All pull requests

Pull requests

• An item reached by several forEnv() calls at once is resolved once per caller

  communitycore:varlock
  #1288·voiys opened Nov 10, 2026Contributor·

  ·
  2

• Warn when a forEnv() arg can never match

  communitycore:varlockcore:website
  #1287·voiys opened Nov 10, 2026Contributor·

  ·
  1

• A cycle next to any other schema error ends the load with no explanation

  communitycore:varlock
  #1286·voiys opened Nov 10, 2026Contributor·

  ·
  1

• A decorator that fails to resolve reports its error twice

  communitycore:varlock
  #1285·voiys opened Nov 10, 2026Contributor·

  ·
  1

• Resolving a large schema is quadratic in the number of items

  communitycore:varlock
  #1284·voiys opened Nov 9, 2026Contributor·

  ·
  2

• Key globs with many stars take seconds to match

  communitycore:varlock
  #1283·voiys opened Nov 9, 2026Contributor·

  ·
  1

• Parser offsets are wrong for files with CRLF line endings

  communitycore:parsercore:website
  #1282·voiys opened Nov 9, 2026Contributor·

  ·
  1

• Support decrypting @encryptInjectedEnv blobs in generated C# modules

  communitycore:varlock
  #1281·jsskeen-utah opened Nov 9, 2026·

  ·
  10

• docs: add boxd sandbox guide

  communitycore:website
  #1277·MichielMAnalytics opened Nov 6, 2026·

  ·
  6

• Bump the github-actions group with 2 updates

  botdependenciesgithub_actions
  #1276·dependabot[bot] opened Nov 5, 2026Bot·

  ·

• Add @publicDynamicFilter to choose which public+dynamic values reach the client

  core:varlockcore:websiteintegration:astrointegration:nextjsintegration:vitemaintainer
  #1274·theoephraim opened Nov 3, 2026Member·

  ·
  1

  6

• Remove revealSensitiveConfig()

  BREAKINGcore:varlockcore:websitemaintainer
  #1268·theoephraim opened Nov 2, 2026Member·

  ·
  5

• 🐸 Versioned release

  core:varlockintegration:astrointegration:viteplugin:bitwardenplugin:passplugin:1passwordrelease
  #1264·bumpy-bot opened Oct 30, 2026Collaborator·

  ·
  1

• CI: version native helpers independently and split preview/release native pipelines

  core:websitemaintainer
  #1253·theoephraim opened Oct 28, 2026Member·

  ·
  24

• Keychain fixes, docs, smoke tests, and keychain delete

  core:varlockcore:websitemaintainer
  #1231·theoephraim opened Oct 14, 2026Member·

  ·
  1

  11

• Add @varlock/alchemy-integration

  core:varlockcore:websitemaintainer
  #1228·theoephraim opened Oct 14, 2026Member·

  ·
  30

• Make strict url checks errors; default url protocols to http/https

  BREAKINGcore:varlockcore:vscode-plugincore:websitemaintainer
  #1222·theoephraim opened Oct 13, 2026Member·

  ·
  6

• Harden exec(): fixed shell commands, array form, positional values, and stdin/env/cwd/timeout options

  BREAKINGcore:parsercore:varlockcore:vscode-plugincore:websitemaintainer
  #1174·theoephraim opened Oct 1, 2026Member·

  ·
  16

• Error when a load finds an empty config (breaking)

  BREAKINGcore:varlockcore:websiteintegration:nextjsintegration:vitemaintainer
  #1162·theoephraim opened Sep 29, 2026Member·

  ·
  4

• feat(varlock)!: stop reading strings as regexes

  BREAKINGcore:varlockcore:vscode-plugincore:websitemaintainer
  #1091·theoephraim opened Sep 15, 2026Member·

  ·
  1

  7

• Local encryption v2: session-based unlock and the approval panel

  core:varlockcore:websitemaintainer
  #1063·theoephraim opened Sep 3, 2026Member·

  ·
  2

• Add remote HTTP approval provider

  communitycore:varlockcore:website
  #1058·tnkuehne opened Sep 1, 2026·

  ·
  5

• Reject sensitive values redaction cannot protect

  BREAKINGcore:varlockcore:websitemaintainer
  #1057·theoephraim opened Sep 1, 2026Member·

  ·
  6

• docs: Minimal sandbox guide (session networking broker topology)

  core:websitemaintainer
  #1033·theoephraim opened Aug 25, 2026Member·

  ·
  9

• PoC v2 landing page

  core:websitemaintainer
  #1019·philmillman opened Aug 18, 2026Member·

  ·
  1