<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>secretgenerator releases</title>
    <link>https://secretgenerator.org/</link>
    <atom:link href="https://secretgenerator.org/releases.xml" rel="self" type="application/rss+xml" />
    <description>Release announcements for the auditable random credential generator. Each item links to the signed GitHub release and its release notes.</description>
    <language>en-us</language>
    <lastBuildDate>Sun, 03 May 2026 23:19:12 GMT</lastBuildDate>
    <generator>secretgenerator/web/scripts/build-releases-rss.mjs</generator>
    <item>
      <title>v2.0.0 — secretgenerator 2.0.0</title>
      <link>https://github.com/rafaelperoco/secretgenerator/releases/tag/v2.0.0</link>
      <guid isPermaLink="true">https://github.com/rafaelperoco/secretgenerator/releases/tag/v2.0.0</guid>
      <pubDate>Sun, 03 May 2026 17:06:21 GMT</pubDate>
      <dc:creator>github-actions[bot]</dc:creator>
      <description><![CDATA[## secretgenerator 2.0.0

Auditable random password generator for AI agents. Verified release with SLSA Level 3 provenance, SBOM, and cosign keyless signatures.

See [docs/AUDIT.md](docs/AUDIT.md) for end-to-end verification instructions.

## Changelog
* 5b9974a3b778940595d656c114bc452cc3858243 Merge: publish mcp and cli to npm from release pipeline (#20)
* 80df84263272feee292d61c04e81de7c18821e4b publish mcp and cli npm packages from release pipeline with version sync to tag
* 437393b29c059de64b9d872347afa613a9ee4e29 Merge: @secretgenerator/cli npm wrapper with verified postinstall (#19)
* 3a401d8842c815a5fbeac8f1047259291bf0912c add cli npm wrapper that downloads verified release binary on postinstall with sha256 and cosign keyless verification
* 5386e1834bc44d75c59f3a0ad2929a458bf036a7 Merge: --help-json persistent flag for agent CLI introspection (#18)
* 3e6be7ab67077b28e77c7c97b6f80ea4d196ee12 raise MaxClassRetries from 100 to 1000 to eliminate ci flake on 4-char all-classes test
* de55e51eb3ba14fe018f32e0edefaf40c88bc49d add help-json persistent flag emitting openapi-style command introspection json
* 8c545260914978ea7805e4e51645e2de626a8ca8 Merge: structured JSON error envelope + stable error code registry (#17)
* d8cf7a91edf2fc9db1f8c33f55b868cc764cf6ac add unit tests for errCtx fail json mode failJSON exitToCode to clear coverage gate
* b56979516a3d9feb9be65cabb19e1cba529b97ba remove accidentally committed local binary
* e1422233e915fa0467f4cfcca30cb53e907369d7 emit structured json error envelope in json mode with stable error code registry
* 5ed124987f3d17b1f627ff514420ac6d9330ac59 Merge: MCP server @secretgenerator/mcp (#16)
* dc76b4ec5840890cdc6c2689d43bcd00e4fb131f add mcp server package with wasm bundle exposing eight tools to claude cursor cline zed and other mcp clients
* 543105f92922c9b141af2becef0d1598ea96fa0a Merge: schema.org JSON-LD and Open Graph image (#15)
* 955b152561233f5e987a207e08c346afc17e4060 add og image generated by satori and schema.org json-ld in base layout
* 2a465ce2bacb932a323d87fb86761f6c64299707 Merge: llms.txt + llms-full.txt + robots.txt for AI agent discovery (#14)
* 1261e8d33ea9da1dea830fc395286950101d60c2 add llms.txt llms-full.txt and robots.txt generated from cli help and docs at build time
* 0fb66a2aca28368641aa5bc9d42c871e0842d8a2 fix mobile layout entropy band classifier stacked threat cards wrap pre blocks instead of horizontal scroll
* 39ced550b8ab71381657cb1f53fc708d46ed9b99 fix mobile horizontal scroll with safe paddings overflow clamps and stacked threat table on small screens
* 153bbc9443f7b1a60192a50960d5e805a71f0c8e Merge: TinyGo WASM client-side generator (#12)
* 1609c5eecc32a93db117c0e2482d3c918b0b896c add tinygo wasm client-side generator with react island and crack-time table
* aca1b6e934fc95a8a7efdb00fadc1648bde5ffcc remove enablement true now that pages is provisioned via api
* d2073dfc1bb45ee164d953c6eeb8b2819f0c102c fix web-deploy enable github pages on first run via configure-pages enablement true
* 70275b152b7632d9b61fb96ee53f2306b72828bc Merge: Astro landing page with GitHub Pages deploy (#11)
* 2422c4eccf42f9fe7ee006877e7df81aeb903fd5 add astro tailwind landing page with github pages deploy workflow and cname

**Verify this release**:

```
cosign verify-blob \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp "https://github.com/rafaelperoco/secretgenerator" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt
```

]]></description>
    </item>
    <item>
      <title>[pre-release] v2.0.0-alpha.11 — secretgenerator 2.0.0-alpha.11</title>
      <link>https://github.com/rafaelperoco/secretgenerator/releases/tag/v2.0.0-alpha.11</link>
      <guid isPermaLink="true">https://github.com/rafaelperoco/secretgenerator/releases/tag/v2.0.0-alpha.11</guid>
      <pubDate>Sat, 02 May 2026 19:19:41 GMT</pubDate>
      <dc:creator>github-actions[bot]</dc:creator>
      <description><![CDATA[## secretgenerator 2.0.0-alpha.11

Auditable random password generator for AI agents. Verified release with SLSA Level 3 provenance, SBOM, and cosign keyless signatures.

See [docs/AUDIT.md](docs/AUDIT.md) for end-to-end verification instructions.

## Changelog
* 853c3487d57482ca97939cfa50e76c9f43bcb984 Merge: rename project keygenerator to secretgenerator (#10)
* e7c218804eabacec205a3ce9066b5c1d466ab532 rename project keygenerator to secretgenerator across module path binary container brand and docs

**Verify this release**:

```
cosign verify-blob \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp "https://github.com/rafaelperoco/secretgenerator" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt
```

]]></description>
    </item>
    <item>
      <title>[pre-release] v2.0.0-alpha.10 — keygenerator 2.0.0-alpha.10</title>
      <link>https://github.com/rafaelperoco/secretgenerator/releases/tag/v2.0.0-alpha.10</link>
      <guid isPermaLink="true">https://github.com/rafaelperoco/secretgenerator/releases/tag/v2.0.0-alpha.10</guid>
      <pubDate>Sat, 02 May 2026 14:02:29 GMT</pubDate>
      <dc:creator>github-actions[bot]</dc:creator>
      <description><![CDATA[## keygenerator 2.0.0-alpha.10

Auditable random password generator for AI agents. Verified release with SLSA Level 3 provenance, SBOM, and cosign keyless signatures.

See [docs/AUDIT.md](docs/AUDIT.md) for end-to-end verification instructions.

## Changelog
* 0b9641504d06bb55b6d2532a2842c17e1e852160 fix release add security-events write permission and unblock slsa hashes with always
* 4c2afbbe7430316e9a5a2be805b8dee0888d1722 fix release sarif upload single category and unblock slsa hashes when sarif fails
* 4322e55afa4d5fbaf1bf9ca4b6832191c7ba95ea fix release container scan tag mismatch goreleaser strips v prefix
* 3db2923b46c43403284084a98eca7750b89348fb bump go toolchain to 1.26.2 to fix nine stdlib cves detected by trivy gate
* 4d7288f7f129cdb0f7c1b956548de737849f54b6 fix release pipeline trivy install via direct curl and brew skip when tap token absent
* 8a07725b85581afd19ed6311aabb4159043ef9d3 Merge v2.0.0: auditable standard for AI-agent password generation (#3)
* fc134227e315c794e05abf365e24709ac2e4952c document codeql default setup false positive resolution in contributing guide
* 0ff1024862746e04e7566176cf0e1d19ad56cd77 fix trivy action v prefix passphrase capitalize test windows audit log mode skip
* c52a777e39bf26e78d6e8860e3bbeaad4a611324 fix trivy action and setup-trivy version pins and windows e2e binary suffix
* 649bc7c1a53603f2d999f9d29b8a51d485dd4b10 fix ci windows wordlist crlf trivy action version golangci-lint v8 minimum and document codeql audit fingerprint exclusion
* 8bdc1632e93f0ac431f034a75593769696ec7032 add public pkg/keygen api crack-time estimates security threat model crypto compliance docs schema reference subcommands reference contributing changelog
* 1b43032d027b299341ac413789165710c540b771 add goreleaser distroless container slsa cosign sbom trivy supply chain
* 7b9630f7c43f3de81ec901c22bb897c7cec1eb4d add chi-squared fuzz e2e tests json schema golangci-lint v2 ci workflows govulncheck codeql dependabot
* ef4066cf85d565512a08f4787b7b3cb64ea68fe0 add passphrase subcommand with embedded EFF Large wordlist (8 words default)
* 8fd042a5631e76b67ddba9a15a8a4527894f05dc add secret api-key pin entropy subcommands inheriting schema-v1 contract
* d3e8c00585903bec5ce7f537cb4973f733449f45 implement v2 correctness fixes and JSON audit contract
* e98d650026c48593d3f43c049510efb54cb8c310 refactor module into cmd/internal packages with v1 behavior parity

**Verify this release**:

```
cosign verify-blob \
  --certificate checksums.txt.pem \
  --signature checksums.txt.sig \
  --certificate-identity-regexp "https://github.com/rafaelperoco/keygenerator" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt
```

]]></description>
    </item>
    <item>
      <title>1.0.0</title>
      <link>https://github.com/rafaelperoco/secretgenerator/releases/tag/1.0.0</link>
      <guid isPermaLink="true">https://github.com/rafaelperoco/secretgenerator/releases/tag/1.0.0</guid>
      <pubDate>Tue, 27 Feb 2024 18:56:33 GMT</pubDate>
      <dc:creator>rafaelperoco</dc:creator>
      <description><![CDATA[## Changelog
* 36539fb Update README.md with keygenerator information
* 6583fe6 Refactor password generation logic and add error handling
* 1557053 Merge pull request #2 from rafaelperoco/fix/entropy-generation
* 6450bd9 fix entropy generation
* 1f206c9 update README.md
* d22aaf1 update goreleaser
* 7cf90b5 fix generation
* f3d1786 fix generation
* b79d47d first version
* d7fe7a3 first version
* cd1c960 first version
* e1e4169 Initial commit

]]></description>
    </item>
  </channel>
</rss>
