HemmeligOrg/Hemmelig.app v7.6.0

on GitHub

Highlights

• The Go CLI covers the whole app. Secrets with files, secret requests, your account, 2FA, API keys, and the admin areas for users, invites, instance settings and analytics. Every command supports --json. Get it from the cli-v1.2.0 release. See docs/cli.md.
• MCP server for AI agents. hemmelig mcp runs on your machine and uses an API key. It encrypts and decrypts locally, so the server never sees plaintext. See docs/mcp.md.

  HEMMELIG_URL=https://secrets.example.com HEMMELIG_API_KEY=hemmelig_xxx hemmelig mcp

• API keys work on every route, with the role of the key owner. Changing the password, deleting the account and creating API keys still need a signed-in session, so a leaked key cannot take over an account. See docs/api-keys.md.
• "Burn now" works again, also for creators without an account. This fixes the known issue in v7.5.0.

Upgrade notes

• Environment variables now enforce their settings outside managed mode. HEMMELIG_INSTANCE_NAME, HEMMELIG_INSTANCE_DESCRIPTION, HEMMELIG_INSTANCE_LOGO, HEMMELIG_ALLOW_REGISTRATION, HEMMELIG_ALLOW_PASSWORD_PROTECTION and HEMMELIG_ALLOW_IP_RESTRICTION changed only the dashboard display before. Now the server applies them, and the dashboard shows those settings as read-only. Check these variables before you upgrade. For example, HEMMELIG_ALLOW_REGISTRATION=false now closes sign-up.
• Deleting a secret through the API: POST /api/secrets returns a deleteToken. DELETE /api/secrets/:id accepts this token in x-hemmelig-delete-token, the reveal token, or the session or API key of the owner.
• Burn after time: views: null means no view limit until the secret expires. The API meaning of isBurnable does not change.
• Links: new links use the short form /s/<id>#<key>. Old links still work.
• Uploads: POST /api/files accepts a raw application/octet-stream body and streams it to disk. Multipart uploads still work.
• New settings and variables: HEMMELIG_DEFAULT_MAX_VIEWS, HEMMELIG_INSTANCE_LOGO_DARK, HEMMELIG_DEFAULT_THEME, HEMMELIG_HIDE_PASSWORD_LOGIN and HEMMELIG_SECURITY_CONTACT. See docs/env.md.
• Read-only root filesystem: the image supports it. Keep /tmp, /app/database and /app/uploads writable.
• Helm: the chart is now published as oci://ghcr.io/hemmeligorg/charts/hemmelig.
• Database: a new migration runs automatically at start.

What's Changed

• chore(cli): set the Go CLI version to 1.2.0 by @bjarneo (35f5e2d)
• feat(cli): cover the whole app in the Go CLI and add an MCP server by @bjarneo (d5a18a7)
• feat(api): return the role and 2FA state from GET /api/account by @bjarneo (419ddb0)
• feat(api): accept API keys on every route and add admin user routes by @bjarneo (a80ae62)
• fix: resolve open issues in secrets, files, settings and login by @bjarneo (ff668e7)
• fix(docker): support a read-only root filesystem and serve security.txt by @bjarneo (d958607)
• feat(helm): load env from secrets and publish the chart to GHCR by @bjarneo (f7f9d89)

Full Changelog: v7.5.0...v7.6.0