Skip to content

chore(deps): bump varlock from 0.7.4 to 1.4.0#101

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/varlock-1.4.0
Open

chore(deps): bump varlock from 0.7.4 to 1.4.0#101
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/varlock-1.4.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 30, 2026

Bumps varlock from 0.7.4 to 1.4.0.

Release notes

Sourced from varlock's releases.

varlock v1.4.0

  • #722 (minor) - Add shell tab completion via varlock complete
  • #718 (patch) - Fix repeated Touch ID prompts when using keychain() from Codex and other non-TTY agents by improving biometric session scoping for shallow process trees.
  • #724 (patch) - improve stray text handling on decorator lines - decorators after stray text are no longer silently ignored
  • #731 (patch) - Replace shell completion auto-install in init with link to docs guide
  • #719 (patch) - Add Varlock agent skill at skills/varlock/SKILL.md for installation via npx skills add dmno-dev/varlock.

Published to

varlock v1.3.0

  • #708 (minor) - unified error handling with severity levels
  • #713 - include plugin loading errors in DataSource.errors getter
  • #711 - Fix varlock encrypt on WSL

varlock v1.2.0

No changelog entries.

varlock v1.1.0

No changelog entries.

varlock@1.0.0

2026-04-29

  • #666 - fix: explicit per-item decorators now take priority over @defaultSensitive/@​defaultRequired from other files
  • #567 - Built-in local encryption utilities - let's get everything out of plaintext!
    • Add built-in varlock() resolver for local device-bound encryption using tiny native binaries
      • macOS via Swift/Secure Enclave
      • Windows via Windows Hello/TPM (+WSL2 support)
      • Linux via TPM2/keyring
    • Add varlock encrypt command with stdin support
    • Add varlock reveal command
    • Add varlock lock command to clear local session unlock
    • Add keychain() resolver for built-in macOS Keychain support

varlock v0.9.1

No changelog entries.

... (truncated)

Changelog

Sourced from varlock's changelog.

1.4.0

2026-05-29

  • #722 (minor) - Add shell tab completion via varlock complete
  • #724 (patch) - improve stray text handling on decorator lines - decorators after stray text are no longer silently ignored
  • #718 (patch) - Fix repeated Touch ID prompts when using keychain() from Codex and other non-TTY agents by improving biometric session scoping for shallow process trees.
  • #719 (patch) - Add Varlock agent skill at skills/varlock/SKILL.md for installation via npx skills add dmno-dev/varlock.
  • #731 (patch) - Replace shell completion auto-install in init with link to docs guide

1.3.0

2026-05-24

  • #708 - unified error handling with severity levels
  • #711 (patch) - Fix varlock encrypt on WSL
  • #713 (patch) - include plugin loading errors in DataSource.errors getter

1.2.0

2026-05-11

  • #569 Thanks @​danish-fareed! - add code env scanner and audit command with @auditIgnore / @auditIgnorePaths decorators
  • #695 (patch) - Add --agent flag for init and load

1.1.0

2026-05-02

  • #681 - Add --summary-stderr/--summary-file flags to varlock load and fullResult option to execSyncVarlock
  • #644 - Add @​deprecated item decorator with strikethrough display in pretty output and @​deprecated JSDoc in generated TypeScript types
  • #675 (patch) - fix biometric session scoping for non-TTY processes
  • #679 (patch) - wsl standalone binary fixes

1.0.0

2026-04-29

  • #666 - fix: explicit per-item decorators now take priority over @defaultSensitive/@​defaultRequired from other files
  • #567 - Built-in local encryption utilities - let's get everything out of plaintext!
    • Add built-in varlock() resolver for local device-bound encryption using tiny native binaries
      • macOS via Swift/Secure Enclave
      • Windows via Windows Hello/TPM (+WSL2 support)
      • Linux via TPM2/keyring
    • Add varlock encrypt command with stdin support
    • Add varlock reveal command
    • Add varlock lock command to clear local session unlock
    • Add keychain() resolver for built-in macOS Keychain support

0.9.1

2026-04-22

  • #630 22629d3 Thanks @​app/copilot-swe-agent! - varlock scan now accepts optional positional path/glob arguments to scan specific files, directories, or glob patterns instead of the whole repo. This is useful for scanning build output folders (e.g. dist, .next) to ensure no secrets leaked into what will be published.

... (truncated)

Commits
  • fe18749 Version packages (#725)
  • 352bbaf fix: replace shell completion auto-install with docs link (#731)
  • 28ed45b fix biometric session timeout for non-TTY agents (#718)
  • 208b26b add shell completion and docs (#722)
  • 4b40ddb fix: better trailing decorator text handling + bun exec docs fix (#724)
  • 0eae13e Version packages (#712)
  • 29f24cc fix: include plugin loading errors in DataSource.errors getter (#713)
  • a1e6a2a refactor: unified error handling with severity levels (#708)
  • f15b1d9 fix: varlock encrypt ENOENT crash on WSL2 (#711)
  • 15c112a test: add exec unit tests and varlock run smoke tests (#707)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 30, 2026
@github-actions github-actions Bot enabled auto-merge (squash) May 30, 2026 02:13
Bumps [varlock](https://github.com/dmno-dev/varlock/tree/HEAD/packages/varlock) from 0.7.4 to 1.4.0.
- [Release notes](https://github.com/dmno-dev/varlock/releases)
- [Changelog](https://github.com/dmno-dev/varlock/blob/main/packages/varlock/CHANGELOG.md)
- [Commits](https://github.com/dmno-dev/varlock/commits/varlock@1.4.0/packages/varlock)

---
updated-dependencies:
- dependency-name: varlock
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/varlock-1.4.0 branch from 96d51b2 to f9d08c9 Compare May 30, 2026 02:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants