Releases: source-c/usm
Releases · source-c/usm
v1.1.3-1
- Vault catalogue sync via Viracochan chain — New deterministic sync mechanism for vault catalogues with full negotiation protocol
- Synchronisation issue — Fixed sync reliability; improved service logic and expanded test coverage in internal/sync/service.go
- Unlocked Go toolchain version in Makefile; formatting cleanup in sync service
v1.1.1
Added P2P sync over LAN and improved security:
- Fix potential security issues in SSH agent sessions, browser messaging handlers, key generation, and storage layer
- Harden build system (LDFLAGS, version injection)
- Improve runtime stability in UI widgets and item metadata handling
- Linter and formatting cleanup
- Peer discovery via mDNS with automatic network recovery (sleep, WiFi reconnect)
- Pairing via 6-character code with HMAC-SHA256 challenge (code never sent in plaintext)
- Vault transfer with atomic staging, crash recovery, and rollback on failure
- Strict mode: vaults with diverged key fingerprints are treated as conflicts instead of auto-transferring
- Path traversal and file size validation on all data received from remote peers
- Discovery UI: "This Device" identity card, peer cards with trust metadata, pair/sync/unpair actions
- Incoming sync locks the UI and reloads all state from disk on completion
- Background mDNS restart and stale peer sweeping
- macOS fix: retain previous menu references to prevent AppKit use-after-free on systray refresh
- Responder now independently verifies the initiator's sync plan against its own negotiation result, preventing a malicious paired peer from requesting unauthorised transfers
Full Changelog: v1.0.2...v1.1.1
v1.0.2
Security
- Fixed potential security issues in browser messaging handlers, OTP generation, SSH key handling, and storage layer
Stability
- Improved runtime stability in preparation for sync implementation
- Updated dependencies (go.mod / go.sum)
- Fixed UI edge cases in vault widget and item metadata handling
Build & Tooling
- Hardened build process in Makefile for safer, more stable builds
- Enhanced version command with additional build info
- Updated linter configuration and resolved lint warnings
Bug Fixes
- Minor fixes in login item handling and rule processing
Full Changelog: v1.0.1...v1.0.2
v1.0.1
Full Changelog: v1.0.0...v1.0.1
- add vault password change (as COW) with versioned backups and catalogue tracking