UnENVerse changelog
Every release of UnENVerse, newest first. Each version has its own page. Subscribe with the Atom feed, or read the roadmap for what comes next.
- 0.60.0 (2026-10-22)
A node grant names a project, and a user with any write permission could add a project whose id equalled that name, so the hub rendered the attacker's project… - 0.59.0 (2026-10-22)
A command reference page in the book, written from unv describe: a test fails when a command is added, renamed or re-described until the page is regenerated, s… - 0.58.0 (2026-10-22)
Import from Git stores through your own tools: unv import-vault sops, pass and gopass. sops decrypt, gpg --decrypt and gopass show run with a cleared environme… - 0.57.0 (2026-10-22)
Release builds for arm64: Linux desktop bundles and unv/unv-server for linux-aarch64, the desktop installer and unv/unv-server for windows-aarch64, and a multi… - 0.56.1 (2026-10-18)
Rust tests build the key-derivation and hashing crates optimised, so a test that unlocks a vault no longer pays for a debug-build Argon2id. A slow contract fil… - 0.56.0 (2026-10-18)
Behaviour tests for the whole command line, the hub and node flows, the desktop IPC commands and the TypeScript interface. The command line tests run the real… - 0.55.1 (2026-10-17)
Public trust signals: an OpenSSF Scorecard workflow, build provenance attestations and CycloneDX software bills of materials for every release asset, a Vitest… - 0.55.0 (2026-10-17)
unv update installs a newer standalone release only after the signed manifest, the archive checksum and a version probe all pass. The manifest is signed separa… - 0.54.1 (2026-10-16)
Vaults written by SQLCipher 3 now open by migrating in place, with a backup kept first. A wrong password is still rejected. - 0.54.0 (2026-10-15)
R09 full-fidelity password-manager source migration: unv import-vault bitwarden|onepassword|keepass now plans and atomically records source identities, encrypt… - 0.44.x (2026-10-11 to 2026-10-12)
The application layer moves into a shared unv-app crate used by the CLI, the server and the desktop app (ADR on the application-layer boundary). - 0.43.0 (2026-10-11)
Dependency modernisation across crypto, backup, TOTP, node and server transport code, with a reviewed OpenAPI snapshot added to catch API drift. - 0.42.7 (2026-10-11)
Concurrency: audit appends are atomic, pool state is written under an exclusive lock, TOTP replay marks are compare-and-swap, sessions end when a user, token,… - 2026-10-09 (0.42.x)
The product is now UnENVerse everywhere: the crates and folders are unv-cli and unv-server, the desktop package is unenverse, release archives are named unv-<v… - 2026-10-09
Licence: LICENSE replaced by the official Apache-2.0 text (curl from apache.org), NOTICE added, license fields in package.json, vscode-extension, tauri.conf, 4… - 2026-10-08
Bulk uid register in the pane; --fix in the app's doctor; strict-write on the CLI against a remote; the archive/WAL caveat above. - 2026-09-21
Phase 24 A4 now queries Caps Lock through a Tauri command (GDK on Linux, - 2026-09-14
B.1 — npx eslint --prune-suppressions. npm run lint now exits 0 - 2026-09-13
### Handoff 30 — 2026-09-13 - 2026-09-11
### Handoff 29 — 2026-09-11 - 2026-09-10
No envv totp add/set. envv entry set X --totp … is the write path; - 2026-09-04
All six answered. Verification: - 2026-08-31
Phase 26 grows a third deliverable, 30c: the parity audit becomes a - 2026-08-27
triggered by a version bump, and this work is not released yet). - 2026-08-25
so the release pipeline has now cut releases end to end. That was an open item in - 2026-08-24
src/css/cards.css now derives every card dimension from --cs- tokens - 2026-08-23
cargo test --workspace — 16 agent tests, 6 parity, 7 server, 76 vault-core, all passing - 2026-08-08
- 2026-08-07
- 2026-06-13
### Remote RBAC, Discord-style hierarchy, sidebar/cert UX - 2026-06-12
hex::encode(h.finalize()) == hash_hex — regular string comparison, vulnerable to timing attacks on legacy password hashes - 2026-06-11
Runtime dep: libsqlcipher4 → libsqlcipher0 (correct Debian bookworm package; build was failing exit 100) - 2026-06-06
### Visual Patches + Docker Overhaul - 2026-06-05
VaultStore abstraction (LocalVaultStore ↔ TauriVaultStore) — zero UI changes to swap implementations