Changelog
A record of every release, feature, and fix.
v0.9.12026-03-24
- changedCHANGELOG — added missing Tier 4–6 feature entries to the v0.9.0 record
- changedWeb landing site — added 11 feature cards, 3 MCP tool groups (15 tools), 8 architecture modules; updated counts
- changedWeb changelog — synced with CHANGELOG.md
- changedStats — removed Tiers and Platforms cards; kept MCP Tools and Quantum Features
v0.9.02026-03-22
- addedComposite / Templated Secrets — `{{OTHER_KEY}}` placeholders in connection strings resolve dynamically on read
- addedUser Approvals (Zero-Trust Agent) — HMAC-verified, scoped, time-limited approval tokens for sensitive MCP reads
- addedJIT Provisioning — dynamically generate short-lived tokens on read (AWS STS, Generic HTTP)
- addedSecure Execution & Auto-Redaction — `qring exec` injects secrets with automatic stdout/stderr redaction
- addedExec Profiles — `unrestricted`, `restricted`, and `ci` profiles for command execution policy
- addedCodebase Secret Scanner — `qring scan` detects hardcoded credentials via regex + Shannon entropy
- addedSecret-Aware Linter — `qring lint --fix` auto-replaces hardcoded values with `process.env.KEY` references
- addedAgent Memory — encrypted persistent key-value store across AI agent sessions
- addedProject Context — safe, redacted project overview for agent system prompts
- addedPre-Commit Secret Scanning — `qring hook:install` blocks commits containing hardcoded secrets
- addedSecret Analytics — `qring analyze` reports usage patterns and rotation recommendations
- addedService Setup Wizard — `qring wizard` scaffolds service integrations in one command
- addedGovernance Policy — `.q-ring.json` policy engine for MCP tool gating, key access, and exec restrictions
- addedTeam & Org Scopes — `--team` and `--org` flags with cascade resolution (project → team → org → global)
- addedIssuer-Native Rotation — `qring rotate` attempts provider-native rotation before falling back to local generation
- addedCI Secret Validation — `qring ci:validate` batch-validates all secrets with structured pass/fail output
- addedTamper-Evident Audit — `qring audit:verify` checks SHA-256 chain integrity; `qring audit:export` outputs jsonl/json/csv
- addedShared HTTP client for validation/hooks; SSRF mitigation for HTTP hooks (private IP block; Q_RING_ALLOW_PRIVATE_HOOKS override)
- addedNext.js site refresh — Tailwind v4, Motion, /docs, /changelog, mobile nav, copyable terminals, stats, interactive architecture
- changedMCP server tool count increased from 31 to 44
- changedDashboard routing, SSE backpressure, CORS, offline-safe HTML
v0.4.02026-03-22
- addedSecret Liveness Validation — `qring validate` tests secrets against live services (OpenAI, Stripe, GitHub, AWS, Generic HTTP)
- addedHooks on Secret Change — shell commands, HTTP webhooks, or process signals on write/delete/rotate
- added`.env` file import — `qring import .env` parses dotenv syntax and bulk-stores secrets
- addedProject Secret Manifest — `.q-ring.json` for declaring required secrets
- addedEnv File Sync — `qring env:generate` produces .env from manifest
- addedDisentangle command, Selective export, branchMap globs, Configurable rotation, Secret search/filtering
- changedMCP tool count increased from 20 to 31
v0.3.22026-03-21
- securityResolved 8 CodeQL `js/clear-text-logging` alerts by sanitizing keyring metadata
v0.3.12026-03-21
- fixedDashboard re-rendering — cards now update in-place via differential DOM patching
- fixedAudit log noise — `qring list` from dashboard no longer generates audit entries
- changedIncreased dashboard font sizes for readability
- changedReplaced dashboard header icon with project icon
v0.3.02026-03-21
- addedQuantum Status Dashboard — live SSE dashboard with 8 panels at `qring status`
- addedMCP `status_dashboard` tool for AI agents
- addedMCP Registry support, GitHub issue templates, SECURITY.md
- fixedShebang and bin paths corrected
v0.2.72026-03-20
- addedInitial public release with quantum keyring core, MCP server (20 tools), and CLI
- addedSuperposition, entanglement, tunneling, teleportation, decay, observer, and agent features
- addedGitHub Pages landing site, Glama integration