1975 Commits

Author SHA1 Message Date
Dominik Schulz
f4ee40ce23
[feat] Replace clipboard library to support wl-copy args (#3123)
* [feat] Replace clipboard library to support wl-copy args

This change should allow us to protect sensitive content
from being captured in some clipboard managers on KDE.

Fixes #2611

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [chore] Update clipboard dep

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Update clipboard

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

---------

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-04-19 14:46:14 +02:00
Dominik Schulz
f5c694c08b
[fix] Include git commit hash in tarballs (#3124)
* [fix] Include git commit hash in tarballs

This change should allow builds made from a release tarball to
accurately display the git commit hash it was built from.

It does so by rendering the current short hash when packaging
the tarball. This workaround is necessary since the tarball
won't include the .git directory so we can't extract the
commit information from it.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Fix TestVersionPrinter

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Fix spacing

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

---------

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-04-19 14:45:56 +02:00
Dominik Schulz
e487ea56a8
[chore] Migrate goreleaser config to v2 (#3122)
* [chore] Migrate goreleaser config to v2

Minor changes that should have no visible effect.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Pull gorelease v2 in the Makefile

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Fix install command

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

---------

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-04-17 19:44:39 +02:00
Dominik Schulz
4464e29f20
[fix] Add LICENSE, Changelog, manpage and shell completions to deb and (#3121)
rpm

This change adds missing artifacts to the Deb and RPM packages we
publish.

Fixes #2871

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-04-17 14:03:19 +02:00
Dominik Schulz
1b84feeaad
[chore] Update dependencies (#3120)
Pull in some (critical) updates. None of these should affect us,
but dependabot still keeps complaining.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-04-17 09:26:46 +02:00
Dominik Schulz
7b35864b13
[chore] Do not run linters twice (#3119)
We already have a golangci-lint GHA but we still run it in the linux
tests. This often creates inconsistent findings. Let's not do that
and only run the linter once in it's own action. Also rename the
test targets that were created for Travis CI a long time ago.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-04-17 08:50:04 +02:00
Dominik Schulz
7281ca8ab4
[chore] Migrate to golangci-lint v2 (#3104)
* [chore] Migrate to golangci-lint v2

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [chore] Fix more lint issues

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [chore] Fix more lint issue

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [chore] Fix more lint issues

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [chore] Add more package comments.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [chore] Fix golangci-lint config and the remaining checks

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Use Go 1.24

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Fix container builds

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* Fix more failing tests

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* Fix test failure

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* Fix another len assertion

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* Move location tests

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Fix most remaining lint issues

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Only run XDG specific tests on linux

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Attempt to address on source of flaky failures

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

---------

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-04-17 08:05:43 +02:00
Dominik Schulz
7eaa845da7
[fix] Fix test regressions (#3116)
* [fix] Fix test regressions

This change fixes some tests that did start to fail at some point.
I can't tell for sure when they broke (didn't bisect) and if that
breakage is isolated to my system or not. But I need to fix them
anyway.

Fixes #3115

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* Add missing files.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* Fix test failure

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* Fix one more version test

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

---------

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-04-16 21:21:00 +02:00
sudoforge
6a648bc03e
refactor: clean up commit message when no HeadMessage is set (#3112)
This change removes the extraneous colon from the commit message in the
event that no HeadMessage is set on the current context.

Signed-off-by: sudoforge <no-reply@sudoforge.com>
2025-04-16 21:04:00 +02:00
Dominik Schulz
3a05d06b12
Allow connections to Ubuntu repository hosts (#3113)
* Allow connections to Ubuntu repository hosts

I'm not 100% sure where these connections are being initiated, but this is an Ubuntu image and those are legit Ubuntu hosts.

* Update build.yml

---------

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-04-16 10:12:48 +02:00
sudoforge
0b09b7f71c
chore: remove unecessary variable: REGISTRY (#3110)
This change removes the `REGISTRY` variable in the `container` job
defined in `//:.github/workflows:build.yml`. This doesn't matter on a
technical level because the image isn't pushed anywhere, but uh... I
caught the typo and figured getting rid of REGISTRY would be a good
way to make it clear that the image isn't pushed (and get rid of my
typo).

Signed-off-by: sudoforge <no-reply@sudoforge.com>
2025-04-07 13:55:00 +02:00
dependabot[bot]
fd2140a1b9
chore(deps): bump actions/setup-go from 5.3.0 to 5.4.0 (#3095)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.3.0 to 5.4.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](f111f3307d...0aaccfd150)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-07 10:47:30 +02:00
dependabot[bot]
4448134080
chore(deps): bump github/codeql-action from 3.28.10 to 3.28.13 (#3096)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.10 to 3.28.13.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b56ba49b26...1b549b9259)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-07 10:47:06 +02:00
dependabot[bot]
0928b4de98
chore(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 (#3098)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.1 to 4.6.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](4cec3d8aa0...ea165f8d65)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-07 10:46:45 +02:00
dependabot[bot]
84449f6faf
chore(deps): bump step-security/harden-runner from 2.11.0 to 2.11.1 (#3097)
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.11.0 to 2.11.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](4d991eb9b9...c6295a65d1)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-07 10:45:38 +02:00
sudoforge
bf4dfb4a88
feat: disable any secret output when clip is enabled (#3106)
This change disables the printing of any content of the secret
(including keys) when the clip flag is enabled (`--clip`).

Closes: gopasspw/gopass#3094

Signed-off-by: sudoforge <no-reply@sudoforge.com>
2025-04-07 10:41:03 +02:00
sudoforge
723dac049a
feat: add a new build job: container (#3109)
This change adds a new job in `//.github/workflows:build.yml` named
`container`, to build the container image. This is being added as a
quick hack to fix a critical issue with this repository (in regards to
its container image), namely, that it is not built except for releases.

This means that both source code and configuration changes that break
the container build will not be caught until an attempt to create a new
release is made (more specifically, given the current configuration of
the `//.github/workflows:container.yml` pipeline, whenever a new ref is
pushed up matching `refs/tags/v*`).

An example of this is a recent change to the required version of `go`,
made in commit 4c2caf3e9b6f1c65857c0d33208e3273c2ab7eb3 (ca. October
2024), which did not udpate the base `golang` image referenced in
`//:Dockerfile`.

As a requirement to pass the new pipeline, this change also updates the
`golang` image we source in `//:Dockerfile`, in order to fix the build.

Signed-off-by: sudoforge <no-reply@sudoforge.com>
2025-04-07 10:40:01 +02:00
sudoforge
399f0ca7f1
feat: use fully qualified registry URIs (#3107)
This change refactors container image references to use a fully
qualified registry URI (by adding the URI that `docker` implies
automatically, `docker.io/library`). This improves support for
other tools like `podman` or `buildah`.

Signed-off-by: sudoforge <no-reply@sudoforge.com>
2025-04-07 10:35:22 +02:00
dependabot[bot]
e75d29f38b
chore(deps): bump goreleaser/goreleaser-action from 6.2.1 to 6.3.0 (#3099)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 6.2.1 to 6.3.0.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](90a3faa9d0...9c156ee8a1)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-02 14:08:55 +02:00
dependabot[bot]
7ea1b1318e
chore(deps): bump docker/login-action from 3.3.0 to 3.4.0 (#3100)
Bumps [docker/login-action](https://github.com/docker/login-action) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](9780b0c442...74a5d14239)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-02 14:08:31 +02:00
dependabot[bot]
6142bd1b02
chore(deps): bump crazy-max/ghaction-import-gpg from 6.2.0 to 6.3.0 (#3101)
Bumps [crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/crazy-max/ghaction-import-gpg/releases)
- [Commits](cb9bde2e25...e89d40939c)

---
updated-dependencies:
- dependency-name: crazy-max/ghaction-import-gpg
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-02 14:08:08 +02:00
dependabot[bot]
0009eb2635
chore(deps): bump actions/cache from 4.2.2 to 4.2.3 (#3102)
Bumps [actions/cache](https://github.com/actions/cache) from 4.2.2 to 4.2.3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](d4323d4df1...5a3ec84eff)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 4.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-02 14:07:51 +02:00
dependabot[bot]
9985ea7983
chore(deps): bump golangci/golangci-lint-action from 6.5.0 to 7.0.0 (#3103)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](2226d7cb06...1481404843)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-02 14:05:53 +02:00
GLoby
c32ec32a52
[TESTING/CLEANUP] Replace deprecated tenv linter for usetesting (#3087)
* [CLEANUP] Comply to linters about blank lines

Signed-off-by: Ilya Eryomenko <ilya@eryomenko.com>

* [TESTING] Replace tenv linter with usetesting as it's deprecated

Signed-off-by: Ilya Eryomenko <ilya@eryomenko.com>

* [TESTING] Replace os.MkdirTemp with t.TempDir for improved test isolation and comply with usetesting linter

Signed-off-by: Ilya Eryomenko <ilya@eryomenko.com>

* [TESTING] Ensure temporary directories are not empty in tests

Signed-off-by: Ilya Eryomenko <ilya@eryomenko.com>

---------

Signed-off-by: Ilya Eryomenko <ilya@eryomenko.com>
2025-03-14 13:22:36 +01:00
GLoby
9a5ae11165
[BUGFIX] Allow use of trailing slash for cp/mv command (#3080)
Signed-off-by: Ilya Eryomenko <ilya@eryomenko.com>
2025-03-12 22:13:01 +01:00
Carl Smedstad
4a9f658426
[FEATURE] Add option -r/--regex to find (#3083)
* [FEATURE] Add option -r/--regex to find

If the option -r/--regex is supplied to 'gopass find', the argument is treated
as a regex pattern instead of a substring.

Signed-off-by: Carl Smedstad <carl.smedstad@protonmail.com>

* [UX] Fail and produce error message when bad regex supplied to find -r

For example:

    $ ./gopass find -r 'mystring['

    Error: error parsing regexp: missing closing ]: `[`

Signed-off-by: Carl Smedstad <carl.smedstad@protonmail.com>

* [CLEANUP] Rename argument regex to reMatch

* [CLEANUP] Compile regex outside of loop

---------

Signed-off-by: Carl Smedstad <carl.smedstad@protonmail.com>
2025-03-12 22:06:11 +01:00
Fabio Alessandro Locati
cb4ba72be9
[ENHANCEMENT] Make it possible to override show.autoclip (#3082)
* [ENHANCEMENT] Make it possible to override `show.autoclip`

With this change is now possible to use `--alsoclip=false` on the command line to override the `show.autoclip` set in the config file.

Signed-off-by: Fabio Alessandro Locati <me@fale.io>

* Improve code legibility

Signed-off-by: Fabio Alessandro Locati <me@fale.io>

* Improve logic

Signed-off-by: Fabio Alessandro Locati <me@fale.io>

---------

Signed-off-by: Fabio Alessandro Locati <me@fale.io>
2025-03-11 11:29:02 +01:00
Dominik Schulz
21687eea47
[fix] Fix debug.ModuleVersion (#3079)
* [fix] Fix debug.ModuleVersion

Add tests, fix parsing issues and add a specical case for the main
module.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* Fix two lint issues

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

---------

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-03-05 16:54:17 +01:00
Dominik Schulz
72c5f9454a
[chore] Add better test coverage for helpers (#3078)
* [chore] Add better test coverage for helpers

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Disable one linux specific test on windows.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Only run helper tests on Linux. Currently there are no plans to
support those on Linux or even Darwin. If you have a need for that
feel free to put in the work to make that work.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

---------

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-03-04 15:14:34 +01:00
Dominik Schulz
9b72a1c76c
Improve test coverage (#3077)
* [chore] Add more tests

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Fix most tests

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Fix remaining tests

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Fix lint issues.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Fix more lint issues.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Fix more lint issues.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* [fix] Fix the final lint issue.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

---------

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-03-04 13:01:01 +01:00
dependabot[bot]
527c9a8833
chore(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.5.0 (#3063)
* chore(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.5.0

Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.2.0 to 6.5.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](ec5d18412c...2226d7cb06)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* [fix] Allow outgoing connections to golangci-lint.run

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-03-03 17:04:11 +01:00
GLoby
9342b8cacf
[UX] Make single store sync more intuitive / verbose (#3076)
Signed-off-by: Ilya Eryomenko <ilya@eryomenko.com>
2025-03-03 16:45:54 +01:00
dependabot[bot]
a6de8fb5cd
chore(deps): bump docker/build-push-action from 6.13.0 to 6.15.0 (#3062)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.13.0 to 6.15.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](ca877d9245...471d1dc4e0)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-02 19:54:26 +01:00
dependabot[bot]
978a9693d4
chore(deps): bump msys2/setup-msys2 from 2.26.0 to 2.27.0 (#3064)
Bumps [msys2/setup-msys2](https://github.com/msys2/setup-msys2) from 2.26.0 to 2.27.0.
- [Release notes](https://github.com/msys2/setup-msys2/releases)
- [Changelog](https://github.com/msys2/setup-msys2/blob/main/CHANGELOG.md)
- [Commits](d44ca8e88d...61f9e5e925)

---
updated-dependencies:
- dependency-name: msys2/setup-msys2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-02 19:53:20 +01:00
dependabot[bot]
3f0fe04941
chore(deps): bump docker/metadata-action from 5.6.1 to 5.7.0 (#3065)
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.6.1 to 5.7.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](369eb591f4...902fa8ec7d)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-02 19:52:59 +01:00
dependabot[bot]
0ebf07a8f2
chore(deps): bump sigstore/cosign-installer from 3.7.0 to 3.8.1 (#3066)
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.7.0 to 3.8.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](dc72c7d5c4...d7d6bc7722)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-02 19:51:52 +01:00
dependabot[bot]
e326e8a296
chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 (#3067)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](62b2cac7ed...f49aabe0b5)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-02 19:51:26 +01:00
dependabot[bot]
1d31d918ff
chore(deps): bump step-security/harden-runner from 2.10.4 to 2.11.0 (#3068)
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.10.4 to 2.11.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](cb605e52c2...4d991eb9b9)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-02 19:51:04 +01:00
dependabot[bot]
686498c04a
chore(deps): bump actions/cache from 4.2.0 to 4.2.2 (#3069)
Bumps [actions/cache](https://github.com/actions/cache) from 4.2.0 to 4.2.2.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](1bd1e32a3b...d4323d4df1)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-02 19:50:36 +01:00
dependabot[bot]
1f62b455df
chore(deps): bump github/codeql-action from 3.28.8 to 3.28.10 (#3070)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.8 to 3.28.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](dd746615b3...b56ba49b26)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-02 19:50:13 +01:00
dependabot[bot]
51fffd7c92
chore(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 (#3071)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](65c4c4a1dd...4cec3d8aa0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-02 19:49:48 +01:00
Dominik Schulz
936f0db2a5
Add more test coverage (#3073)
* [chore] Add more test coverage

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* Fix lint issues

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* Fix assert.Len invocation

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

---------

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
2025-03-02 19:49:22 +01:00
dependabot[bot]
0ad2acbf90
chore(deps): bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1 (#3072)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 6.1.0 to 6.2.1.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](9ed2f89a66...90a3faa9d0)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-02 19:09:39 +01:00
Dominik Schulz
17b66f5ef2
[chore] Add tpl func tests and fix two small issues (#3058)
* [chore] Add tpl func tests and fix two small issues

Timestamps were not rounded correctly and the truncate function was not
trunacting correctly.

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* Fix lint error

* Add missing import

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* Add more truncate tests and fix handling of very short lengths

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

* Update internal/tpl/funcs_test.go

Co-authored-by: AnomalRoil <AnomalRoil@users.noreply.github.com>
Signed-off-by: Dominik Schulz <dominik.schulz@gmail.com>

* fix tests

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>

---------

Signed-off-by: Dominik Schulz <dominik.schulz@gauner.org>
Signed-off-by: Dominik Schulz <dominik.schulz@gmail.com>
Co-authored-by: AnomalRoil <AnomalRoil@users.noreply.github.com>
2025-03-01 18:50:17 +01:00
Fabio Alessandro Locati
fe936e41e1
Add capability to chain the otp to the password. Fixes #3052 (#3059)
* Add capability to chain the otp to the password. Fixes #3052

Signed-off-by: Fabio Alessandro Locati <me@fale.io>

* Fix empty line

Signed-off-by: Fabio Alessandro Locati <me@fale.io>

---------

Signed-off-by: Fabio Alessandro Locati <me@fale.io>
2025-03-01 16:19:57 +01:00
Thomas MANTL
81604c16ad
[bugfix] Don't check for autosync on manual triggered sync (#3026) (#3029)
* [bugfix] Don't check for autosync on manual triggered sync (#3026)

* [bugfix] Don't check for autosync on manual triggered sync

Fixes #3026

Signed-off-by: Ing. Thomas Mantl <thomas.mantl@redgears.net>

* use correct context

Fixes #3026

Signed-off-by: Thomas Mantl <thomas.mantl@redgears.net>

* * [bugfix] Don't check for autosync on manual triggered sync

Refactor to isAutosync function-parameter instead of a new context

Signed-off-by: Ing. Thomas Mantl <thomas.mantl@redgears.net>

---------

Signed-off-by: Ing. Thomas Mantl <thomas.mantl@redgears.net>
Signed-off-by: Thomas Mantl <thomas.mantl@redgears.net>
2025-02-27 13:03:30 +01:00
GLoby
5d989aa19f
[ENHANCEMENT] Add support for autocompletion with flags in REPL mode (#3057)
* [ENHANCEMENT] Add support for autocompletion with flags in REPL mode

Signed-off-by: Ilya Eryomenko <ilya@eryomenko.com>

* [CLEANUP] Fix lint issue

Signed-off-by: Ilya Eryomenko <ilya@eryomenko.com>

---------

Signed-off-by: Ilya Eryomenko <ilya@eryomenko.com>
2025-02-26 22:01:49 +01:00
FaDude
98deb464dd
[BUGFIX] Fixed password not saving to clipboard with safecontent and autoclip true (#3053)
* [BUGFIX] Fix password not saving to clipboard when AutoClip and SafeContent are both enabled

Fixed an issue where enabling both AutoClip and SafeContent prevented passwords from being saved to the clipboard.
Added tests to cover this case.

Signed-off-by: alex <wallneralex7789@gmail.com>

* [BUGFIX] fixes #3034

gofmt -> should now pass golangci-lint

Signed-off-by: alex <wallneralex7789@gmail.com>

---------

Signed-off-by: alex <wallneralex7789@gmail.com>
2025-02-26 08:49:25 +01:00
Fabio Alessandro Locati
2ff5f124ec
Ensure that otpauths are properly hidden from being displayed in safecontent mode (#3055)
* Ensure that otpauths are properly hidden from being displayed in safecontent mode. Fixes #3051

Signed-off-by: Fabio Alessandro Locati <me@fale.io>

* More complete implementation

Signed-off-by: Fabio Alessandro Locati <me@fale.io>

---------

Signed-off-by: Fabio Alessandro Locati <me@fale.io>
2025-02-26 08:48:18 +01:00
GLoby
cc901b8c59
[BUGFIX] Fixed max length check for strings in create/wizard (#3056)
Signed-off-by: Ilya Eryomenko <ilya@eryomenko.com>
2025-02-26 08:47:04 +01:00