Generate CHANGELOG.md for 0.14.0

Move changelog files for 0.14.0
Update VERSION files for 0.14.0
2026-04-09 03:31:58 -07:00 · 2025-05-31 22:21:45 +02:00 · 2025-05-31 22:21:33 +02:00 · 2025-05-31 22:20:43 +02:00 · 2025-05-27 20:58:05 +02:00 · 2025-05-27 19:43:24 +02:00
20 changed files with 220 additions and 74 deletions
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -21,29 +21,27 @@ before:

 # build a single binary
 builds:
-  -
+  - id: default
    # make sure everything is statically linked by disabling cgo altogether
-    env:
+    env: &build_env
      - CGO_ENABLED=0

    # set the package for the main binary
    main: ./cmd/rest-server

    flags:
-      # don't include any paths to source files in the resulting binary
+      &build_flags # don't include any paths to source files in the resulting binary
      - -trimpath

-    mod_timestamp: '{{ .CommitTimestamp }}'
+    mod_timestamp: "{{ .CommitTimestamp }}"

-    ldflags:
-      # set the version variable in the main package
+    ldflags: &build_ldflags # set the version variable in the main package
      - "-s -w -X main.version={{ .Version }}"

    # list all operating systems and architectures we build binaries for
    goos:
      - linux
      - darwin
-      - windows
      - freebsd
      - netbsd
      - openbsd
@@ -52,7 +50,7 @@ builds:

    goarch:
      - amd64
-      - 386
+      - "386"
      - arm
      - arm64
      - mips
@@ -61,23 +59,39 @@ builds:
      - ppc64
      - ppc64le
    goarm:
-      - 6
-      - 7
+      - "6"
+      - "7"
+
+  - id: windows-only
+    env: *build_env
+    main: ./cmd/rest-server
+    flags: *build_flags
+    mod_timestamp: "{{ .CommitTimestamp }}"
+    ldflags: *build_ldflags
+    goos:
+      - windows
+    goarch:
+      - amd64
+      - "386"
+      - arm
+      - arm64

 # configure the resulting archives to create
 archives:
-  -
+  - id: default
+    builds: [default, windows-only]
+    format: tar.gz
    # package a directory which contains the source file
    wrap_in_directory: true

    builds_info: &archive_file_info
      owner: root
      group: root
-      mtime: '{{ .CommitDate }}'
+      mtime: "{{ .CommitDate }}"
      mode: 0644

    # add these files to all archives
-    files:
+    files: &archive_files
      - src: LICENSE
        dst: LICENSE
        info: *archive_file_info
@@ -88,13 +102,20 @@ archives:
        dst: CHANGELOG.md
        info: *archive_file_info

+  - id: windows-only
+    builds: [windows-only]
+    formats: [zip]
+    wrap_in_directory: true
+    builds_info: *archive_file_info
+    files: *archive_files
+
 # also build an archive of the source code
 source:
  enabled: true

 # build a file containing the SHA256 hashes
 checksum:
-  name_template: 'SHA256SUMS'
+  name_template: "SHA256SUMS"

 # sign the checksum file
 signs:
@@ -128,7 +149,7 @@ dockers:
      - docker/entrypoint.sh
  - image_templates:
      - restic/rest-server:{{ .Version }}-i386
-    goarch: 386
+    goarch: "386"
    build_flag_templates:
      - "--platform=linux/386"
      - "--pull"
@@ -204,21 +225,20 @@ dockers:
    dockerfile: "Dockerfile.goreleaser"
    extra_files: *extra_files

-
 docker_manifests:
- name_template: "restic/rest-server:{{ .Version }}"
-  image_templates:
-  - "restic/rest-server:{{ .Version }}-amd64"
-  - "restic/rest-server:{{ .Version }}-i386"
-  - "restic/rest-server:{{ .Version }}-arm32v6"
-  - "restic/rest-server:{{ .Version }}-arm32v7"
-  - "restic/rest-server:{{ .Version }}-arm64v8"
-  - "restic/rest-server:{{ .Version }}-ppc64le"
- name_template: "restic/rest-server:latest"
-  image_templates:
-  - "restic/rest-server:{{ .Version }}-amd64"
-  - "restic/rest-server:{{ .Version }}-i386"
-  - "restic/rest-server:{{ .Version }}-arm32v6"
-  - "restic/rest-server:{{ .Version }}-arm32v7"
-  - "restic/rest-server:{{ .Version }}-arm64v8"
-  - "restic/rest-server:{{ .Version }}-ppc64le"
+  - name_template: "restic/rest-server:{{ .Version }}"
+    image_templates:
+      - "restic/rest-server:{{ .Version }}-amd64"
+      - "restic/rest-server:{{ .Version }}-i386"
+      - "restic/rest-server:{{ .Version }}-arm32v6"
+      - "restic/rest-server:{{ .Version }}-arm32v7"
+      - "restic/rest-server:{{ .Version }}-arm64v8"
+      - "restic/rest-server:{{ .Version }}-ppc64le"
+  - name_template: "restic/rest-server:latest"
+    image_templates:
+      - "restic/rest-server:{{ .Version }}-amd64"
+      - "restic/rest-server:{{ .Version }}-i386"
+      - "restic/rest-server:{{ .Version }}-arm32v6"
+      - "restic/rest-server:{{ .Version }}-arm32v7"
+      - "restic/rest-server:{{ .Version }}-arm64v8"
+      - "restic/rest-server:{{ .Version }}-ppc64le"
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,98 @@
+Changelog for rest-server 0.14.0 (2025-05-31)
+============================================
+
+The following sections list the changes in rest-server 0.14.0 relevant
+to users. The changes are ordered by importance.
+
+Summary
+-------
+
+ * Sec #318: Fix world-readable permissions on new `.htpasswd` files
+ * Chg #322: Update dependencies and require Go 1.23 or newer
+ * Enh #174: Support proxy-based authentication
+ * Enh #189: Support group accessible repositories
+ * Enh #295: Output status of append-only mode on startup
+ * Enh #315: Hardened tls settings
+ * Enh #321: Add zip archive format for Windows releases
+
+Details
+-------
+
+ * Security #318: Fix world-readable permissions on new `.htpasswd` files
+
+   On startup the rest-server Docker container creates an empty `.htpasswd` file if
+   none exists yet. This file was world-readable by default, which can be a
+   security risk, even though the file only contains hashed passwords.
+
+   This has been fixed such that new `.htpasswd` files are no longer
+   world-readabble.
+
+   The permissions of existing `.htpasswd` files must be manually changed if
+   relevant in your setup.
+
+   https://github.com/restic/rest-server/issues/318
+   https://github.com/restic/rest-server/pull/340
+
+ * Change #322: Update dependencies and require Go 1.23 or newer
+
+   All dependencies have been updated. Rest-server now requires Go 1.23 or newer to
+   build.
+
+   This also disables support for TLS versions older than TLS 1.2. On Windows,
+   rest-server now requires at least Windows 10 or Windows Server 2016. On macOS,
+   rest-server now requires at least macOS 11 Big Sur.
+
+   https://github.com/restic/rest-server/pull/322
+   https://github.com/restic/rest-server/pull/338
+
+ * Enhancement #174: Support proxy-based authentication
+
+   Rest-server now supports authentication via HTTP proxy headers. This feature can
+   be enabled by specifying the username header using the `--proxy-auth-username`
+   option (e.g., `--proxy-auth-username=X-Forwarded-User`).
+
+   When enabled, the server authenticates users based on the specified header and
+   disables Basic Auth. Note that proxy authentication is disabled when `--no-auth`
+   is set.
+
+   https://github.com/restic/rest-server/issues/174
+   https://github.com/restic/rest-server/pull/307
+
+ * Enhancement #189: Support group accessible repositories
+
+   Rest-server now supports making repositories accessible to the filesystem group
+   by setting the `--group-accessible-repos` option. Note that permissions of
+   existing files are not modified. To allow the group to read and write file, use
+   a umask of `007`. To only grant read access use `027`. To make an existing
+   repository group-accessible, use `chmod -R g+rwX /path/to/repo`.
+
+   https://github.com/restic/rest-server/issues/189
+   https://github.com/restic/rest-server/pull/308
+
+ * Enhancement #295: Output status of append-only mode on startup
+
+   Rest-server now displays the status of append-only mode during startup.
+
+   https://github.com/restic/rest-server/pull/295
+
+ * Enhancement #315: Hardened tls settings
+
+   Rest-server now uses a secure TLS cipher suite set by default. The minimum TLS
+   version is now TLS 1.2 and can be further increased using the new
+   `--tls-min-ver` option, allowing users to enforce stricter security
+   requirements.
+
+   https://github.com/restic/rest-server/pull/315
+
+ * Enhancement #321: Add zip archive format for Windows releases
+
+   Windows users can now download rest-server binaries in zip archive format (.zip)
+   in addition to the existing tar.gz archives.
+
+   https://github.com/restic/rest-server/issues/321
+   https://github.com/restic/rest-server/pull/346
+
+
 Changelog for rest-server 0.13.0 (2024-07-26)
 ============================================

--- a/README.md
+++ b/README.md
@@ -160,6 +160,10 @@ The server can be started with `--prometheus` to expose [Prometheus](https://pro
 This repository contains an example full stack Docker Compose setup with a Grafana dashboard in [examples/compose-with-grafana/](examples/compose-with-grafana/).


+## Group-accessible Repositories
+
+Rest-server supports making repositories accessible to the filesystem group by setting the `--group-accessible-repos` option. Note that permissions of existing files are not modified. To allow the group to read and write file, use a umask of `007`. To only grant read access use `027`. To make an existing repository group-accessible, use `chmod -R g+rwX /path/to/repo`.
+
 ## Why use Rest Server?

 Compared to the SFTP backend, the REST backend has better performance, especially so if you can skip additional crypto overhead by using plain HTTP transport (restic already properly encrypts all data it sends, so using HTTPS is mostly about authentication).
--- a/Release.md
+++ b/Release.md
@@ -34,7 +34,7 @@
   use another config file):

        goreleaser \
-          release \
+          release --parallelism 4 \
          --release-notes <(calens --template changelog/CHANGELOG-GitHub.tmpl --version "${VERSION}")

 7. Set a new version in `main.go` and commit the result:
--- a/2
+++ b/2
@@ -1 +1 @@
-0.13.0
+0.14.0
--- a/changelog/0.14.0_2025-05-31/issue-189
+++ b/changelog/0.14.0_2025-05-31/issue-189
@@ -2,8 +2,9 @@ Enhancement: Support group accessible repositories

 Rest-server now supports making repositories accessible to the filesystem group
 by setting the `--group-accessible-repos` option. Note that permissions of
-existing files are not modified. Use `chmod -R g+rwX /path/to/repo` to make
-the repository group-accessible.
+existing files are not modified. To allow the group to read and write file,
+use a umask of `007`. To only grant read access use `027`. To make an existing
+repository group-accessible, use `chmod -R g+rwX /path/to/repo`.

 https://github.com/restic/rest-server/issues/189
 https://github.com/restic/rest-server/pull/308
--- a/changelog/0.14.0_2025-05-31/issue-318
+++ b/changelog/0.14.0_2025-05-31/issue-318
@@ -0,0 +1,13 @@
+Security: Fix world-readable permissions on new `.htpasswd` files
+
+On startup the rest-server Docker container creates an empty `.htpasswd` file
+if none exists yet. This file was world-readable by default, which can be
+a security risk, even though the file only contains hashed passwords.
+
+This has been fixed such that new `.htpasswd` files are no longer world-readabble.
+
+The permissions of existing `.htpasswd` files must be manually changed if
+relevant in your setup.
+
+https://github.com/restic/rest-server/issues/318
+https://github.com/restic/rest-server/pull/340
--- a/changelog/0.14.0_2025-05-31/issue-321
+++ b/changelog/0.14.0_2025-05-31/issue-321
@@ -0,0 +1,7 @@
+Enhancement: Add zip archive format for Windows releases
+
+Windows users can now download rest-server binaries in zip archive format (.zip)
+in addition to the existing tar.gz archives.
+
+https://github.com/restic/rest-server/issues/321
+https://github.com/restic/rest-server/pull/346
--- a/changelog/0.14.0_2025-05-31/pull-295
+++ b/changelog/0.14.0_2025-05-31/pull-295
@@ -0,0 +1,5 @@
+Enhancement: Output status of append-only mode on startup
+
+Rest-server now displays the status of append-only mode during startup.
+
+https://github.com/restic/rest-server/pull/295
--- a/changelog/0.14.0_2025-05-31/pull-307
+++ b/changelog/0.14.0_2025-05-31/pull-307
@@ -0,0 +1,12 @@
+Enhancement: Support proxy-based authentication
+
+Rest-server now supports authentication via HTTP proxy headers. This feature can
+be enabled by specifying the username header using the `--proxy-auth-username`
+option (e.g., `--proxy-auth-username=X-Forwarded-User`).
+
+When enabled, the server authenticates users based on the specified header and
+disables Basic Auth. Note that proxy authentication is disabled when `--no-auth`
+is set.
+
+https://github.com/restic/rest-server/issues/174
+https://github.com/restic/rest-server/pull/307
--- a/changelog/0.14.0_2025-05-31/pull-315
+++ b/changelog/0.14.0_2025-05-31/pull-315
@@ -0,0 +1,7 @@
+Enhancement: Hardened tls settings
+
+Rest-server now uses a secure TLS cipher suite set by default. The minimum TLS
+version is now TLS 1.2 and can be further increased using the new `--tls-min-ver`
+option, allowing users to enforce stricter security requirements.
+
+https://github.com/restic/rest-server/pull/315
--- a/changelog/0.14.0_2025-05-31/pull-322
+++ b/changelog/0.14.0_2025-05-31/pull-322
@@ -1,6 +1,7 @@
 Change: Update dependencies and require Go 1.23 or newer

-We have updated all dependencies. Rest-server now requires Go 1.23 or newer to build.
+All dependencies have been updated. Rest-server now requires Go 1.23 or newer
+to build.

 This also disables support for TLS versions older than TLS 1.2. On Windows,
 rest-server now requires at least Windows 10 or Windows Server 2016. On macOS,
--- a/changelog/unreleased/pull-295
+++ b/changelog/unreleased/pull-295
@@ -1,5 +0,0 @@
-Enhancement: Output status of append only mode on startup
-
-Rest-server now outputs whether append only mode has been enabled on startup.
-
-https://github.com/restic/rest-server/pull/295
--- a/changelog/unreleased/pull-307
+++ b/changelog/unreleased/pull-307
@@ -1,8 +0,0 @@
-Enhancement: Add support for proxy-based authentication
-
-The server now supports authentication via a proxy header specified with the `--proxy-auth-username` flag (e.g., `--proxy-auth-username=X-Forwarded-User`).
-When this flag is set, the server will authenticate users based on the given header and disable BasicAuth.
-Note that `--proxy-auth-username` is ignored if `--no-auth` is set, as `--no-auth` disables all authentication.
-
-https://github.com/restic/rest-server/issues/174
-https://github.com/restic/rest-server/pull/307
--- a/changelog/unreleased/pull-315
+++ b/changelog/unreleased/pull-315
@@ -1,6 +0,0 @@
-Enhancement: Hardened tls settings
-
-rest-server now uses a secure tls cipher suit set and the minimal TLS version
-can be set with the option `--tls-min-ver`
-
-https://github.com/restic/rest-server/pull/315
--- a/cmd/rest-server/main.go
+++ b/cmd/rest-server/main.go
@@ -78,7 +78,7 @@ func newRestServerApp() *restServerApp {
 	return rv
 }

-var version = "0.13.0"
+var version = "0.14.0"

 func (app *restServerApp) tlsSettings() (bool, string, string, error) {
 	var key, cert string
--- a/docker/entrypoint.sh
+++ b/docker/entrypoint.sh
@@ -6,7 +6,7 @@ if [ -n "$DISABLE_AUTHENTICATION" ]; then
    OPTIONS="--no-auth $OPTIONS"
 else
    if [ ! -f "$PASSWORD_FILE" ]; then
-        touch "$PASSWORD_FILE"
+        ( umask 027 && touch "$PASSWORD_FILE" )
    fi

    if [ ! -s "$PASSWORD_FILE" ]; then
--- a/examples/systemd/rest-server.service
+++ b/examples/systemd/rest-server.service
@@ -26,8 +26,9 @@ RestartSec=5
 # The following line must be customised to your individual requirements.
 ReadWritePaths=/path/to/backups

-# Set to `UMask=007` and pass `--group-accessible-repos` to rest-server to
-# make created files group-readable
+# Files in the data repository are only user accessible by default. Default to
+# `UMask=077` for consistency. To make created files group-readable, set to
+# `UMask=007` and pass `--group-accessible-repos` to rest-server via `ExecStart`.
 UMask=077

 # If your system doesn't support all of the features below (e.g. because of
--- a/go.mod
+++ b/go.mod
@@ -7,9 +7,9 @@ require (
 	github.com/gorilla/handlers v1.5.2
 	github.com/minio/sha256-simd v1.0.1
 	github.com/miolini/datacounter v1.0.3
-	github.com/prometheus/client_golang v1.21.1
+	github.com/prometheus/client_golang v1.22.0
 	github.com/spf13/cobra v1.9.1
-	golang.org/x/crypto v0.37.0
+	golang.org/x/crypto v0.38.0
 )

 require (
@@ -17,13 +17,12 @@ require (
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/felixge/httpsnoop v1.0.4 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
-	github.com/klauspost/compress v1.17.11 // indirect
 	github.com/klauspost/cpuid/v2 v2.2.9 // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/prometheus/client_model v0.6.1 // indirect
 	github.com/prometheus/common v0.62.0 // indirect
 	github.com/prometheus/procfs v0.15.1 // indirect
 	github.com/spf13/pflag v1.0.6 // indirect
-	golang.org/x/sys v0.32.0 // indirect
+	golang.org/x/sys v0.33.0 // indirect
 	google.golang.org/protobuf v1.36.5 // indirect
 )
--- a/go.sum
+++ b/go.sum
@@ -10,14 +10,14 @@ github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSs
 github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg=
 github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
 github.com/godbus/dbus/v5 v5.0.4/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=
-github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
-github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
+github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/gorilla/handlers v1.5.2 h1:cLTUSsNkgcwhgRqvCNmdbRWG0A3N4F+M2nWKdScwyEE=
 github.com/gorilla/handlers v1.5.2/go.mod h1:dX+xVpaxdSw+q0Qek8SSsl3dfMk3jNddUkMzo0GtH0w=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
-github.com/klauspost/compress v1.17.11 h1:In6xLpyWOi1+C7tXUUWv2ot1QvBjxevKAaI6IXrJmUc=
-github.com/klauspost/compress v1.17.11/go.mod h1:pMDklpSncoRMuLFrf1W9Ss9KT+0rH90U12bZKk7uwG0=
+github.com/klauspost/compress v1.18.0 h1:c/Cqfb0r+Yi+JtIEq73FWXVkRonBlf0CRNYc8Zttxdo=
+github.com/klauspost/compress v1.18.0/go.mod h1:2Pp+KzxcywXVXMr50+X0Q/Lsb43OQHYWRCY2AiWywWQ=
 github.com/klauspost/cpuid/v2 v2.2.9 h1:66ze0taIn2H33fBvCkXuv9BmCwDfafmiIVpKV9kKGuY=
 github.com/klauspost/cpuid/v2 v2.2.9/go.mod h1:rqkxqrZ1EhYM9G+hXH7YdowN5R5RGN6NK4QwQ3WMXF8=
 github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
@@ -30,8 +30,8 @@ github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/prometheus/client_golang v1.21.1 h1:DOvXXTqVzvkIewV/CDPFdejpMCGeMcbGCQ8YOmu+Ibk=
-github.com/prometheus/client_golang v1.21.1/go.mod h1:U9NM32ykUErtVBxdvD3zfi+EuFkkaBvMb09mIfe0Zgg=
+github.com/prometheus/client_golang v1.22.0 h1:rb93p9lokFEsctTys46VnV1kLCDpVZ0a/Y92Vm0Zc6Q=
+github.com/prometheus/client_golang v1.22.0/go.mod h1:R7ljNsLXhuQXYZYtw6GAE9AZg8Y7vEW5scdCXrWRXC0=
 github.com/prometheus/client_model v0.6.1 h1:ZKSh/rekM+n3CeS952MLRAdFwIKqeY8b62p8ais2e9E=
 github.com/prometheus/client_model v0.6.1/go.mod h1:OrxVMOVHjw3lKMa8+x6HeMGkHMQyHDk9E3jmP2AmGiY=
 github.com/prometheus/common v0.62.0 h1:xasJaQlnWAeyHdUBeGjXmutelfJHWMRr+Fg4QszZ2Io=
@@ -45,10 +45,10 @@ github.com/spf13/pflag v1.0.6 h1:jFzHGLGAlb3ruxLB8MhbI6A8+AQX/2eW4qeyNZXNp2o=
 github.com/spf13/pflag v1.0.6/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
 github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
-golang.org/x/crypto v0.37.0 h1:kJNSjF/Xp7kU0iB2Z+9viTPMW4EqqsrywMXLJOOsXSE=
-golang.org/x/crypto v0.37.0/go.mod h1:vg+k43peMZ0pUMhYmVAWysMK35e6ioLh3wB8ZCAfbVc=
-golang.org/x/sys v0.32.0 h1:s77OFDvIQeibCmezSnk/q6iAfkdiQaJi4VzroCFrN20=
-golang.org/x/sys v0.32.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
+golang.org/x/crypto v0.38.0 h1:jt+WWG8IZlBnVbomuhg2Mdq0+BBQaHbtqHEFEigjUV8=
+golang.org/x/crypto v0.38.0/go.mod h1:MvrbAqul58NNYPKnOra203SB9vpuZW0e+RRZV+Ggqjw=
+golang.org/x/sys v0.33.0 h1:q3i8TbbEz+JRD9ywIRlyRAQbM0qF7hu24q3teo2hbuw=
+golang.org/x/sys v0.33.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
 google.golang.org/protobuf v1.36.5 h1:tPhr+woSbjfYvY6/GPufUoYizxw1cF/yFoxJ2fmpwlM=
 google.golang.org/protobuf v1.36.5/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
Author	SHA1	Message	Date
Alexander Neumann	ad130de021	Generate CHANGELOG.md for 0.14.0	2025-05-31 22:21:45 +02:00
Alexander Neumann	2aaa048aba	Move changelog files for 0.14.0	2025-05-31 22:21:33 +02:00
Alexander Neumann	b6ec6f45cc	Update VERSION files for 0.14.0	2025-05-31 22:20:43 +02:00
rawtaz	2a77536ce5	Merge pull request #348 from restic/clarify-umask-for-group-accessible Some checks failed test / Linux Go 1.23.x (push) Has been cancelled Details test / Linux (race) Go 1.24.x (push) Has been cancelled Details test / Linux Go 1.24.x (push) Has been cancelled Details test / lint (push) Has been cancelled Details test / Analyze results (push) Has been cancelled Details Improve description of group-accessible option	2025-05-27 20:58:05 +02:00
Michael Eischer	0adcfa2619	Improve description of group-accessible option	2025-05-27 19:43:24 +02:00
Michael Eischer	9f8bb0c87c	Merge pull request #347 from restic/polish-changelogs Some checks failed test / Linux (race) Go 1.24.x (push) Has been cancelled Details test / Linux Go 1.23.x (push) Has been cancelled Details test / Linux Go 1.24.x (push) Has been cancelled Details test / lint (push) Has been cancelled Details test / Analyze results (push) Has been cancelled Details Polish changelogs	2025-05-21 19:01:27 +02:00
Leo R. Lundgren	5faeedf050	Polish changelogs	2025-05-20 21:56:28 +02:00
Michael Eischer	7294612990	Merge pull request #346 from MichaelEischer/zip-for-windows Some checks are pending test / lint (push) Waiting to run Details test / Analyze results (push) Blocked by required conditions Details test / Linux Go 1.23.x (push) Waiting to run Details test / Linux (race) Go 1.24.x (push) Waiting to run Details test / Linux Go 1.24.x (push) Waiting to run Details Build zip files for windows release binaries	2025-05-20 19:09:48 +02:00
Michael Eischer	25066228ee	add changelog for windows zip binaries	2025-05-15 21:03:05 +02:00
Michael Eischer	72a7319fae	limit build parallelism	2025-05-15 20:58:23 +02:00
Michael Eischer	df5330773f	also generate zip files for windows	2025-05-15 20:58:23 +02:00
Michael Eischer	2bb4d251e2	autoformat goreleaser yaml	2025-05-15 20:58:23 +02:00
Michael Eischer	f018e99109	Merge pull request #340 from MichaelEischer/limit-htpasswd-perms Some checks failed test / Linux Go 1.23.x (push) Has been cancelled Details test / Linux (race) Go 1.24.x (push) Has been cancelled Details test / Linux Go 1.24.x (push) Has been cancelled Details test / lint (push) Has been cancelled Details test / Analyze results (push) Has been cancelled Details Limit htpasswd perms	2025-05-15 20:20:16 +02:00
Michael Eischer	95538fe956	restrict umask of htpasswd file	2025-05-15 19:56:53 +02:00
Michael Eischer	4e6193ceee	Merge pull request #339 from MichaelEischer/polish-changelogs Some checks failed test / Linux Go 1.23.x (push) Has been cancelled Details test / Linux (race) Go 1.24.x (push) Has been cancelled Details test / Linux Go 1.24.x (push) Has been cancelled Details test / lint (push) Has been cancelled Details test / Analyze results (push) Has been cancelled Details Polish changelogs	2025-05-12 19:00:34 +02:00
Michael Eischer	4c368ae1fb	polish changelogs	2025-05-12 18:50:47 +02:00
Michael Eischer	0ed9de379e	Merge pull request #341 from restic/dependabot/go_modules/github.com/prometheus/client_golang-1.22.0 Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0	2025-05-12 18:47:15 +02:00
Michael Eischer	451c4831f9	Merge pull request #345 from restic/dependabot/go_modules/golang.org/x/crypto-0.38.0 Bump golang.org/x/crypto from 0.37.0 to 0.38.0	2025-05-12 18:47:00 +02:00
dependabot[bot]	1610cf6cef	Bump golang.org/x/crypto from 0.37.0 to 0.38.0 Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.37.0 to 0.38.0. - [Commits](https://github.com/golang/crypto/compare/v0.37.0...v0.38.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.38.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2025-05-05 19:51:08 +00:00
dependabot[bot]	3d35116b3c	Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.21.1 to 1.22.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](https://github.com/prometheus/client_golang/compare/v1.21.1...v1.22.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2025-04-14 20:42:16 +00:00
@@ -1 +1 @@
 .13.0
 .14.0