nexus

Files

T

Andy Dixon 9ebfe57301 fix: refuse vaults without a verifier

Unlock now always checks the verifier, so an empty vault can never
accept a wrong master password and the 'verify against the first entry'
fallback for Go/older vaults is gone. A vault without a verifier is
refused with a message naming the file to remove (SEC-20261012-016).
The Go vault fixture and its test go with it.

2026-10-12 10:08:29 +01:00

.cargo

ci: least-privilege token, SHA-pinned actions, cargo audit job

2026-10-12 09:19:57 +01:00

app

refactor: drop the Alchementary Link data migration

2026-10-12 10:05:07 +01:00

core

fix: refuse vaults without a verifier

2026-10-12 10:08:29 +01:00

packaging

rust: packaging (Linux desktop entry, macOS bundle), cargo release script with update manifests, CI