Release 0.2.5 (#1056)

Author: squell

.github/workflows/release.yml

@@ -15,6 +15,11 @@ jobs:
 
       - name: Sanity checks
         run: |
+          # GHA makes the tag point to the commit rather than the tag object.
+          # Remove the tag and fetch it again to get the real tag object.
+          git tag -d "$(echo "$GITHUB_REF" | sed 's/refs\/tags\///')"
+          git fetch https://github.com/trifectatechfoundation/sudo-rs.git --tags
+
           # Check if the tag has a signature to prevent accidentally pushing an unsigned tag.
           git tag -l --format='%(contents:signature)' "$(echo "$GITHUB_REF" | sed 's/refs\/tags\///')" | grep --quiet SIGNATURE || (echo "Tag not signed"; exit 1)
 
@@ -32,11 +37,6 @@ jobs:
 
       - name: Compare checksums
         run: |
-          # GHA makes the tag point to the commit rather than the tag object.
-          # Remove the tag and fetch it again to get the real tag object.
-          git tag -d "$(echo "$GITHUB_REF" | sed 's/refs\/tags\///')"
-          git fetch https://github.com/bjorn3/sudo-rs.git --tags
-
           # Get the expected checksums from the tag message.
           git tag -l --format='%(contents:body)' "$(echo "$GITHUB_REF" | sed 's/refs\/tags\///')" | tr -s '\n' > expected_checksums.txt
 
@@ -69,14 +69,20 @@ jobs:
 
           # Extract the first changelog entry from CHANGELOG.md
           echo "Changelog:"
-          sed -n '4,${ /^## /q; p; }' CHANGELOG.md
+          sed -n '4,${ /^## /q; p; }' CHANGELOG.md | tee changes.md
 
       - name: Create release
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
-          gh release create "$GITHUB_REF" --draft \
-            --title "Version $(echo "$GITHUB_REF" | sed 's/refs\/tags\///')" \
+          # GHA makes the tag point to the commit rather than the tag object.
+          # Remove the tag and fetch it again to get the real tag object.
+          RELEASE="$(echo "$GITHUB_REF" | sed 's/refs\/tags\///')"
+          git tag -d "$RELEASE"
+          git fetch https://github.com/trifectatechfoundation/sudo-rs.git --tags
+
+          gh release create "$RELEASE" --draft \
+            --title "Version ${RELEASE#v}" \
             --notes-file changes.md release_files/* \
             --verify-tag
           echo "Draft release successfully created. Please review and publish."

CHANGELOG.md

@@ -1,20 +1,39 @@
 # Changelog
 
+## [0.2.5] - 2025-04-01
+
+### Added
+- `sudo visudo` will protect you from accidentally locking yourself out
+- Support for `--prompt` and `SUDO_PROMPT` environment variable
+- Support for `Defaults targetpw`
+- Support for `VAR=VALUE` matching in `Defaults env_keep/env_check`
+- Support for `--bell`
+
+### Changed
+- Portability: sudo-rs supports FreeBSD!
+- `sudo -v` will only ask for a password if the policy requires it
+
+### Fixed
+- Manual wrongly claimed `timestamp_timeout` supported negative values (#1032)
+- `timestamp_timeout` in excess of 292 billion years were not rejected (#1048)
+- Usernames in /etc/sudoers can contain special characters by using double
+  quotes or escaping them (#1045)
+
 ## [0.2.4] - 2025-02-25
 
 ### Added
-- Support for 'SETENV:' and corresponding 'sudo VAR=value command' syntax
-- Support for 'Defaults rootpw'
-- Support for 'Defaults pwfeedback'
-- Support for host/user/runas/command-specific Defaults
+- Support for `SETENV:` and corresponding `sudo VAR=value command` syntax
+- Support for `Defaults rootpw`
+- Support for `Defaults pwfeedback`
+- Support for host/user/runas/command-specific `Defaults`
 
 ### Changed
 - Portability: sudo-rs now has experimental support for FreeBSD!
 - `pam-login` feature now controls if PAM service name 'sudo-i' is used
 
 ### Fixed
 - Bug in syslog writer could cause sudo to hang (#856)
-- SHELL was not canonicalized when using 'sudo -s' or 'sudo -i' (#962)
+- SHELL was not canonicalized when using `sudo -s` or `sudo -i` (#962)
 - RunAs_Spec was not carried over on the same /etc/sudoers line (#974)
 - sudo --list did not unfold multiple-level aliases (#978)
 - The man page for sudoers was missing (#943)

Cargo.lock

@@ -1,7 +1,7 @@
 [package]
 name = "sudo-rs"
 description = "A memory safe implementation of sudo and su."
-version = "0.2.4"
+version = "0.2.5"
 license = "Apache-2.0 OR MIT"
 edition = "2021"
 repository = "https://github.com/trifectatechfoundation/sudo-rs"

Cargo.toml

@@ -1,5 +1,5 @@
 ---
-title: SU(1) sudo-rs 0.2.4 | sudo-rs
+title: SU(1) sudo-rs 0.2.5 | sudo-rs
 ---
 
 # NAME

docs/man/su.1.md

@@ -1,5 +1,5 @@
 ---
-title: SUDO(8) sudo-rs 0.2.4 | sudo-rs
+title: SUDO(8) sudo-rs 0.2.5 | sudo-rs
 ---
 
 # NAME

docs/man/sudo.8.md

@@ -1,5 +1,5 @@
 ---
-title: VISUDO(8) sudo-rs 0.2.4 | sudo-rs
+title: VISUDO(8) sudo-rs 0.2.5 | sudo-rs
 ---
 
 # NAME