2025.12.0

Important

This release moves the key derivation function into the library. This required a breaking change in the API!

What's Changed

• Bump minimum Python version to 3.11 (#109) @emontnemery
• Bump version to 2025.12.0 (#108) @agners
• Move key derivation to library (#104) @agners
• Bump pytest from 9.0.0 to 9.0.1 (#103) @dependabot
• Bump version to 2025.12.0b0 (#106) @agners
• Add version number validation step (#105) @agners
• Bump black from 25.1.0 to 25.11.0 (#101) @dependabot
• Bump pytest from 8.4.2 to 9.0.0 (#102) @dependabot
• Bump pytest from 8.4.1 to 8.4.2 (#99) @dependabot
• Bump flake8 from 7.2.0 to 7.3.0 (#98) @dependabot
• Bump pytest from 8.4.0 to 8.4.1 (#97) @dependabot
• Bump pytest from 8.3.5 to 8.4.0 (#96) @dependabot
• Bump flake8 from 7.1.2 to 7.2.0 (#94) @dependabot
• Bump pytest from 8.3.4 to 8.3.5 (#93) @dependabot

2025.12.0b0

What's Changed

• Bump version to 2025.12.0b0 (#106) @agners
• Add version number validation step (#105) @agners
• Bump black from 25.1.0 to 25.11.0 (#101) @dependabot
• Bump pytest from 8.4.2 to 9.0.0 (#102) @dependabot
• Bump pytest from 8.4.1 to 8.4.2 (#99) @dependabot
• Bump flake8 from 7.2.0 to 7.3.0 (#98) @dependabot
• Bump pytest from 8.4.0 to 8.4.1 (#97) @dependabot
• Bump pytest from 8.3.5 to 8.4.0 (#96) @dependabot
• Bump flake8 from 7.1.2 to 7.2.0 (#94) @dependabot
• Bump pytest from 8.3.4 to 8.3.5 (#93) @dependabot

2025.2.1

What's Changed

• Bump version to 2025.2.1 (#92) @agners
• Wrap errors in atomic_contents_add (#91) @emontnemery
• Always create inner secure tar with write file mode (#90) @agners
• Bump flake8 from 7.1.1 to 7.1.2 (#89) @dependabot

2025.2.0

What's Changed

• Bump version to 2025.2.0 (#88) @agners
• Fix and improve the README.md files (#86) @agners
• Allow to use SecureTarFile without context manager (#87) @agners
• Bump black from 24.10.0 to 25.1.0 (#84) @dependabot

2025.1.4

What's Changed

• Bump version to 2025.1.4 (#83) @agners
• Add encryption helper (#81) @emontnemery
• Sanitize read size in DecryptInnerTar.read (#82) @emontnemery
• Allow passing in a pre-defined nonce when encrypting (#80) @emontnemery

2025.1.3

Important

This release adds a new file header for encrypted tar files. This makes the file format not backwards compatible! The library can read the old format still.

What's Changed

• Bump version to 2025.1.3 (#79) @agners
• Replace custom PAX headers with a file header (#78) @emontnemery

2025.1.2

What's Changed

• Bump version to 2025.1.2 (#77) @agners
• Validate inner tar when decrypting (#75) @emontnemery
• Correct read of tail in DecryptInnerTar (#76) @emontnemery
• Improve tests (#74) @emontnemery
• Correct ciphertext size calculation in DecryptInnerTar (#73) @emontnemery

2025.1.1

Note

This version has a breaking change in the atomic_contents_add() API. Instead of a list a filter function is now expected.

What's Changed

• Bump version to 2025.1.1 (#72) @agners
• Modify atomic_contents_add to accept a filter function (#71) @emontnemery

2025.1.0

Note

This version has a slightly different handling of padding for encrypted tar files. For inner encrypted tar files, a PAX header _securetar.version with value 2.0 is added to indicate the new format. The library itself is backwards compatible since Python tarfile is not checking gzip footer and/or does not read past the tar end-of-file marker.

What's Changed

• Bump version to 2025.1.0 (#70) @agners
• Add header with securetar version (#69) @emontnemery
• Store size of plaintext as custom header (#67) @emontnemery
• Update typing of SecureTarFile construct to allow None name (#68) @emontnemery
• Fix mistake in test (#66) @emontnemery
• Add decryption helper (#65) @emontnemery
• Bump pytest from 8.3.3 to 8.3.4 (#63) @dependabot
• Improve padding when writing encrypted tar (#64) @emontnemery

2024.11.0

What's Changed

• Bump version (#62) @joostlek
• Use modern type annotations (#61) @emontnemery
• Bump minimum support Python version to 3.10 (#60) @emontnemery
• Bump Python version used in tests (#57) @emontnemery
• Fix compatibility with Python 3.13 (#58) @emontnemery
• Move project metadata to pyproject.toml (#56) @cdce8p
• Bump black from 24.8.0 to 24.10.0 (#55) @dependabot
• Bump pytest from 8.3.2 to 8.3.3 (#54) @dependabot
• Bump black from 24.4.2 to 24.8.0 (#51) @dependabot
• Bump pytest from 8.2.1 to 8.3.2 (#50) @dependabot
• Bump flake8 from 7.0.0 to 7.1.1 (#52) @dependabot
• Bump black from 24.4.1 to 24.4.2 (#44) @dependabot
• Bump pytest from 8.2.0 to 8.2.1 (#46) @dependabot
• Bump pytest from 8.1.1 to 8.2.0 (#45) @dependabot
• Bump black from 24.3.0 to 24.4.1 (#42) @dependabot
• Bump black from 24.2.0 to 24.3.0 (#39) @dependabot
• Bump pytest from 8.0.2 to 8.1.1 (#38) @dependabot
• Bump pytest from 8.0.1 to 8.0.2 (#37) @dependabot