sneak e08c29438a Write encrypt and decrypt output only once they succeed (closes #143) ...

`secret encrypt` and `secret decrypt` emptied the file named by
`--output` before reading any input, so a failure left it empty, and a
file given as both `--input` and `--output` was emptied before it was
read. They now write into a temporary file of mode 0600 next to it, or
next to the path it is a symbolic link to, and rename that over it only
on success, using the new `secret.WriteFileAtomicFunc`, which
`secret.WriteFileAtomic` now calls. Ctrl-C or SIGTERM removes the
temporary file. A device or pipe given as `--output`, such as
`/dev/null`, is written to directly.

Judgement call: the device and pipe case goes beyond the plan.

Model: opus-5-5

2026-10-14 19:06:37 +00:00

..

bip39

Copy go-bip39 into internal/bip39 (closes #122)

2026-10-07 12:56:10 +02:00

cli

Write encrypt and decrypt output only once they succeed (closes #143)

2026-10-14 19:06:37 +00:00

secret

Write encrypt and decrypt output only once they succeed (closes #143)

2026-10-14 19:06:37 +00:00

vault

A failed secret add --force leaves the secret unchanged (closes #136)

2026-10-14 20:48:48 +02:00