password-store, branch master

emacs: Avoid double decryption in field and secret access

2025-06-18T09:51:54Z

- contrib/emacs/password-store.el (password-store-get, password-store-get-field): Prevent redundant calls to `auth-source-pass-get` by preserving the retrieved value instead of letting downstream functions repeat the decryption. Also narrow the use of `inhibit-message` to internal calls to avoid unintended side effects elsewhere. Suggested at https://lists.zx2c4.com/pipermail/password-store/2025-June/004901.html

emacs: Clear both, kill-ring & the system clipboard

2023-12-01T09:54:43Z

Prior to this commit, after the timeout expired, the password was cleared from the kill-ring but remained in the system clipboard. To ensure passwords are also cleared from the system clipboard, `(kill-new "")` has been added inside the `password-store-clear` function when clearing the kill-ring. - Ensure that passwords are cleared from the system clipboard as well [1]. - Declare `password-store-timeout` obsolete since v2.0.4 [2]. - Header and docstring improvements [3]. - Rename argument in `password-store--run-init` [4]. - Bump version to 2.3.2. Reported by Niall Dooley : [1] https://lists.zx2c4.com/pipermail/password-store/2023-November/004800.html [2] https://lists.zx2c4.com/pipermail/password-store/2023-November/004798.html [3] https://lists.zx2c4.com/pipermail/password-store/2023-November/004791.html [4] https://lists.zx2c4.com/pipermail/password-store/2023-November/004799.html

emacs: Remove unused s library dependency

2023-05-03T06:19:56Z

Remove the unused dependency on the s library. Suggested in: https://lists.zx2c4.com/pipermail/password-store/2023-April/004751.html

emacs: Drop external dependency auth-source-pass

2022-12-26T15:28:09Z

The package auth-source-pass.el is not distributed externally anymore. It was added into Emacs since Emacs 26.1. Bump Emacs minor version requirement to emacs 26. Reported by Declan Tsien : https://lists.zx2c4.com/pipermail/password-store/2022-December/004697.html

tests: Replace short OpenPGP keyids with fingerprints

2022-09-22T10:26:16Z

Short 32-bit OpenPGP key ids are easily spoofed, so their use is strongly discouraged. The test suite uses short key ids to refer to test keys. This prevents the OpenPGP implementations from rejecting short key ids, and is a bad example for other developers to follow. This patch replaces all short key ids with fingerprints.

emacs: Add command password-store-generate-no-symbols

2022-09-06T18:55:16Z

This command generates a new password not including symbols. Suggested by Aner Zakobar : https://lists.zx2c4.com/pipermail/password-store/2022-August/004638.html

emacs: Fix an infloop on Windows enviroments

2022-03-06T22:30:56Z

The infloop has been observed in calls to `pasword-store--run' for pass v1.7.4 in a Windows/WSL2 enviroment. When this happens, the sentinel in `password-store--run-1' doesn't call the callback. * contrib/emacs/password-store.el (password-store--run-1): Prefer `process-status' over the string comparison to check the process status. Problem reported by Kai Tetzlaff : https://lists.zx2c4.com/pipermail/password-store/2022-February/004583.html

Ensure compatibility with tree 2.0

2022-01-17T16:55:06Z

Tree 2.0 and later will unconditionally ignore all options and write JSON data on file descriptor 3 when available, which causes problems for the test harness and other scripts that use FD 3. Work around by closing descriptor 3 for the 'tree' command.

Fix unecessary reencryptions on MacOS

2021-09-23T21:31:03Z

POSIX sed doesn't support \+ in BREs which causes the regex that extracts a file's current keys to return nothing, meaning that files are unecessarily reencrypted. This converts the regex in question to use ERE.

Exclude `*/.extensions` from grep/reencrypt

2021-09-23T21:28:59Z

The `.extensions` directory can contain extensions code, for example as git submodules, that have `.gpg` files as part of their code but that are not files encrypted with the PGP keys of our password store. One example is `pass-tomb`, that contains `.gpg` files in `tests/gnupg`, but there are more, like `pass-update`, `pass-otp`, etc. However those `.gpg` files in the `.extensions` directory are currently processed by the `grep` and `reencrypt` functions of `pass`. At best this can cause errors to be shown to the user when grepping/reencrypting, and at worst it can cause files in the `.extensions` directory to be decrypted and returned as part of a search, or reencrypted with the incorrect PGP keys. This patch tries to mitigate that issue by removing the `*/.extensions` directories from the list of processed `.gpg` files for the grep/reencrypt functions. However this patch is not perfect as it does not take into account the fact that the `.extensions` directory can be renamed to something else using `PASSWORD_STORE_EXTENSIONS_DIR`. But knowing if this `PASSWORD_STORE_EXTENSIONS_DIR` is inside the `PREFIX` or not and formatting the path exclusion for `find` accordingly could require a fair bit of additional logic that I am not sure how you want to implement.