From 0ec6c682b71bbc2f161ace283e7524bf7a82b55c Mon Sep 17 00:00:00 2001 From: Stephen Touset Date: Mon, 13 Apr 2026 14:37:50 -0700 Subject: [PATCH 1/2] Release notes for 1.3.0 --- CHANGELOG.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index b30e2f0..66be841 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,27 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [1.3.0] 2026-04-13 + +### Security +- [#109](https://github.com/stouset/secrets/issues/109): Two `Secret`s can no + longer accidentally occupy the same page, which would cause the unlocking of + one to unintentionally unlock the other. + +### Soundness +- [#100](https://github.com/stouset/secrets/issues/100): Tuple types may contain + padding and so cannot safely implement the `Bytes` trait. This trait has been + removed from tuples. +- [#100](https://github.com/stouset/secrets/issues/100): `bool` and `char` + cannot contain arbitrary byte sequences, and have similarly had their `Bytes` + implementation removed. + +### Fixed +- [#115](https://github.com/stouset/secrets/issues/115): `SecretVec::try_new` now + accepts a length parameter as originally intended. This is technically + backwards-incompatible, but it is unlikely anyone in the wild was relying on + this since it would have been noticed immediately. + ## [1.2.0] 2022-03-26 ### Added From 2ae6cef47d452a52bb6ae40dbaacba392be93a1d Mon Sep 17 00:00:00 2001 From: Stephen Touset Date: Mon, 13 Apr 2026 15:28:55 -0700 Subject: [PATCH 2/2] Bump to 1.3.0 --- Cargo.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Cargo.toml b/Cargo.toml index 5bb7ac6..d86b67d 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "secrets" -version = "1.2.0" +version = "1.3.0" edition = "2024" rust-version = "1.85.0"