[code6x-release]

🤖 I have created a release beep boop

0.4.0 (2026-11-06)

Features

• --from is optional for a scheduled grant (default: now) (#140) (1c6291e)
• 1Password as a store (a read-only service account) (#145) (ec4b728)
• allow lower-case letters in variable names (#155) (737a599)
• approval through ntfy (#147) (de53e2d)
• audit open line and log ID in the journal (#157) (35ae28a)
• every error says what is wrong, where, and how to fix it (#133) (22e083c)
• Infisical as a store (a read-only machine identity) (#148) (5c230fd)
• nodkey doctor, a read-only check of the setup (#136) (d256524)
• nodkey try, a trial on one machine (stage 1 of #125) (#143) (371cd6d)
• ssh-agent: pin the peer process with a pidfd before reading /proc (#156) (e59592e)

Bug Fixes

• after a standing grant, nodkey preapprove names the window and the uses in each window (#141) (9b79688)
• low points of the installer and nodkey update (#154) (2c73d5d)
• nodkey changes says when there is no security fix (#142) (d25e11c)
• report a late answer of a timed-out lookup as a time-out (#151) (4cb4ea7)
• say why ssh-grant is refused by a rule (#153) (aa29cd6)
• stop the broker in order when stderr breaks, not by SIGPIPE (#152) (73b4bb4)

Documentation

• warn that nodkey is work in progress and gives no guarantee (#160) (ecc1e60)

---

This PR was generated with Release Please. See documentation.

[code6x-release]

🤖 Created releases:

• v0.4.0

🌻