docs: document exec + safe-default list, refresh CHANGELOG for 0.18.0#111
Merged
Conversation
Two user-facing changes shipped without docs and are now covered ahead of the 0.18.0 release: - exec (#98): new command reference entry, and scripting-guide rewritten to lead with `pass-cli exec` as the recommended way to hand a credential to a child command (env injection, never touches files/clipboard/history). The old `$(pass-cli get ...)` substitution is kept as a documented fallback with an explicit shell-tracing/CI-log leak caveat. README gains exec examples. - list safe-by-default (#95, #97): documented that the table now hides the Username column by default, plus the new --show-usernames and -q/--quiet flags, across command-reference, scripting-guide, and README. Also: - CHANGELOG: populate the long-stale [Unreleased] (top entry was 0.17.2) with everything since — exec, list-safe, sync content-hash markers (#102), unlock-latency overlap (#103), startup-latency cleanup (#104), tracked mise.toml (#100), CI-on-all-PRs (#105), agent skill (#101) — and head it as [0.18.0]. - CLAUDE.md: refresh the Sync Architecture notes for the #102 marker-based change detection and the #103 overlapped pre-unlock pull. No code changed. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019sxsM218vNzDbuMZ2nhMzx
arimxyer
added a commit
that referenced
this pull request
Jun 27, 2026
…ndings) The blank-check verification caught two doc bugs shipped in #111: - CHANGELOG #104 entry was inverted (the misleading squash subject "drop dead --hash, feedback, --offline" drove it). Verified against the #104 diff (67ca1d1): it removed the dead `rclone lsjson --hash` flag, ADDED pull-side sync feedback (not removed; still live at cmd/helpers.go:584), and ADDED a new global `--offline` flag. Corrected the entry and moved `--offline` to Added. Also added a [0.18.0] note for the arimxyer->reyamira install-source change. - scripting-guide.md: fixed a dead `#configuration` anchor -> the configuration reference doc. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019sxsM218vNzDbuMZ2nhMzx
arimxyer
added a commit
that referenced
this pull request
Jun 27, 2026
* chore(org): complete arimxyer -> reyamira repo reference sweep The repo transferred from the `arimxyer` org to `reyamira` (the old URLs now redirect). This rewrites every repository/web/publish reference to reyamira so 0.18.0 — the first release since the transfer — publishes to the right place. Changed: - .goreleaser.yml: release.github.owner + brews/scoops repository.owner -> reyamira; homepage/install snippets/changelog URLs -> reyamira. - homebrew/pass-cli.rb, scoop/pass-cli.json: homepage, release download URLs, autoupdate/checkver -> reyamira. - cmd/doctor.go: runtime GitHubRepo update-check slug -> reyamira/pass-cli. - cmd/root.go, cmd/keychain_status.go, internal/config/config.go: runtime help/doc URL strings -> reyamira (string literals/comments only). - README, SECURITY, CONTRIBUTING, all docs/**, docsite/hugo.yaml, issue templates, docs-validation workflow, winget/brew/scoop manifests, .doc-manager: badges, Pages URLs, repo links -> reyamira. Deliberately kept as arimxyer (identity / module path, not repo references): - Go module path `github.com/arimxyer/pass-cli` in go.mod + docsite/go.mod, all .go import statements, and the .goreleaser.yml ldflags that inject into it. - CHANGELOG history of the prior ari1110 -> arimxyer rename. - winget Publisher / Author / Copyright / PackageIdentifier (arimxyer.pass-cli) and PublisherUrl (publisher's GitHub profile). - issue-management.yml `assignees: ['arimxyer']` (GitHub username). Supersedes #92 (the long-open sweep, now stale). Verified: go build, go vet, valid .goreleaser.yml, residual-grep clean (only intentional keeps remain). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019sxsM218vNzDbuMZ2nhMzx * docs: correct #104 changelog entry and a dead anchor (verification findings) The blank-check verification caught two doc bugs shipped in #111: - CHANGELOG #104 entry was inverted (the misleading squash subject "drop dead --hash, feedback, --offline" drove it). Verified against the #104 diff (67ca1d1): it removed the dead `rclone lsjson --hash` flag, ADDED pull-side sync feedback (not removed; still live at cmd/helpers.go:584), and ADDED a new global `--offline` flag. Corrected the entry and moved `--offline` to Added. Also added a [0.18.0] note for the arimxyer->reyamira install-source change. - scripting-guide.md: fixed a dead `#configuration` anchor -> the configuration reference doc. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019sxsM218vNzDbuMZ2nhMzx --------- Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
Pre-release audit ahead of 0.18.0. Two user-facing changes shipped since
v0.17.21with no documentation, and the CHANGELOG had drifted (top entry was0.17.2). This closes those gaps. No code changes — docs + context only.What changed
docs/03-reference/command-reference.mdexecreference entry (mapping forms,-f/:fieldoverride, exit-code/read-only behavior, security note);listupdated for the hidden-username default +--show-usernames+-q.docs/02-guides/scripting-guide.mdpass-cli execas the recommended credential-injection method; old$(pass-cli get …)substitution kept as a documented fallback with a shell-tracing/CI-log leak caveat; list examples updated for the new default.README.mdexecexamples in both command blocks;listexamples reflect hidden-username default.CHANGELOG.md[Unreleased]with everything since0.17.2and headed it[0.18.0].CLAUDE.mdAudit notes
cmd/exec.go,cmd/list.go), not from the design plan — the shipped behavior is the source of truth.--offlineis still a live flag and correctly documented (it was not removed by perf(sync): cut sync-related startup latency — drop dead --hash, feedback, --offline #104 — only--hashand the "Syncing… done" feedback were); the sync-guide already covers the.synchashmarker.<details>fallback blocks in the scripting guide render correctly (docsite/hugo.yamlsetsunsafe: true).Release follow-up
After merge:
git tag v0.18.0 && git push origin v0.18.0. Version footers/dates auto-update viaupdate-docs-version.ymlon tag push.🤖 Generated with Claude Code