[pass] [ANNOUNCE] pass v1.5 released, with support for 'team pass'

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi folks, Pass is the standard unix password manager. We have just finished version 1.5. This is a massive release, coming around 18 months since our last. We've incorporated tons of fixes and added some nice new features, including the much demanded "team pass" support, allowing pass to be used with multiple gpg keys in a variety of settings. == Password Store on the Web == * Our homepage: <http://www.zx2c4.com/projects/password-store/> * Man page: <http://git.zx2c4.com/password-store/about/> * Git repository: <http://git.zx2c4.com/password-store/> <git://git.zx2c4.com/password-store> * Mailing list: <http://lists.zx2c4.com/mailman/listinfo/password-store> <mailto:password-store at lists.zx2c4.com> Without further ado, here's what's new in version 1.5. == Features == * Team pass is now possible! At last! Each .gpg-id file may contain multiple IDs, separated by a new line, and `pass init` now takes multiple options for specifying multiple keys with which to populate .gpg-id. * Different directories may now have their own .gpg-id, and `pass init` has now learned a -p/--path switch for writing this file. This may be used to have different access permissions for different sub-folders. * All temporary files, even ones that exist merely in a tmpfs ram disk, are overwritten with random data before deletion, using shread or wipe, depending on the platform. * If git is in use, all commits can be signed with the "user.signingkey" ID if "pass.signcommits" is enabled in git-config. This protects against remote tampering. * Clipboard selection can now be overwritten using the PASSWORD_STORE_X_SELECTION environment variable, and the timeout time before restoring the clipboard can be overwritten using PASSWORD_STORE_CLIP_TIME. * The umask can now be overwritten with the PASSWORD_STORE_UMASK environment variable. * gpg v1 can be used, in addition to the already supported v2 == Bug Fixes == * Do not race between clipboard restoration instances at once * We now properly follow symlinks with tree and with reencryption * Fix conflict between passwords and directories with the same name * Bash completion goes in the correct folder * Many bash and sed simplifications and optimizations * `mktemp` now uses the correct argument order * We no longer use GPG compression, due to security concerns * Documentation improvements * Bash, zsh, and fish completion clean-ups * Lots of import script fixes * Non-recursive makefile * On re-encryption in `pass init`, a pipe failure no longer blanks file == New Import Scripts from Contributors === * KED password manager * Revelation password manager * Keepass2 password manager * Gorilla password manager * Pwsafe password manager == Other Contributed Projects == * A firefox plugin <https://github.com/jvenant/passff#readme> * An iOS app <https://github.com/rephorm/pass-ios#readme> * A dmenu script <https://github.com/cdown/passmenu#readme> Moving forward we've got some nice things planned, such as finally adding a `pass search` command, and other commonly requested features. == Downloading v1.5 == * <http://git.zx2c4.com/password-store/snapshot/password-store-1.5.tar.xz> 766915f15ad7b5e94b720d62fca5bf4acae961c2 (sha1) ca094372e1eec8c857b2f6ace09fb723 (md5) * The tag 1.5 is signed with my gpg key: <http://zx2c4.com/keys/AB9942E6D4A4CFC3412620A749FC7012A5DE03AE.asc> Thanks to all the contributors who made this release happen! There's been a lot of churn this release, so if I've broken anything, expect a .1 soon. In either case, packagers: bump your packages. Jason -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJTSZS8AAoJEEn8cBKl3gOuXz8QALft6O/gxQYK9qUXM5Rg9iyN ZCvUxRxReBc3jsmDOjBpXe7rQQWWjDhb2qix+F/LFPuPQ6yLp2R5oMpkEGuY9v/R bsBq3jRee4VqOemI5QvwEM+qX+jQu3J4hCx++0NuiqEQV99e0R3wQsiPpVe8gSMm KsiAZECalLfbT3f8nxqSGezAO8XERN8xDW/Uvgvwh8k/MhRp48lrhr0BoxXA6EgX bX2wzvU76IWzHitmj+qEIiyqUIkTNViHD9lRwl8le1ir9MR1DIkLDvZpsRfvIZaJ YlkEvBRWsjVIQmLLMKkKyG+2fbm8dfoKGeTv0mtuVhazEmqZaie/A09c0tEfQc+u OhYfEtub7oMY8aEMOC64ggJk66gGxu3dwSP28Ijcd85P1xdznssEr0Cckq43eXyA KteD4+4wbZm6WFckDdTHWIH9yBzb1Z7b4bh27d9ZNq4w6uoRniHRU1bDdfarGiNr JRFK9NHFtlcKH/jKkN+bnRBIM0/V9YGbHp0hRkDJp9hR8LoPBBGUbJmmTt099wsm CGz+yufG03IblMnZ7ilU2e0LIrfZMGCDGDcbn3f0OqiY3sy4nVDovuYQsbRhN6tr SzFTIE6GkaLfh5zaNana8/GyfE9aW+8bc+TLeThcffna5gJ6XYNj6n2LBApmSZJD WH7FCFQCAY74RW9PlrDY =qdBY -----END PGP SIGNATURE-----