CHANGELOG.md

Version 1.3.3

• Decrease the time for the cli app to do things (Wesley Schwengle)
• 'blob_load' refactor (Wesley Schwengle)
• Fixed bug where logout requires login (Wesley Schwengle)
• Fix non-default PKG_CONFIG_PATH on macOS (Alyssa Ross)

Version 1.3.2

• Don't require using make (Eli Schwartz)
• Disable IPv6 support (Wesley Schwengle)
• Link against Brew Curl on MacOS (Tom Sullivan)
• Autogenerate versions from git (Wesley Schwengle/Eli Schwartz)
• Remove memory leak in config_path_for_type (Tom Sullivan)
• Install bash-completions in PREFIX dir (Wesley Schwengle)
• Include libgen.h for BSD builds (Tom Sullivan)
• Create subdirectories when determining config path (Tom Sullivan)
• Only show basename in usage (William Casarin)
• Fix segmentation fault on BSD while running make test (Björn Ketelaars)
• README.md updates:
  • Brew formula installation (Thomas Haggett)
  • Ubuntu Xenial dependencies (Nick Timkovich)
  • Debian stable/testing and Ubuntu dependencies (Wesley Schwengle)

Version 1.3.1

• Revert "pins: remove GlobalSign R1/R3 pins" from Robert Copeland
• Readme update from Wesley Schwengle
• Add Dockerfile to create a clean build environment from Wesley Schwengle
• Missing dependencies in readme
• Added CLion project files to ignore list

Version 1.3.0

• lpass show now supports --json format
• lpass show now supports --quiet flag to suppress prompts, from Pau Sanchez
• lpass import has --keep-dupes flag which will preserve duplicate accounts on import
• LPASS_PINENTRY environment variable may now be used to set custom path to pinentry, from Martynas Mickevičius
• Build fix for aarch64 and others from Natanael Copa
• New fish completions from Israel Chauca Fuentes
• Zsh completions from Richard Hillmann
• Brew build instructions updates from Roger D. Winans
• bugfix: site notes now show up in notes textarea instead of fields
• spelling fixes from Josh Soref

Version 1.2.2

• lpass ls --format now supports "%al" to show URL, from Yikai Zhao
• $VISUAL can be used in preference to $EDITOR, from Wesley Schwengle
• lpass edit can now directly edit multiline ssh keys
• fields are now preserved when edited with lpass edit
• Bugfix: use-after-free in http.c fixed, from Björn Ketelaars
• Bugfix: command-line completion now works for names with spaces
• Bugfix: loading attachments from shared folders now works, from Spencer Whyte
• Debian packing updates from Hannes Hörl
• Documentation updates from Darragh Grealish and Steven Liekens

Version 1.2.1

• Bugfix: fix regression with lpass show not displaying all fields for secure notes
• Use sysctl instead of procfs for pid-to-cmd on some versions of BSD, from Thomas Hurst
• Build: fix build for test binaries on OpenBSD, from Björn Ketelaars

Version 1.2.0

• lpass show now supports new-style multiline ssh keys
• lpass export now supports --fields=FIELDLIST argument to control output, with patches from Kyle Burton
• lpass ls now always shows empty shared folders
• lpass edit can now set the 'master password reprompt' field in sites
• lpass share create now shows the created share name
• Bugfix: crash in lpass show fixed by Kyle Burton
• build fixes for termux and documentation updates, from Christian Rondeau
• documentation updates for Ubuntu from Craig Menning and Glenn Oppegard
• Test suite now included covering basic operations

Version 1.1.2

• Bugfix: crash with lpass logout --color=never fixed
• Bugfix: lpass add with secure notes works again
• Bugfix: sort order in lpass ls is now consistent whether or not colors are used
• Documentation has been enhanced to describe aliases and more options, with patches by Eric B. Hymowitz.
• Build: debian package fixed for rebuild issues and missing build dependencies

Version 1.1.1

• Bugfix: fix crash in lpass show for secure notes without attachments
• Build: fix build on OpenBSD
• Build: fix build when using LibreSSL

Version 1.1.0

• New command lpass import can import an existing csv file (or output from lpass export into the vault
• lpass show and lpass ls learned a --format argument to enable user-specified printf-style formats
• Bash completions will now complete field names if --field is specified after the account name
• Build: cmake now used for building, by Filippo Cucchetto and with fixes by Eli Schwartz
• Build: lpass has been updated to work with OpenSSL 1.1; please note that libcurl-openssl must also be linked against the same version in order to avoid mysterious segfaults
• Bugfix: crash in lpass ls -l with no last_modified_gmt fixed
• Bugfix: secure notes editing with "Name" fields now works properly
• Bugfix: editing secure note names now works (github #106)
• Bugfix: lpass-created server secure notes are now compatible with the plugin
• Bugfix: generate now uses all defined characters, by Ignat Korchagin
• Bugfix: lpass show for ssh-key secure notes no longer corrupts password-protected ssh keys (github #232)

Version 1.0.0

• New command lpass status shows whether or not the user is logged in with agent, from Nick Knudson
• lpass add can now be passed --note-type=X in order to add a secure note using a template. Specifying an unknown note template will list the available templates.
• lpass ls now shows username with --long, from Alli Witheford
• Bash completions are now installed with make install, from Eli Schwartz
• Fish shell completions supplied by Joar Wanboarg
• Initial support for adding (lpass add --app) and editing applications
• Updates to manpage for ls, passwd, add, and basic usage examples
• lpass now follows XDG base directory specifications for its files on platforms that use it. Set LP_HOME to ~/.lpass to keep the previous location
• Bugfix: resolved syncing problems on some platforms (notably RHEL/CentOS) related to improper multiprocess usage of libcurl (github #166)
• Bugfix: lpass show no longer crashes when a searched-for field is not found (github #167)
• Bugfix: lpass no longer exits with an error if the blob is empty but otherwise without parsing errors. This fixes the case where a new user could not use the application without first adding a site elsewhere.
• LPASS_LOG_LEVEL learned level=8 with which lpass will also dump libcurl verbose logs showing all traffic for debugging (not recommended for general use due to potentially sensitive headers being logged).

Version 0.9.0

• Add support for accounts in the EU datacenter (lastpass.eu)
• lpass ls now sorts its output and properly displays group folder account entries
• lpass export output has been reworked to match that of the website, from Justen Walker
• lpass share limit subcommand was added which allows displaying and modifying user-specific restrictions for shared folders
• The new LPASS_LOG_LEVEL environment variable can be set to cause the lpass uploader process to log its actions, useful for debugging syncing issues. Set it to 7 to get all debug logs; the logfile will be ~/.lpass/lpass.log.
• Bugfix: syncing is fixed on systems that use XFS or other filesystems which do not support setting d_type in readdir()
• Bugfix: lpass mv now works properly with linked accounts

Version 0.8.1, 0.7.2, 0.6.1, 0.5.1

• This update to all recent versions switches to the platform certificate store and adds pinning of LastPass public keys, in preparation for certificate changes at lastpass.com. Upgrade will be needed to avoid "Peer certificate cannot be authenticated with given CA certificates" errors when the cert changes are made.

Version 0.8.0

• New command lpass add works like lpass edit for new accounts
• New command lpass mv can be used to move an account into a different (possibly shared) folder
• New command lpass passwd can be used to change master password
• Tab-completion for bash is now available; to use, source contrib/lpass_bash_completion from a bash startup file
• lpass ls now interprets backslash properly for subfolder display
• lpass edit gained the ability to edit all fields of an account at once by using a specially-formatted edit buffer
• lpass show gained the ability to show multiple accounts at once, from Angus Galloway
• lpass show now reformats SSH private key fields in secure notes into a usable form
• lpass share useradd gained the ability to specify group names
• lpass share got better documentation
• Bugfix: logins with certain multifactors that support out-of-band authentication will now work correctly
• Blob edits no longer reencrypt the entire database, just the changed accounts
• Syncing operation is now much more robust in the face of server errors or invalid transactions.
• OSX builds fixed for Xcode-less installations, with help from Wael Nasreddine
• Corrections to FSF address from Tom Prince

Version 0.7.1

• This bugfix release fixes a build issue on OSX platforms without XCode. It is otherwise identical to 0.7.0.

Version 0.7.0

• lpass now supports aliases in order to set preferred switches or nicknames for commands. echo 'show -G' > ~/.lpass/alias.show, for example, will turn regex matching on for lpass show.
• In addition to pinentry and in-process prompting, the LPASS_ASKPASS environment variable/config value is now checked for a binary to ask for passwords. It uses the same conventions as ssh-askpass.
• lpass show will now match account id when using regex or substring matching
• lpass ls learned the -l [-u]switches to show mod and use times, from Lloyd Zusman
• Secure notes are now created by default when empty sites are edited with --notes, from Lloyd Zusman
• The new LPASS_CLIPBOARD_COMMAND environment variable/config value can be used to configure the helper application for the system clipboard, from Tom Prince. Among other things, you can use this to clear the clipboard after a certain number of pastes with xclip -l.
• Various code cleanups and documentation fixes from Tom Prince.
• The license has been clarified to GPLv2 or later, plus the OpenSSL exception; please see individual files and the LICENSE.OpenSSL / COPYING files for details. This was the intended license all along but it was not spelled out consistently.

Version 0.6.0

• New share sub-command allows automating some common tasks with shared folders
• PBKDF2 speedups from Thomas Hurst
• Ungrouped entries now fall under "(none)" heading, from Gordon Celesta
• Documentation updates from Eli Young
• Cleanups from Björn Ketelaars

Version 0.5.1

• Update Thawte CA cert to support lastpass.com's new SHA-256 cert.

Version 0.5.0

• OpenBSD support
• Updated build/install instructions for Cygwin, Debian, and RPM-based distributions
• Regex and substring searching for cmd-show
• Secure note parsing and field display
• Fixes for pinentry errors and hangs