Armored files that contain an empty final line are now correctly rejected.
age
Fixed
age::armor::ArmoredReader:
It now correctly implements the intended strict parsing profile (initially implemented in 0.9.0) by rejecting an empty final line.
The async API now correctly rejects some classes of truncated files that previously would cause it to hang.
rage v0.12.0
rage
Added
Support for the new native age recipient types:
age1tag1..
age1tagpq1..
Changed
MSRV is now 1.74.0.
age
Added
Support for new native age recipient types:
age::tag::Recipient (encryption-only)
age::tagpq::Recipient (encryption-only)
age::encrypted::EncryptedIdentity
age::plugin::ResolveError
Changed
MSRV is now 1.74.0.
Migrated to base64 0.22, i18n-embed 0.16.
age::IdentityFile::into_identities now returns Result<Vec<Box<dyn crate::Identity + Send + Sync>>, DecryptError> instead of Result<Vec<Box<dyn crate::Identity>>, DecryptError>. This re-enables cross-thread uses of IdentityFile, which were unintentionally disabled in 0.11.0.
age::plugin:
The following methods now returns Result<Self, ResolveError>:
Identity::default_for_plugin
RecipientPluginV1::new
IdentityPluginV1::new
All existing error enums nameable in the public API are now non-exhaustive:
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [age](https://github.com/str4d/rage) from 0.10.1 to 0.12.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/str4d/rage/releases">age's releases</a>.</em></p>
<blockquote>
<h2>rage v0.12.1</h2>
<h2>rage</h2>
<h3>Fixed</h3>
<ul>
<li>Armored files that contain an empty final line are now correctly rejected.</li>
</ul>
<h2>age</h2>
<h3>Fixed</h3>
<ul>
<li><code>age::armor::ArmoredReader</code>:
<ul>
<li>It now correctly implements the intended strict parsing profile (initially implemented in 0.9.0) by rejecting an empty final line.</li>
<li>The async API now correctly rejects some classes of truncated files that previously would cause it to hang.</li>
</ul>
</li>
</ul>
<h2>rage v0.12.0</h2>
<h2>rage</h2>
<h3>Added</h3>
<ul>
<li>Support for the new native age recipient types:
<ul>
<li><code>age1tag1..</code></li>
<li><code>age1tagpq1..</code></li>
</ul>
</li>
</ul>
<h3>Changed</h3>
<ul>
<li>MSRV is now 1.74.0.</li>
</ul>
<h2>age</h2>
<h3>Added</h3>
<ul>
<li>Support for new native age recipient types:
<ul>
<li><code>age::tag::Recipient</code> (encryption-only)</li>
<li><code>age::tagpq::Recipient</code> (encryption-only)</li>
</ul>
</li>
<li><code>age::encrypted::EncryptedIdentity</code></li>
<li><code>age::plugin::ResolveError</code></li>
</ul>
<h3>Changed</h3>
<ul>
<li>MSRV is now 1.74.0.</li>
<li>Migrated to <code>base64 0.22</code>, <code>i18n-embed 0.16</code>.</li>
<li><code>age::IdentityFile::into_identities</code> now returns <code>Result<Vec<Box<dyn crate::Identity + Send + Sync>>, DecryptError></code> instead of <code>Result<Vec<Box<dyn crate::Identity>>, DecryptError></code>. This re-enables cross-thread uses of <code>IdentityFile</code>, which were unintentionally disabled in 0.11.0.</li>
<li><code>age::plugin</code>:
<ul>
<li>The following methods now returns <code>Result<Self, ResolveError></code>:
<ul>
<li><code>Identity::default_for_plugin</code></li>
<li><code>RecipientPluginV1::new</code></li>
<li><code>IdentityPluginV1::new</code></li>
</ul>
</li>
</ul>
</li>
<li>All existing error enums nameable in the public API are now non-exhaustive:
<ul>
<li><code>age::{EncryptError, DecryptError}</code></li>
<li><code>age::IdentityFileConvertError</code></li>
<li><code>age::armor::ArmoredReadError</code></li>
<li><code>age::cli_common::ReadError</code></li>
<li><code>age::ssh::ParseRecipientKeyError</code></li>
</ul>
</li>
<li>Removed the following error enum variants:
<ul>
<li><code>age::DecryptError::MissingPlugin</code></li>
<li><code>age::EncryptError::MissingPlugin</code></li>
<li><code>age::cli_common::ReadError::MissingPlugin</code></li>
</ul>
</li>
</ul>
<h2>age-plugin 0.7.0</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/str4d/rage/commit/7a854c9c8c02dab2ebea19e02e6693a5730a8b2a"><code>7a854c9</code></a> v0.12.1</li>
<li><a href="https://github.com/str4d/rage/commit/c5aeafe9280a7ab16013777d92e518e260916cb0"><code>c5aeafe</code></a> Merge branch 'rage-0.11.4' into release-0.12.1</li>
<li><a href="https://github.com/str4d/rage/commit/55ab2e95e0430e22cb0d8640820d68cdea8de5c7"><code>55ab2e9</code></a> v0.11.4</li>
<li><a href="https://github.com/str4d/rage/commit/717a2f56dadcbf5459546b2df1fb415eff7c9ba7"><code>717a2f5</code></a> Merge pull request <a href="https://redirect.github.com/str4d/rage/issues/633">#633</a> from str4d/age-0.11.5</li>
<li><a href="https://github.com/str4d/rage/commit/7f29934dc58e058e7a588ac3a9a7e946198a73a7"><code>7f29934</code></a> age 0.11.5</li>
<li><a href="https://github.com/str4d/rage/commit/e956b718c67e4d263c8969c9e73d76352387cb4e"><code>e956b71</code></a> age: Fix hang in <code>impl AsyncBufRead for ArmoredReader</code> on truncated files</li>
<li><a href="https://github.com/str4d/rage/commit/d57b2f53cfde871db4b7d8360d9f2077b5d524c5"><code>d57b2f5</code></a> age: Reject whitespace within armored files</li>
<li><a href="https://github.com/str4d/rage/commit/aea583645ccfc615fe269f0a95da29236d66e7a8"><code>aea5836</code></a> age: Update testkit test files</li>
<li><a href="https://github.com/str4d/rage/commit/cf76a6547312f3c0aae1fc831361aba0186492e6"><code>cf76a65</code></a> age: Update testkit test files</li>
<li><a href="https://github.com/str4d/rage/commit/95a5959c3cf6143fb54321c5d82f99887887b61e"><code>95a5959</code></a> age: Update testkit test files</li>
<li>Additional commits viewable in <a href="https://github.com/str4d/rage/compare/v0.10.1...v0.12.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.
What Enabling Code Scanning Means:
The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.
For more information about GitHub Code Scanning, check out the documentation.
You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.
### What Enabling Code Scanning Means:
- The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
- Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
- You will be able to see the analysis results for the pull request's branch on this [overview](/KofTwentyTwo/nuncio/security/code-scanning?query=pr%3A90+is%3Aopen) once the scans have completed and the checks have passed.
For more information about GitHub Code Scanning, check out [the documentation](https://docs.github.com/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning).
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Bumps age from 0.10.1 to 0.12.1.
Release notes
Sourced from age's releases.
... (truncated)
Commits
7a854c9v0.12.1c5aeafeMerge branch 'rage-0.11.4' into release-0.12.155ab2e9v0.11.4717a2f5Merge pull request #633 from str4d/age-0.11.57f29934age 0.11.5e956b71age: Fix hang inimpl AsyncBufRead for ArmoredReaderon truncated filesd57b2f5age: Reject whitespace within armored filesaea5836age: Update testkit test filescf76a65age: Update testkit test files95a5959age: Update testkit test filesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.
What Enabling Code Scanning Means:
For more information about GitHub Code Scanning, check out the documentation.