gman/CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

v0.3.0 (2026-02-02)

Fix

• Upgraded AWS dependencies to address CWE-20
• A critical security flaw was discovered that essentially had all local secrets be encrypted with an all-zero key
• Addressed XNonce::from_slice deprecation warning
• Secrets are now stored exactly as passed without newlines stripped

v0.2.3 (2025-10-14)

Refactor

• Refactored the library for gman so that it dynamically names config and password files to be used across any application

v0.2.2 (2025-09-30)

Refactor

• Environment variable interpolation in config file works globally, not based on type

v0.2.1 (2025-09-30)

Feat

• Environment variable interpolation in the Gman configuration file

Fix

• Corrected tab completions for the provider flag

v0.2.0 (2025-09-30)

Feat

• gopass support
• Added command aliases to make the CLI more universal
• Added dynamic tab completions for the profile, providers, and the secrets in any given secret manager
• Users can now specify a default provider to use with each run config, so they don't need to explicitly specify which to use when wanting to run different applications.

v0.1.0 (2025-09-17)

Feat

• Subcommand to edit the config directly instead of having to find the file

Fix

• improved user messages for local provider sync set up
• Pass the changelog to the GHA properly using a file
• Potential bug in changelog variable generation
• Revert back hacky stuff so I can test with act now
• Attempting to use pre-generated bindgens for the aws-lc-sys library
• Install openSSL differently to make this work
• Address edge case for unknown_musl targets
• Install LLVM prereqs for release flow
• Updated the release flow to install the external bindgen-cli

v0.0.1 (2025-09-12)

Feat

• Azure Key Vault support
• GCP Secret Manager support
• Full AWS SecretsManager support
• AWS Secrets Manager support
• Added two new flags to output where gman writes logs to and where it expects the config file to live

Fix

• Made the vault file location more fault tolerant
• Attempting to maybe be a bit more explicit about config file handling to fix MacOS tests

Refactor

• Refactor configuration structs directly into the provider definition to simplify validation, structs, and future extensions
• Made the creation of the log directories a bit more fault tolerant
• Renamed the provider field in a config file to type to make things a little easier to understand; also removed husky