4:–blake3v7:), added incrementally as you use recipient groups, agent grants, access policy, and post-revoke rotation tracking. A vault written by 0.7.0 that uses any of these features cannot be verified by murk 0.6.2 or earlier — upgrade all collaborators together. Vaults that use none of them stay byte-compatible with older murk. This is an expected pre-1.0 forward-incompatibility.

[0.7.0] - 2026-06-19

Added

• add murk agent plan for schema-only agent context
• add murk agent exec strict execution mode
• add scan happy-path integration tests
• add MSRV check to CI
• feat: zeroize generated and prompted secrets in memory
• feat: label added keys with their SSH type in TOFU pin-change diff
• add per-secret rotation metadata and expiry checks
• feat: add --rotate to circle revoke
• feat: add MURK_STRICT to fail closed when edit can't stay in RAM
• feat: refuse export/get to a file under MURK_STRICT
• add per-secret recipient groups
• add grants vault metadata and MAC v7 (blake3v5)
• add agent grant/ls/revoke and fail-closed key discovery under MURK_STRICT
• add agent access policy: tag allow-list in vault header (MAC v8), enforced on agent exec/grant

Changed

• bump rand to 0.8.6 and js-yaml to 4.2.0 to clear vuln alerts
• refactor: route murk init key discovery through env's single read path

Documentation

• document missing commands and flags in SPEC.md and README, fix blake3v2 integrity description
• document agent plan and agent exec in SPEC.md and README
• document agent grants in SPEC and THREAT_MODEL
• document agent grants in docs/ai-agents.md
• docs: document git as the agent admin audit trail
• docs: document binding policy enforcement in ai-agents

Fixed

• fix: bump pyo3 to 0.29 for two python-binding security advisories
• fix: run on a larger-stack thread to avoid clap stack overflow on Windows

Other

• drop (MAC ok) from verify output, use ✦ for scoped edit update, document ✦ marker
• collect resolve_secrets straight into BTreeMap, no intermediate plaintext map
• ignore RUSTSEC-2026-0173 in deny.toml, build-time proc-macro only
• test: sandbox integration tests in a temp HOME
• test: require help text and coverage for every command
• ci: run parser fuzz targets nightly
• drop vault_name from agent plan output
• preserve windows system env vars in exec --clean-env
• show rotation and expiry in info
• keep agent grant scoped copy in sync when a granted key is rotated
• rename scoped secret tier to private (wire format unchanged)
• accept # Recipient: header in age plugin identity files
• expand YubiKey hardware-key walkthrough in README
• enforce agent policy in python and node bindings
• run murk via execFileSync in node tests, no shell
• ci: smoke-test the install.sh path against a local fixture
• test: enforce secret-handling invariants as source-level lints
• flag secrets that still need rotating after a revoke
• assert main's branch-protection baseline in release preflight
• point preflight at PREFLIGHT_APP_* secrets
• release v0.7.0

v0.6.2

[0.6.2] - 2026-05-03

Changed

• bump version to 0.6.2

Fixed

• fix clippy --all-targets lints and gate them in CI
• fix windows test compile: keep win_body name and gate hardening tests

Other

• harden release workflow with preflight checks
• harden github key fetch: disable redirects, cap body, set timeout
• disable core dumps at startup to prevent leaks of decrypted secrets
• harden github key fetch: ignore proxy env vars
• tighten workflow GITHUB_TOKEN permissions to contents:read

v0.6.1

[0.6.1] - 2026-04-27

Changed

• bump rustls-webpki to 0.103.13 for RUSTSEC advisory
• bump version to 0.6.1

Fixed

• fix node bindings for Zeroizing vault state

Other

• zeroize decrypted secrets in memory
• support age plugin identities for hardware-backed keys
• disambiguate rand::random type for Windows build
• zeroize plaintext in edit, import, and parse_env paths
• align public docs with shipped behavior

v0.6.0

[0.6.0] - 2026-04-21

Added

• add doctor command for repo hygiene

Changed

• bump rustls-webpki to 0.103.12 for RUSTSEC-2026-0098 and 0099
• bump version to 0.6.0

Other

• kill .env runtime fallback and route info through hardened loader
• faster dev builds via unpacked debuginfo
• turn verify into a real safety check
• reject ssh-rsa recipients by default, add --allow-ssh-rsa override
• exclude rust/cleartext-logging from codeql, false positive for a local cli

v0.5.11

[0.5.11] - 2026-04-14

Changed

• bump version to 0.5.11

Other

• draft: switch npm publish to trusted publishing (OIDC)
• walk up parent dirs to discover .murk vault

v0.5.10

[0.5.10] - 2026-04-13

Fixed

• fix crates.io publish via OIDC auth action and bump to 0.5.10

v0.5.9

[0.5.9] - 2026-04-13

Added

• add vault purple diamond logo to README
• add rust to codeql analysis matrix

Changed

• use O_NOFOLLOW on secret-file writes to close symlink TOCTOU windows
• bump version to 0.5.9

Other

• harden file writes, sanitize metadata, tighten CI and release governance
• switch crates.io publish to trusted publishing, add pin verification tests
• show self marker and key source in murk info
• split carol-leaving narration into two lines for readability
• reject symlinked vaults and stop canonicalizing for key lookup
• fail closed on provenance attestation when gh cli is available
• remove em-dashes from tape narration, parallelize vhs recording
• record all 9 tapes in vhs matrix
• install direnv in the vhs-git docker image

v0.5.8

[0.5.8] - 2026-04-06

Changed

• bump version to 0.5.8

Fixed

• fix npm publish: remove registry-url to allow OIDC auth
• fix npm publish: add NPM_TOKEN for auth

v0.5.7

[0.5.7] - 2026-04-06

Changed

• bump version to 0.5.7

Fixed

• fix npm publish: commit index files, remove prepublishOnly

v0.5.6

[0.5.6] - 2026-04-06

Added

• add completion install subcommand
• add tests for completion install subcommand

Changed

• bump version to 0.5.6

Fixed

• fix npm publish: use napi-rs v3 pre-publish command