CertKit کے پرانے ورژن – تمام ورژنز

Changelog
- cee87c1 chore(release): cut v0.8.3 (#133)
- 8c57e9e Merge pull request #132 from sensiblebit/feat/connect-verbose-chain-metadata
- 95e4b39 fix(certstore): wrap wasm sqlite stub errors
- ebffca9 docs: refresh transport probe docs
- b5741be fix(certstore): stub sqlite persistence on wasm
- 3b16e56 feat(connect): show verbose chain PEM metadata
- ff9532a Merge pull request #131 from sensiblebit/feat/transport-probing
- 0a75991 fix(review): tighten STARTTLS result metadata
- dd5e6b6 fix(review): tighten helper and SSH parsing
- 58e8295 fix(review): tighten transport probe follow-ups
- 53e8904 fix(review): tighten probe review handling
- 42375c9 fix(review): clarify SSH and LDAP follow-ups
- 897dec4 fix(review): tighten transport review cleanup
- be024e3 fix(review): tighten transport policy follow-ups
- 602fcb2 fix(ssh): normalize SSH-1.99 protocol banner
- e9a0e71 docs(rules): add PR comment helper workflow
- d1956cc fix(review): tighten transport follow-ups
- 7b09a2d fix(review): tighten STARTTLS preflight checks
- 0611036 fix(review): tighten transport probe feedback
- eb9d00f fix(connect): label protocol-specific TLS upgrades
- 32236e3 fix(review): tighten transport probing edge cases
- babe06e fix(review): address transport probing feedback
- a97ef45 fix(cli): add probe ssh format flag
- 2ade505 fix(starttls): tighten preflight diagnostics
- 0adcb4d fix(ssh): send client kexinit before probing
- a5a6631 fix(review): tighten transport probe follow-ups
- be90192 fix(starttls): tolerate imap untagged prelude
- 86dbf71 docs: clarify shared SSH policy heuristics
- 3d2df2f fix(review): harden policy and SSH parsing
- 9aa5698 fix(review): tighten SSH and STARTTLS polish
- 4bf4f14 docs(rules): require PR docs audit agent
- 8078a64 docs: refresh examples and architecture
- 28235d1 fix(review): harden STARTTLS retry detection
- 3d5bf24 test(review): table-drive probe ssh output checks
- 4f09162 fix(review): harden STARTTLS preflight parsing
- 2f617f2 fix(review): tighten STARTTLS follow-ups
- 5ff59da docs(rules): require fresh PR comment snapshots
- d4cd6cb docs(rules): close stale agents before spawn
- 29c487c fix(review): harden transport protocol parsing
- 7d0c30c fix(review): tighten transport probe coverage
- dfffa29 ci: enable actionlint hook
- 4a7e3d5 refactor(ssh): use input structs in display helpers
- 9e2c203 docs(rules): require delegated review fixes
- 19e02e9 docs(rules): tighten push and PR workflow
- a4cb657 fix(review): tighten transport probe behavior
- 61d70cb docs(changelog): cover transport probe hardening
- 402e238 fix(review): harden transport probe edge cases
- a9da874 fix(review): tighten STARTTLS auto-detection
- a2cfd2e fix(review): simplify transport helper signatures
- 0727948 fix(review): handle additional STARTTLS cases
- 4e44313 fix(review): address transport probing feedback
- 8f548d1 feat(probe): add transport probing and STARTTLS support
- 13e9940 Merge pull request #130 from sensiblebit/chore/strict-golangci-lint
- 581ecd7 fix(scan): reuse symlink target stat for size checks
- 0e09bfa fix: address final review comments
- c652725 fix(quic): remove dead varint panic
- 902fbc7 fix(passwords): stream password files
- 96e60a6 chore(lint): add more useful golangci checks
- 07c7f50 fix: surface probe encoding failures
- e5e207c docs: allow stricter golangci repo config
- 9e2ef58 fix: restore sane output permissions
- 1cabcc5 fix: address review follow-ups
- 9bfc08b fix(probes): return errors on record length overflow
- 3eb9c52 fix(codeql): inline legacy sha1 compatibility paths
- 1863188 chore(lint): satisfy strict golangci config
- 51be9a6 chore(lint): reduce strict golangci baseline
- 2cf8db8 docs(go): add package comments
- bd1a270 chore(lint): enable strict golangci checks
- 066ad9f Merge pull request #129 from sensiblebit/fix/remove-wasm-file-cap
- 1281c5c fix(wasm): surface overflow warnings in inspect
- b5b7450 fix(wasm): keep scanning after total size overflow
- 3743603 fix(wasm): stop fa

What's Changed
- fix: consolidate AIA proxy allow list into suffix matches by @danielewood in #72
- feat: add AIA-fetched badge to inspect results by @danielewood in #73
- feat: add OtherName SAN generation and mTLS round-trip support by @danielewood in #74
- feat: add convert, sign, connect, ocsp, crl commands and verify --diagnose by @danielewood in #75
- fix: harden error handling, type assertions, and overflow guards by @danielewood in #76
- docs: update EXAMPLES.md and README.md for all current commands by @danielewood in #77
- feat: add OCSP and CRL revocation checking to connect command by @danielewood in #78
- refactor: auto-generate flag tables and replace --format with global --json by @danielewood in #80
- feat: add cipher suite enumeration with raw TLS 1.3, QUIC, and key exchange probing by @danielewood in #82
- chore: finalize pre-commit and DN rendering fixes by @danielewood in #85
- feat(connect): add certificate transparency checks by @danielewood in #86
- fix: harden export paths and outputs by @danielewood in #87
- docs: add issue-generator rule file by @danielewood in #104
- chore: merge develop into main by @danielewood in #110
- chore: release v0.8.2 by @danielewood in #111
Full Changelog: v0.8.1...v0.8.2

Changelog
- c76a730 chore: prepare v0.8.1 release (#71)
- 287abbe build(deps): bump @cloudflare/workers-types in /web (#70)
- 553783b chore: schedule dependabot updates weekly on Monday UTC (#69)
- a6705c7 fix: consolidate tests, fix SanitizeFileName and escapeHTML bugs (#68)
- f7b0643 fix: address Ralph Loop adversarial review findings (#67)
- 3205eb2 build(deps): bump @cloudflare/workers-types in /web (#65)
- 0a8d315 feat(web): add Inspect tab, certkitInspect WASM, and FormatDN (#66)
- fc2c2cb fix: address post-merge review findings from PR #63 (#64)
- 1b3defa fix: address post-merge review findings from PR #62 (#63)
- 392878a feat(web): add category tabs, validation, and paste support (#62)
- c85a2e3 build(deps): bump goreleaser/goreleaser-action in the actions group (#60)
- ecf51bd build(deps): bump @cloudflare/workers-types in /web (#61)

Changelog
- 4a4e3b3 chore: prepare v0.8.0 release and enable winget workflow (#59)
- c8c1ce0 fix: address PR #57 review findings — deadlocks, godoc, changelog refs (#58)
- 47d7811 feat: add trust and expiry annotations to scan, inspect, and WASM (#57)
- 9168b7f feat: add shell tab completion for all enum and directory flags (#56)
- f229618 build(deps): bump @cloudflare/workers-types in /web (#55)
- 557ac54 test: streamline test suite per T-9, T-10, T-12, T-14 (#53)
- 745df29 build(deps): bump @cloudflare/workers-types in /web (#52)
- f8c0975 build(deps): bump modernc.org/sqlite from 1.37.1 to 1.46.1 (#51)
- ea22409 ci: add go fix to pre-commit hooks and CI checks (#50)

Added
- Browser-based WASM build (cmd/wasm/) with drag-and-drop certificate/key processing, chain resolution, and ZIP bundle export
- Cloudflare Pages deployment with CORS proxy for AIA certificate fetching (web/)
- GitHub Actions workflow to build WASM and deploy to Cloudflare Pages on tag push
- Certificate trust validation against embedded Mozilla root store in WASM UI
- Selectable export: checkboxes to choose which matched bundles to include in ZIP
- UI filters: hide expired, unmatched, non-leaf, and untrusted certificates
- Version tag and GitHub repo link in web UI footer
Fixed
- Cloudflare Pages deploy going to preview instead of production on tag push
Live at certkit.pages.dev