borgbase/vykar v0.6.1

on GitHub

What's Changed

Security

• Harden crypto, compression, and passphrase handling — use Zeroizing<> for key material, validate decompression sizes, clear passphrase env vars after use
• Harden key wrapping and command timeouts — enforce timeout on passcommand execution, strengthen encrypted key authentication

Performance

• Use atomic writes and lazy directory creation in local storage backend

Bug Fixes

• Fix cross-platform hostname resolution for Windows builds — replace unix-only nix::unistd::gethostname() with platform-specific helper

Infrastructure

• Centralize dependency versions with workspace.dependencies
• Add workspace lints scaffolding (clippy::pedantic, unsafe_code = "forbid")
• Add SAFETY comments to all unsafe blocks
• Replace .unwrap() with .expect() or if-let in production code paths
• Remove unused dependencies: indicatif, hostname, whoami, dialoguer

Refactoring

• Split monolithic config.rs into focused submodules (defaults, deserialize, hooks, limits, resolve, sources, types, util)
• Narrow internal config visibility with pub(super) and #[serde(deny_unknown_fields)]

Downloads

SHA256 checksums are included in SHA256SUMS.