Release v3.0.0

What's Changed

• Complete rewrite of the password schema language and derivation process
• Switched config from yaml to toml
• Add a flag to read the seed from stdin
• Add a -p / --print-sites flag to print site URLs for possible use in shell completion

macOS Instructions

Download onepass.pkg and also onepass.provisionprofile. Run the installer and also install the provisioning profile (open the file and select “install”) in order for the installed onepass binary to work.

Binary Verification

You can use the gh CLI to verify that these binaries came from the workflow run associated with this release:

gh attestation verify "$(command -v onepass)" --repo mrdomino/onepass
gh release verify-asset v3.0.0 "$(command -v onepass)" --repo mrdomino/onepass

Full Changelog: v2.3.4...v3.0.0

Release v3.0.0-rc.0

What's Changed

Breaking changes

• Breaking since v3.0.0-pre.6: The use_keyring directive has been renamed. The new directive is global.keyring.seed, supported values are "off" and "cache"

Other changes

• Deduplicate repeated URLs in -p
• Clearer error messages on config file errors

Full Changelog: v3.0.0-pre.6...v3.0.0-rc.0

Release v3.0.0-pre.6

What's Changed

• fix(conf): handle empty after non-empty data
• doc(conf): data does not affect derivation paths
• fix(conf): comments compose like schemas
• style(conf): remove source from error derive
• fix(conf): expand_home and resolve_path return Result
• feat(conf): file error messages contain path information
• style(seed): clean up initialization block
• fix(seed): add a defensive assert on List end condition
• fix(seed): apply clippy suggestions
• chore(deps): bump rust toolchain to 1.95
• chore(deps): bump openssl version (used by keyring for linux dbus encryption)
• chore(deps): bump clap from 4.6.0 to 4.6.1
• chore(deps): bump rand from 0.8.5 to 0.8.6 in the cargo group across 1 directory by @dependabot[bot] in #129
• chore(deps): bump blake2 from 0.11.0-rc.5 to 0.11.0-rc.6 by @dependabot[bot] in #130

Full Changelog: v3.0.0-pre.5...v3.0.0-pre.6

Release v2.3.4

[Please note that onepass v2 is deprecated; the v3 release will generate different passwords and use different configs. Both v2 and v3 binaries can coexist on the same system.]

What's Changed

• bump objc2 from 0.6.3 to 0.6.4 by @dependabot[bot] in #136
• bump anyhow from 1.0.101 to 1.0.102
• bump rust-toolchain from 1.93 to 1.95
• bump openssl (used for local dbus encryption in linux) to latest release

macOS Instructions

Download onepass.pkg and also onepass.provisionprofile. Run the installer and also install the provisioning profile (open the file and select “install”) in order for the installed onepass binary to work.

Binary Verification

You can use the gh CLI to verify that these binaries came from the workflow run associated with this release:

gh attestation verify "$(command -v onepass)" --repo mrdomino/onepass
gh release verify-asset v2.3.3 "$(command -v onepass)" --repo mrdomino/onepass

Full Changelog: v2.3.3...v2.3.4

Release v3.0.0-pre.5

What's Changed

• feat: option to read seed from stdin
• feat(conf): reject some misspelled config fields
• feat(conf): store (and ignore) comment and data fields
• fix(main): show warning on data fields
• fix(seed): support passwords larger than 256 bits
• fix(seed): correct next_char boundary condition
• fix: typos
• doc(seed): clarify argon2 cost
• chore(deps): bump digest to 0.11.2
• chore(deps): bump crypto-bigint from 0.7.0 to 0.7.3
• chore(deps): bump tempfile from 3.25.0 to 3.27.0
• chore(deps): bump toml from 1.0.3+spec-1.1.0 to 1.1.1+spec-1.1.0
• chore(deps): update transitive deps by @mrdomino in #118
• chore(deps): bump argon2 from 0.6.0-rc.7 to 0.6.0-rc.8
• chore(deps): bump clap from 4.5.60 to 4.6.0

Full Changelog: v3.0.0-pre.4...v3.0.0-pre.5

Release v3.0.0-pre.4

What's Changed

• Transition from zeroize to secrecy, eliminating concerns about copied or moved values not being zeroed
• Allow up to 4KiB site passwords to be generated
• Allow site passwords containing null bytes and other non-printable characters to be generated
• Add a -p / --print-sites flag to print site URLs, for possible use in shell completion
• Bump crypto-bigint to final v0.7.0 release
• Bumped anyhow to 1.0.102, clap to 4.5.60

macOS Instructions

Download onepass.pkg and also onepass.provisionprofile. Run the installer and also install the provisioning profile (open the file and select “install”) in order for the installed onepass binary to work.

Binary Verification

You can use the gh CLI to verify that these binaries came from the workflow run associated with this release:

gh attestation verify "$(command -v onepass)" --repo mrdomino/onepass
gh release verify-asset v3.0.0-pre.3 "$(command -v onepass)" --repo mrdomino/onepass

Full Changelog: v3.0.0-pre.3...v3.0.0-pre.4

Release v3.0.0-pre.3

What's Changed

• This release includes a build provenance attestation, reintroduced since we have learned that the release attestation does not attest build provenance

macOS Instructions

Download onepass.pkg and also onepass.provisionprofile. Run the installer and also install the provisioning profile (open the file and select “install”) in order for the installed onepass binary to work.

Binary Verification

You can use the gh CLI to verify that these binaries came from the workflow run associated with this release:

gh attestation verify "$(command -v onepass)" --repo mrdomino/onepass
gh release verify-asset v3.0.0-pre.3 "$(command -v onepass)" --repo mrdomino/onepass

Full Changelog: v3.0.0-pre.2...v3.0.0-pre.3

Release v3.0.0-pre.2

What's Changed

• Changed crates.io release process back to using Trusted Publishing
• Tightened up formatting in character classes ([ab] instead of [a-b], ["] instead of [\"])
• Contexts do not create unnecessary copies when new default dicts are set
• Schemas do not get overridden by None on multiple duplicate site blocks
• Updated digest and crypto-common to avoid yanked releases

Full Changelog: v3.0.0-pre.1...v3.0.0-pre.2

Release v2.3.3

[Please note that onepass v2 is deprecated; the v3 release will generate different passwords and use different configs. Both v2 and v3 binaries can coexist on the same system.]

What's Changed

• This release includes a build provenance attestation, reintroduced since we have learned that the release attestation does not attest build provenance

macOS Instructions

Download onepass.pkg and also onepass.provisionprofile. Run the installer and also install the provisioning profile (open the file and select “install”) in order for the installed onepass binary to work.

Binary Verification

You can use the gh CLI to verify that these binaries came from the workflow run associated with this release:

gh attestation verify "$(command -v onepass)" --repo mrdomino/onepass
gh release verify-asset v2.3.3 "$(command -v onepass)" --repo mrdomino/onepass

Full Changelog: v2.3.2...v2.3.3

Release v3.0.0-pre.1

What's Changed

• Complete rewrite of the password schema language and derivation process
• Switched config from yaml to toml

Testing

First, rename your old onepass v2 binary onepass2 so you can still generate your v2 passwords. Take a look at examples/config.toml for a starting point.

Full Changelog: v2.3.1...v3.0.0-pre.1