CHANGELOG

v1.12.0 - 2025-11-16

Added
- twofactor: the github.com/kisom/twofactor repo has been subtree'd
  into this repo.

v1.11.2 - 2025-11-16

Changed
- cmd/ski, cmd/csrpubdump, cmd/tlskeypair: centralize
  certificate/private-key/CSR parsing by reusing certlib helpers.
  This reduces duplication and improves consistency across commands.
- csr: CSR parsing in the above commands now uses certlib.ParseCSR,
  which verifies CSR signatures (behavioral hardening compared to
  prior parsing without signature verification).

v1.11.1 - 2025-11-16

Changed
- cmd: complete linting fixes across programs; no functional changes.

v1.11.0 - 2025-11-15

Added
- cache/mru: introduce MRU cache implementation with timestamp utilities.

Changed
- certlib: complete overhaul to simplify APIs and internals.
- repo: widespread linting cleanups across many packages (config, dbg, die,
  fileutil, log/logging, mwc, sbuf, seekbuf, tee, testio, etc.).
- cmd: general program cleanups; `cert-bundler` lint fixes.

Removed
- rand: remove unused package.
- testutil: remove unused code.


v1.10.1 — 2025-11-15

Changed
- certlib: major overhaul and refactor.
- repo: linter autofixes ahead of release.


v1.10.0 — 2025-11-14

Added
- cmd: add `cert-revcheck` command.

Changed
- ci/lint: add golangci-lint stage and initial cleanup.


v1.9.1 — 2025-11-15

Fixed
- die: correct calls to `die.With`.


v1.9.0 — 2025-11-14

Added
- cmd: add `cert-bundler` tool.

Changed
- misc: minor updates and maintenance.


v1.8.1 — 2025-11-14

Added
- cmd: add `tlsinfo` tool.


v1.8.0 — 2025-11-14

Baseline
- Initial baseline for this changelog series.