From 32bf09887acfb03a3ad2f9ce79daa9674c43d157 Mon Sep 17 00:00:00 2001 From: Miguel Jacq Date: Mon, 3 Aug 2026 17:17:39 +1000 Subject: [PATCH] 0.8.2 --- pyproject.toml | 2 +- rpm/enroll.spec | 3 +-- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index a7d7c3d..c8707ca 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "poetry.core.masonry.api" [project] name = "enroll" -version = "0.8.1" +version = "0.8.2" description = "Enroll a server's running state retrospectively into Ansible" readme = "README.md" requires-python = ">=3.10" diff --git a/rpm/enroll.spec b/rpm/enroll.spec index 42399b9..4d5f5ca 100644 --- a/rpm/enroll.spec +++ b/rpm/enroll.spec @@ -45,7 +45,6 @@ Enroll a server's running state retrospectively into Ansible. %changelog * Mon Aug 03 2026 Miguel Jacq - %{version}-%{release} - Make remote harvest zipapp stdlib-only -* Mon Aug 03 2026 Miguel Jacq - %{version}-%{release} - Security: fix a TOCTOU in remote harvest. * Mon Jul 13 2026 Miguel Jacq - %{version}-%{release} - Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering window created by recursively chowning the bundle before packaging without making the plaintext archive world-readable. @@ -71,7 +70,7 @@ Enroll a server's running state retrospectively into Ansible. - Add support for generating ipset and iptables configuration files from runtime, if the former weren't present ('firewall_runtime' role) * Tue May 12 2026 Miguel Jacq - %{version}-%{release} - Add ssh config support where JinjaTurtle is used -* Tue Feb 16 2026 Miguel Jacq - %{version}-%{release} +* Mon Feb 16 2026 Miguel Jacq - %{version}-%{release} - Add capability to handle passphrases on encrypted SSH private keys. Prompting can be forced with `--ask-key-passphrase` or automated (e.g for CI) with `--ssh-key-passphrase env SOMEVAR` * Fri Jan 16 2026 Miguel Jacq - %{version}-%{release} - Add support for AddressFamily and ConnectTimeout in the .ssh/config when using `--remote-ssh-config`.