CHANGELOG

v1.13.5 - 2025-11-18

Changed:
- build: updating goreleaser config.

v1.13.4 - 2025-11-18

Changed:
- build: updating goreleaser config.

v1.13.3 - 2025-11-18

Added:
- certlib: introduce `Fetcher` for retrieving certificates.
- lib: `HexEncode` gains a byte-slice output variant.
- build: add GoReleaser configuration.

Changed:
- cmd: migrate programs to use `certlib.Fetcher` for certificate retrieval
  (includes `certdump`, `ski`, and others).
- cmd/ski: update display mode.

Misc:
- repository fixups and small cleanups.

v1.13.2 - 2025-11-17

Add:
- certlib/bundler: refactor certificate bundling from cmd/cert-bundler
  into a separate package.

Changed:
- cmd/cert-bundler: refactor to use bundler package, and update Dockerfile.

v1.13.1 - 2025-11-17

Add:
- Dockerfile for cert-bundler.

v1.13.0 - 2025-11-16

Add:
- cmd/certser: print serial numbers for certificates.
- lib/HexEncode: add a new hex encode function handling multiple output
  formats, including with and without colons.

v1.12.4 - 2025-11-16

Changed:

- Linting fixes for twofactor that were previously masked.

v1.12.3 erroneously tagged and pushed

v1.12.2 - 2025-11-16

Changed:

- add rsc.io/qr dependency for twofactor.

v1.12.1 - 2025-11-16

Changed:
- twofactor: Remove go.{mod,sum}.

v1.12.0 - 2025-11-16

Added
- twofactor: the github.com/kisom/twofactor repo has been subtree'd
  into this repo.

v1.11.2 - 2025-11-16

Changed
- cmd/ski, cmd/csrpubdump, cmd/tlskeypair: centralize
  certificate/private-key/CSR parsing by reusing certlib helpers.
  This reduces duplication and improves consistency across commands.
- csr: CSR parsing in the above commands now uses certlib.ParseCSR,
  which verifies CSR signatures (behavioral hardening compared to
  prior parsing without signature verification).

v1.11.1 - 2025-11-16

Changed
- cmd: complete linting fixes across programs; no functional changes.

v1.11.0 - 2025-11-15

Added
- cache/mru: introduce MRU cache implementation with timestamp utilities.

Changed
- certlib: complete overhaul to simplify APIs and internals.
- repo: widespread linting cleanups across many packages (config, dbg, die,
  fileutil, log/logging, mwc, sbuf, seekbuf, tee, testio, etc.).
- cmd: general program cleanups; `cert-bundler` lint fixes.

Removed
- rand: remove unused package.
- testutil: remove unused code.


v1.10.1 — 2025-11-15

Changed
- certlib: major overhaul and refactor.
- repo: linter autofixes ahead of release.


v1.10.0 — 2025-11-14

Added
- cmd: add `cert-revcheck` command.

Changed
- ci/lint: add golangci-lint stage and initial cleanup.


v1.9.1 — 2025-11-15

Fixed
- die: correct calls to `die.With`.


v1.9.0 — 2025-11-14

Added
- cmd: add `cert-bundler` tool.

Changed
- misc: minor updates and maintenance.


v1.8.1 — 2025-11-14

Added
- cmd: add `tlsinfo` tool.


v1.8.0 — 2025-11-14

Baseline
- Initial baseline for this changelog series.
