v0.16.0

Prepare 0.16.0 release

v0.15.0

Prepare 0.15 release

v0.13.0

Changed

• Handle local packages more consistently

Fixed

• comment field serialization in trust proofs
• crate verify return code
• Stale documentation

v0.12.0

Changed

• Comment field handling in proofs and drafts

Fixed

• Documentation here and there
• Backfill kind field when deserializing old-format content
• --skip-known-owners and --skip-verified returning errors

Added

• Add config dir and repo dir

v0.11.0.p1

This is a release exactly like v0.11.0 but with CI fixed to produce windows binaries.

v0.11.0

Changed

• Change the proof format to simplify it and allow 3rd party "kinds" of them. The main goal is to
  support git-crev project: https://github.com/crev-dev/git-crev
• Tune tokei line counts to exclude tests and examples

Added

• Ability report the crate as unmaintained and/or list alternatives to it
• --target to crate verify to ignore crates not compiled on the given (default: current) target
• --for-id for cargo crev repo fetch trusted
• Autocompletion generation with config completions
• crate info subcommand to get some detailed info for a single dependency

Fixed

• Stale old-syntax commands in documentation
• Minor help messages

v0.10.1

Prepare v0.10.1 release

v0.10.0

Changed

• BREAKING: cargo crev <verb> <noun> was change to cargo crev <noun> <verb>
• Introduces one letter aliases for most (all?) commands
• Commands quering proofs will now print them as a multi-object yaml document for easier parsing
• Shortened =1.2.3 in latest_t to just =

Added

• id untrust and crate unreview to overwrite/clean errnous review/trust proofs
• crate mvp to discovering best reviewers
• crate search for looking up best reviewed dependency candidates
• crate verify --recursive
• CREV_PASSPHRASE_CMD for users of pass and similiar
• Multiple flags and arguments to narrow down crate verify scope
• Handling of --level <level> in many commands
• "Tips and tricks" in user documentation

v0.9.0

Small improvments and moving to github organization

cargo-crev-v0.8.0

Notably, this release introduces an User Guide and other user documentation. Also, static binaries compiled by the CI pipeline are now available. We're hopping these two items will help new users who would like to try cargo-crev.

For existing users, differential reviews should provide an efficient path to keep incrementally reviewing already trusted dependencies, as they are being updated.

Changed

• verify deps was renamed to just verify
• Closing draft editor without saving at least once will cancel proof creation.
• advisories system was revamped

Added

• Statically compiled release binaries
• User Documentation, including Getting Started Guide
• query dir command
• Differential reviews with diff and review --diff commands
• New options, particularly for verify