Nitropy ဗားရှင်းဟောင်းများ ဒေါင်းလုဒ်

This is a maintenance release that updates the bundled root certificates to remove the compromised emSign certificate, see https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2.

## What's Changed
• Add test for nethsm commands by @AdityaMitra5102 in https://github.com/Nitrokey/pynitrokey/pull/805
• NetHSM CLI improvements by @mmerklinger in https://github.com/Nitrokey/pynitrokey/pull/809
• Update OpenPGP key for Markus by @robin-nitrokey in https://github.com/Nitrokey/pynitrokey/pull/811
• Update dependencies and release v0.14.1 by @robin-nitrokey in https://github.com/Nitrokey/pynitrokey/pull/812

**Full Changelog**：https://github.com/Nitrokey/pynitrokey/compare/v0.14.0...v0.14.1

## What's Changed
• trussed：Add model and revision to status output by @robin-nitrokey in https://github.com/Nitrokey/pynitrokey/pull/795
• Allow cryptography <53 by @robin-nitrokey in https://github.com/Nitrokey/pynitrokey/pull/798
• Use secrets rather than random to generate secrets by @dirkmueller in https://github.com/Nitrokey/pynitrokey/pull/800
• nk3：secret: Make get-password pipe compatible by @symptog in https://github.com/Nitrokey/pynitrokey/pull/801
• Fix typo in NetHSM error message by @mmerklinger in https://github.com/Nitrokey/pynitrokey/pull/802

## New Contributors
• @dirkmueller made their first contribution in https://github.com/Nitrokey/pynitrokey/pull/800
• @symptog made their first contribution in https://github.com/Nitrokey/pynitrokey/pull/801

**Full Changelog**：https://github.com/Nitrokey/pynitrokey/compare/v0.13.0...v0.14.0

This release adds support for NethHSM v5 and the `fido2 provision-credential` command, updates the minimum Python version to 3.11 and fixes some bugs.

Note that the default branch for this repository is now `main`. The `master` branch will be deleted soon.

## What's Changed
• PIV factory-reset：show proper error message when the PIN isn't locked by @sosthene-nitrokey in https://github.com/Nitrokey/pynitrokey/pull/771
• Windows versioninfo and version format by @mmerklinger in https://github.com/Nitrokey/pynitrokey/pull/774
• pre-registration for entra by @AdityaMitra5102 in https://github.com/Nitrokey/pynitrokey/pull/783
• nethsm generate-key：Fix interactive mechanism selection by @robin-nitrokey in https://github.com/Nitrokey/pynitrokey/pull/784
• PIV import and PUK fixes by @ABuljko in https://github.com/Nitrokey/pynitrokey/pull/766
• fido2：plug some resource leaks in the client by @kevans91 in https://github.com/Nitrokey/pynitrokey/pull/781
• Add NetHSM features from Nethsm v3.0.0rc by @AdityaMitra5102 in https://github.com/Nitrokey/pynitrokey/pull/787
• Entra provision by @AdityaMitra5102 in https://github.com/Nitrokey/pynitrokey/pull/789
• Update clustering features for NetHSM v5.0 and release v0.13.0rc1 by @robin-nitrokey in https://github.com/Nitrokey/pynitrokey/pull/788
• Release v0.13.0 by @robin-nitrokey in https://github.com/Nitrokey/pynitrokey/pull/793

## New Contributors
• @AdityaMitra5102 made their first contribution in https://github.com/Nitrokey/pynitrokey/pull/783
• @ABuljko made their first contribution in https://github.com/Nitrokey/pynitrokey/pull/766
• @kevans91 made their first contribution in https://github.com/Nitrokey/pynitrokey/pull/781

**Full Changelog**：https://github.com/Nitrokey/pynitrokey/compare/v0.12.3...v0.13.0

What's Changed
- Add support for nistp384 algorithm in PIV by @sosthene-nitrokey in #755
- Further fixes after change to ruff by @mmerklinger in #757
- Add import-pkcs12 command for NetHSM by @mmerklinger in #759
- Add Jan Knittel to maintainers file by @robin-nitrokey in #760
- Update dependencies and release v0.12.3 by @robin-nitrokey in #764
Full Changelog: v0.12.2...v0.12.3

This release fixes the nethsm set-cluster-ca-certificate command and adds the --san/--no-san options for nethsm csr.
What's Changed
- nethsm: Add --san and --no-san options for csr by @robin-nitrokey in #754
- Update dependencies and release v0.12.2 by @robin-nitrokey in #753
Full Changelog: v0.12.1...v0.12.2

This maintenance release updates the dependencies.
What's Changed
- Allow cryptography v47 and v48 by @robin-nitrokey in #751
- Update dependencies and release v0.12.1 by @robin-nitrokey in #752
Full Changelog: v0.12.0...v0.12.1

This release adds support for the new features in NetHSM v4 (clustering, IPv6 config, backup format v1). Clustering support is still experimental.
What's Changed
- PIV: Add support for RSA 2048 private key import by @sosthene-nitrokey in #721
- Enable support for python 3.14 by @sosthene-nitrokey in #738
- Add support for NetHSM v4 and release v0.12.0 by @robin-nitrokey in #746
Full Changelog: v0.11.4...v0.12.0

What's Changed
- Add maintainer keys and check tag signatures in CI by @robin-nitrokey in #723
- ci: Fetch tags for signature verification by @robin-nitrokey in #725
- Update maintainers file by @robin-nitrokey in #724
- Update signature key by @robin-nitrokey in #726
- Update locked dependencies by @robin-nitrokey in #727
- Update developer and packaging docs by @robin-nitrokey in #729
- Add CODEOWNERS file by @robin-nitrokey in #732
- Feat/better log file handling by @james-knippes in #733
New Contributors
- @james-knippes made their first contribution in #733
Full Changelog: v0.11.3...v0.11.4

Changelog
- chore(deps): pin hidapi to 0.14.0.post2 on linux by @LtdSauce in #708
- nkpk: Add admin-app commands by @robin-nitrokey in #709
- Update urllib3 to v2.6.0 by @robin-nitrokey in #713
- nk3: Only allow factory-reset-app for opcard by @robin-nitrokey in #714
- add RSA 3072 and 4096 for PIV by @n0xena in #715
- nkpk: Add support for firmware updates by @robin-nitrokey in #710
- Add test command to NetHSM cli by @mmerklinger in #718
- Release v0.11.3 by @mmerklinger in #719
Full Changelog: v0.11.2...v0.11.3

Changelog
- Allow cffi v2 dependency by @robin-nitrokey in #695
- Allow cryptography v46 by @robin-nitrokey in #697
- PIV: Fix 9C key generation by @sosthene-nitrokey in #702
- Update pyscard in lock file by @mmerklinger in #704
- Add support for unauthenticated NetHSM shutdown by @mmerklinger in #703
Full Changelog: v0.11.1...v0.11.2

Changelog
- Handle missing packages when logging package versions and release v0.11.1 by @robin-nitrokey in #693
Full Changelog: v0.11.0...v0.11.1

Changelog
- nk3 secrets: Print timestamp to stderr by @robin-nitrokey in #680
- nk3: Add list-config-fields command by @robin-nitrokey in #681
- fido2: Handle wrong PIN errors by @robin-nitrokey in #682
- fido2 reset: Improve wording by @robin-nitrokey in #683
- nk3 test: Support credential creation without PIN by @robin-nitrokey in #679
- Log SDK versions by @robin-nitrokey in #689
- nethsm: Add --debug flag by @robin-nitrokey in #690
- Update for NetHSM v3 and release v0.11.0 by @robin-nitrokey in #691
Full Changelog: v0.10.0...v0.11.0

Changelog
- Remove obsolete nkfido2 commands by @robin-nitrokey in #670
- Remove ecdsa dependency by @robin-nitrokey in #671
- PIV: validate PINs to be 6 to 8 numbers by @sosthene-nitrokey in #675
- Update Nitrokey SDK by @robin-nitrokey in #672
- nk3: Deprecate secrets get and register aliases by @robin-nitrokey in #673
Full Changelog: v0.9.3...v0.10.0

Changelog
- nk3: Fix fido2 test case by @robin-nitrokey in #666
Full Changelog: v0.9.2...v0.9.3

Changelog
- Fix version subcommand by @robin-nitrokey in #665
Full Changelog: v0.9.1...v0.9.2

This release is identical to v0.9.0 but fixes the build of the Linux binary in the CI.
Changelog
- ci: Use bash for version check and release v0.9.1 by @robin-nitrokey in #663
Full Changelog: v0.9.0...v0.9.1

Changelog
- This release drops support for Python 3.9.
- Migrate from flit to poetry by @robin-nitrokey in #651
- Improve log file naming scheme by @robin-nitrokey in #659
- Update fido2 and release v0.9.0 by @robin-nitrokey in #662
Full Changelog: v0.8.5...v0.9.0

This release fixes a bug in nk3 secrets when handling base32 secrets if the length is a multiple of 8.
Changelog
- helpers.b32padding: avoid adding 8 pads when none needed by @AmitAronovitch in #654
New Contributors
- @AmitAronovitch made their first contribution in #654
Full Changelog: v0.8.4...v0.8.5

This release improves listing of certificates for PIV and provides the new mapping command to map PIV certificates to Windows Active Directory user accounts.
Changelog
- PIV certificate list properties by @mmerklinger in #648
- Windows certificate mapping for PIV by @mmerklinger in #649
Full Changelog: v0.8.3...v0.8.4

This release changes the piv command to ignore unsupported smartcards and fixes the build of the release binaries for Linux and Windows.
Changelog
- Filter cards for NK3 ATR in PIV app by @mmerklinger in #642
- Fix CI and release v0.8.3 by @robin-nitrokey in #646
Full Changelog: v0.8.2...v0.8.3

Changelog
- Update Nitrokey SDK to v0.3.1 and release v0.8.1 by @robin-nitrokey in #633
Full Changelog: v0.8.0...v0.8.1

This release fixes compatibility with Python 3.11 and older.
Changelog
- Fix type hints for Python 3.11 and older by @robin-nitrokey in #611
Full Changelog: v0.7.2...v0.7.3

Changelog
- Remove firmware version check for SE050 test by @sosthene-nitrokey in #481
- nk3 secrets: Log payload length by @robin-nitrokey in #496
Full Changelog: