1.17.0-rc.2 / 2026-06-07

• [chore] Document stability for pkg/gopass (#3438)
• [chore] Update gopasspw/clipboard (#3436)
• chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#3458)
• chore(deps): bump docker/build-push-action from 7.1.0 to 7.2.0 (#3455)
• chore(deps): bump docker/login-action from 4.1.0 to 4.2.0 (#3459)
• chore(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 (#3452)
• chore(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#3456)
• chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#3453)
• chore(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 (#3454)
• chore(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#3457)
• chore(deps): bump step-security/harden-runner from 2.19.0 to 2.19.4 (#3451)
• chore: More output before and after long running release ops (#3433)
• feat(show): add configurable fuzzy-search fallback toggle (#3449)
• fix: Disable grype, the builder seems to be broken (#3463)
• fix: clip flag (-c) for cli/v3 GenericFlag compatibility (#3448)
• fix: store mount paths relative to home dir for cross-platform portability (#3439)
• fix: update bash completion flag for urfave/cli/v3 compatibility (#3441)
• fix: warn when recipient key is expired or unusable during encryption (#3443)
• otp: add noscreenshot build tag and document screen-capture scope (#3442)
• otp: hide --snip flag when built with noscreenshot tag (#3445)

1.17.0-rc.1 / 2026-05-17

This release contains a larger than usual amount of changes and few which might be considered breaking, thus bumping to 1.17 already. Please help us test this release before we publish 1.17.0 proper.

• [BUGFIX] Update fish completion to remove warning (#3339)
• [chore] Follow up to PR 3383 (#3410)
• [feat] Add --safe flag to set safecontent on demand (#3318)
• [fix] Support HW Age identities (#3389)
• age: fix YubiKey identity persistence via raw-append (ADR-0002) (#3399)
• bug: reload identities on unlock command (#3430)
• chore(deps): bump actions/cache from 4.3.0 to 5.0.3 (#3324)
• chore(deps): bump actions/cache from 5.0.3 to 5.0.4 (#3374)
• chore(deps): bump actions/cache from 5.0.4 to 5.0.5 (#3404)
• chore(deps): bump actions/checkout from 6.0.0 to 6.0.2 (#3326)
• chore(deps): bump actions/setup-go from 6.1.0 to 6.2.0 (#3329)
• chore(deps): bump actions/setup-go from 6.2.0 to 6.3.0 (#3349)
• chore(deps): bump actions/setup-go from 6.3.0 to 6.4.0 (#3367)
• chore(deps): bump actions/upload-artifact from 5.0.0 to 7.0.0 (#3347)
• chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#3403)
• chore(deps): bump anchore/sbom-action from 0.20.10 to 0.23.0 (#3348)
• chore(deps): bump anchore/sbom-action from 0.23.0 to 0.24.0 (#3376)
• chore(deps): bump anchore/scan-action from 7.2.1 to 7.3.2 (#3346)
• chore(deps): bump anchore/scan-action from 7.3.2 to 7.4.0 (#3372)
• chore(deps): bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 (#3368)
• chore(deps): bump dependabot/fetch-metadata from 2 to 3 (#3406)
• chore(deps): bump docker/build-push-action from 6.18.0 to 6.19.2 (#3342)
• chore(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 (#3377)
• chore(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 (#3407)
• chore(deps): bump docker/login-action from 3.6.0 to 3.7.0 (#3330)
• chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 (#3378)
• chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 (#3400)
• chore(deps): bump docker/metadata-action from 5.10.0 to 6.0.0 (#3375)
• chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (#3341)
• chore(deps): bump github/codeql-action from 4.31.6 to 4.32.4 (#3345)
• chore(deps): bump github/codeql-action from 4.32.4 to 4.35.1 (#3369)
• chore(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#3401)
• chore(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 (#3343)
• chore(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1 (#3402)
• chore(deps): bump msys2/setup-msys2 from 2.29.0 to 2.31.0 (#3370)
• chore(deps): bump msys2/setup-msys2 from 2.31.0 to 2.31.1 (#3408)
• chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.1 (#3373)
• chore(deps): bump step-security/harden-runner from 2.13.2 to 2.15.0 (#3344)
• chore(deps): bump step-security/harden-runner from 2.15.0 to 2.16.1 (#3371)
• chore(deps): bump step-security/harden-runner from 2.16.1 to 2.19.0 (#3405)
• chore(deps): migrate from urfave/cli v2 to v3 (#3428)
• chore(deps): switch from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#3362)
• docs(appdir): explain GOPASS_HOMEDIR override in UserHome comment (#3421)
• docs(architecture): add API Stability section clarifying module semver policy (#3422)
• docs(otp): document the various supported ways of adding OTP (#3323)
• docs: add gopass-secret-service to integrations list (#3356)
• docs: fix all documentation vs. implementation mismatches from code quality report
• docs: fully document wizard template format (I-7)
• feat(env): add --stdin, --file, and --exec modes to gopass env
• feat: add configurable show.hidden-keys for safecontent redaction
• feat: add gopass doctor diagnostic command (I-4)
• feat: machine-readable JSON output (I-3)
• feat: structured exit codes (I-2)
• feat: support -c=N to copy specific line to clipboard (#3386)
• fix(CI): moving to go 1.25 (#3322)
• fix(age-agent): handle AGE-PLUGIN-* identities to fix 'malformed secret key: mixed case' error (#3397)
• fix(backend): add storage.backend config key to lock backend selection (#3332) (#3398)
• fix(config): restore sub-store fallback for core.exportkeys (#3379)
• fix(copy): preserve directory structure when copying with trailing slash (#3396)
• fix(docs): removing reference to invalid 'gopass binary' command, and adding docs for 'fsmove' and 'fscopy' (#3321)
• fix(queue): fix Idle() TOCTOU race and Add() post-Close() panic
• fix(secparse): replace panic in MustParse with testing.TB.Fatalf (#3420)
• fix(setup): suppress auto-commit in gitfs when setup remote is specified (#2901) (#3391)
• fix(todos): resolve all stale TODOs from S-5
• fix: Configure .gitattributes based on the backend (#3427)
• fix: Correctly honor show.safecontent overrides in substores (#3337)
• fix: REPL tab-completion for entries with spaces (#3360)
• fix: Support strict character class enforcement in create templates (#3352)
• fix: add case-insensitive secret name normalization (#3390)
• fix: add thread safety to SSH identity cache (M-3)
• fix: address A-5, S-1, S-2, S-3, S-4, S-6 and I-1 from code quality audit
• fix: address CLI/UX issues from code quality audit
• fix: address all confirmed bugs from code quality report
• fix: fix lint issues and update tests for removed show -f/--force alias
• fix: recover from panic during shell completion with unknown flags (#3388)
• openbsd: allow unix sockets in pledge (#3381)
• refactor(action): split Action god object into focused handler types (A-1)
• refactor(ctxutil): replace context-key config system with typed structs (A-2)
• security: bound symlink walk to store root (H-2)
• security: document and warn on env command secret exposure (C-2)
• security: fix path traversal in fs storage layer (C-1)
• security: restrict template engine secret access and fix error leakage (H-1)
• security: validate editor binary exists before invocation (H-3)

1.16.1 / 2025-12-13

• chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#3299)
• chore(deps): bump actions/setup-go from 6.0.0 to 6.1.0 (#3300)
• chore(deps): bump anchore/sbom-action from 0.20.9 to 0.20.10 (#3296)
• chore(deps): bump anchore/scan-action from 7.1.0 to 7.2.1 (#3298)
• chore(deps): bump docker/metadata-action from 5.8.0 to 5.10.0 (#3297)
• chore(deps): bump github/codeql-action from 4.31.2 to 4.31.6 (#3295)
• chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 (#3302)
• chore(deps): bump step-security/harden-runner from 2.13.1 to 2.13.2 (#3301)
• fix(config): use the config propery generate.strict as default value for Strict rules (#3303)
• fix: Fix version check against latest release (#3292)

1.16.0 / 2025-11-12

• [BUGFIX] reorg: List all secrets instead of just top-level folders (#3245)
• [chore] Add capability and vulnerability checks (#3266)
• [chore] Initial fixes and added a warning for CryptFS and JJFS (#3270)
• [chore] Logging improvements (#3273)
• [chore] Run linux builds with multiple Go versions (#3272)
• [fix] Correctly handle IsGitCommit false in store.Move (#3246)
• [fix] Drop Go 1.23 (#3274)
• [fix] Fix clipboard issues (#3267)
• [fix] Fix version check (#3268)
• chore: Update golangci-lint (#3287)
• docs: Add GoDoc to pkg and improve markdown files (#3251)
• feat(age): Add unlock command to age agent (#3244)
• feat: Add cryptfs storage backend for filename encryption (#3249)
• feat: Clone remote on init (#3247)
• fix: Fix release helper and update capabilities for caplos (#3288)

1.15.18 / 2025-09-19

• [fix] Enable Windows builders (#3237)
• [fix] Fix recipient check error (#3235)
• [fix] Update gitconfig to v0.0.3 to pull in Windows fixes (#3236)
• [fix] Use Go 1.24 instead of Go 1.25 (#3226)
• docs: Add note about pass compatibility (#3229)
• feat: Add reorg command (#3232)
• feat: Allow to customize commit messages (#3231)
• feat: Improve usability of 'gopass mounts add' command (#3238)
• fix(config): Make core.exportkeys handling consistent (#3228)
• fix(gpg): Opportunistic key comparison on import (#3230)

1.15.17 / 2025-09-15

• [BUGFIX] Fix --force flag in recipients add (#3173)
• [chore] Add tests and comments for hasPwRuleForSecret (#3162)
• [chore] Automatically approve and merge dependabot PRs (#3220)
• [chore] Bump github.com/gopasspw/clipboard to v0.0.3 (#3219)
• [chore] Disable updating gopasspw.github.io (#3184)
• [chore] Expose gopass env in help (#3158)
• [chore] Fix hardened runner (#3196)
• [chore] Update Go versions (#3139)
• [chore] Update dependencies (#3197)
• [feat] Add Jujutsu storage backend (#3202)
• [feat] Honor generator options in the create workflow (#3149)
• [fix] Add workaround for pre-release test failures (#3198)
• [fix] Disable Windows tests (#3204)
• [fix] Fixes creation template lookup on Windows (#3157)
• [fix] avoid length prompt when input is within rule boundary (#3159)
• [fix] skip redundant confirmation when --edit is used (#3161)
• [fix] use WritePassword for secure write (#3200)
• [testing] use /usr/bin/env cat instead of /bin/cat (#3160)

1.15.16 / 2025-04-21

• [BUGFIX] Allow use of trailing slash for cp/mv command (#3080)
• [BUGFIX] Check if any usable key matches on clone (#3027)
• [BUGFIX] Fixed max length check for strings in create/wizard (#3056)
• [BUGFIX] Fixed password not saving to clipboard with safecontent and autoclip true (#3053)
• [BUGFIX] replace return of wrong error variable (#3015)
• [ENHANCEMENT] Add support for autocompletion with flags in REPL mode (#3057)
• [ENHANCEMENT] Make it possible to override show.autoclip (#3082)
• [FEATURE] Add option -r/--regex to find (#3083)
• [UX] Make single store sync more intuitive / verbose (#3076)
• [bugfix] Don't check for autosync on manual triggered sync (#3026) (#3029)
• [chore] Add keep-sorted linter (#3130)
• [chore] Add tpl func tests and fix two small issues (#3058)
• [chore] Do not run linters twice (#3119)
• [chore] Migrate goreleaser config to v2 (#3122)
• [chore] Migrate to golangci-lint v2 (#3104)
• [chore] Move gitconfig to their own repo (#3131)
• [chore] Move set from internal to pkg (#3129)
• [chore] Update dependencies (#3120)
• [feat] Add conditional includes for gitconfig (#3128)
• [feat] Add unconditional includes for gitconfig (#3127)
• [feat] Remove expensive and unmaintained zxcvbn-go strength checker (#3133)
• [feat] Replace clipboard library to support wl-copy args (#3123)
• [fix] Add LICENSE, Changelog, manpage and shell completions to deb and (#3121)
• [fix] Fix a flaky test (#3137)
• [fix] Fix debug.ModuleVersion (#3079)
• [fix] Fix test failure due to ambient variables (#3135)
• [fix] Fix test regressions (#3116)
• [fix] Fix this annoying test
• [fix] Include git commit hash in tarballs (#3124)
• [fix] Relase fixes (#3136)
• [fix] Update Makefile and fix lint violations (#3134)

1.15.15 / 2024-11-24

• [BUGFIX] Replace ~ with user homedir if $GOPASS_HOMEDIR is not set (#2961)
• [CLEANUP] Replace experimental maps and slices with stdlib (#2993)
• [CLEANUP] remove unreachable code (#2977)
• [DEPRECATION] Remove references to deprecated rand.Seed (#2953)
• [ENHANCEMENT] Allow for whitespace-trailing passwords (#2873) (#2954)
• [FEATURE] Adding support for age.Plugin identities (#2960)
• [FEATURE] Allow for non-interactive age setup (#2970)
• [FEATURE] Ask for setup if not initialized (#2975)
• [bugfix] Copy with trailing slash at destination. (#2966)
• [chore] use the same version of golangci-lint (#2948)

1.15.14 / 2024-08-03

• [bugfix] Fix parsing of key-value pairs according to the gitconfig (#2911)
• [chore] Update dependency to github.com/cenkalti/backoff/v4 (#2864)
• [chore] Update dependency to github.com/godbus/dbus/v5 (#2860)
• [chore] Update dependency to github.com/google/go-github/v61 (#2863)
• [chore] Update dependency to github.com/xhit/go-str2duration/v2 (#2865)
• [chore] Update hashicorp/golang-lru to v2 (#2859)

1.15.13 / 2024-04-06

• [bugfix] Default to true for core.exportkeys even in substores (#2848)
• [bugfix] Do not report findings with severity none in audit summary (#2843)
• [bugfix] Fix loading of git configs (#2849)
• [chore] Update dependencies (#2850)
• [chore] Use clean filepath in all of the fs.Set operation (#2846)
• [chore] use the same version of golangci-lint (#2841)
• [feat] Add an multi-line input type to the create wizard (#2847)
• [feat] Add option to disable notification icon (#2845)
• [feat] Add verbosity levels to the debug package (#2851)
• [fix] Disble safecontent parsing if noparsing is requested (#2855)
• [fix] Pass remote, if given, to local init as well (#2852)