chore: bump version to 1.1.7

fix(postinst): thorough audit - fix argon2 salt and verify all password generation logic (#57 )
chore: bump version to 1.1.6 (#56 )
2026-06-09 09:11:25 -05:00 · 2026-06-09 09:10:31 -05:00 · 2026-06-09 08:21:20 -05:00 · 2026-06-09 08:10:00 -05:00
6 changed files with 26 additions and 5 deletions
--- a/Cargo.toml
+++ b/Cargo.toml
@ -12,7 +12,7 @@ members = [
 ]

 [workspace.package]
-version = "1.1.4"
+version = "1.1.7"
 edition = "2021"
 authors = ["Echo <echo@moon-dragon.us>"]
 license = "MIT"
--- a/debian/changelog
+++ b/debian/changelog
@ -1,3 +1,21 @@
+linux-patch-manager (1.1.7-1) unstable; urgency=low
+
+  * Release v1.1.7
+
+ -- git-echo <git-echo@moon-dragon.us>  Tue, 09 Jun 2026 09:11:11 -0500
+
+linux-patch-manager (1.1.6-1) unstable; urgency=low
+
+  * Release v1.1.6
+
+ -- git-echo <git-echo@moon-dragon.us>  Tue, 09 Jun 2026 08:10:52 -0500
+
+linux-patch-manager (1.1.5-1) unstable; urgency=low
+
+  * Release v1.1.5
+
+ -- git-echo <git-echo@moon-dragon.us>  Mon, 08 Jun 2026 20:15:50 -0500
+
 linux-patch-manager (1.1.4-1) unstable; urgency=low

  * Release v1.1.4
--- a/debian/control
+++ b/debian/control
@ -1,5 +1,5 @@
 Package: linux-patch-manager
-Version: 1.1.4-1
+Version: 1.1.7-1
 Architecture: amd64
 Maintainer: Moon Dragon <echo@moon-dragon.us>
 Installed-Size: 45000
--- a/debian/postinst
+++ b/debian/postinst
@ -207,8 +207,11 @@ generate_admin_password() {
    admin_password=$(openssl rand -base64 32 | tr -dc 'A-Za-z0-9!@#%^&*' | head -c 24)

    # Hash with argon2 (PHC format, compatible with the application)
+    # Generate a random 16-character salt (argon2 requires minimum 8 characters)
+    local admin_salt
+    admin_salt=$(openssl rand -base64 24 | tr -dc 'A-Za-z0-9' | head -c 16)
    local password_hash
-    password_hash=$(echo -n "${admin_password}" | argon2 salt -id -t 3 -m 65536 -p 1 -l 32 -e)
+    password_hash=$(echo -n "${admin_password}" | argon2 "${admin_salt}" -id -t 3 -m 16 -p 1 -l 32 -e)

    # Update admin user password in database
    # Only update if the placeholder hash is still present
--- a/frontend/package.json
+++ b/frontend/package.json
@ -1,7 +1,7 @@
 {
  "name": "patch-manager-ui",
  "private": true,
-  "version": "1.1.4",
+  "version": "1.1.7",
  "type": "module",
  "scripts": {
    "dev": "vite",
--- a/scripts/build-package.sh
+++ b/scripts/build-package.sh
@ -22,7 +22,7 @@ warn()  { echo -e "${YELLOW}[WARN]${NC}  $*"; }
 error() { echo -e "${RED}[ERROR]${NC} $*" >&2; exit 1; }

 PROJECT_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-VERSION="1.1.4"
+VERSION="1.1.7"
 RELEASE="1"
 PKG_NAME="linux-patch-manager"
 DEB_NAME="${PKG_NAME}_${VERSION}-${RELEASE}_amd64.deb"
Author	SHA1	Message	Date
Draco-Lunaris-Echo	d2dd27c2a3	chore: bump version to 1.1.7	2026-06-09 09:11:25 -05:00
Draco-Lunaris-Echo	592ff6a7ee	fix(postinst): thorough audit - fix argon2 salt and verify all password generation logic (#57 )	2026-06-09 09:10:31 -05:00
Draco-Lunaris-Echo	0c0f952f7f	chore: bump version to 1.1.6 (#56 ) Some checks failed CI Pipeline / Rust Format Check (push) Successful in 3s CI Pipeline / Clippy Lints (push) Successful in 53s CI Pipeline / Rust Unit Tests (push) Failing after 1m27s CI Pipeline / Security Audit (push) Successful in 4s CI Pipeline / Frontend Lint & Type Check (push) Successful in 15s CI Pipeline / Build .deb & Release (push) Has been skipped	2026-06-09 08:21:20 -05:00
Draco-Lunaris-Echo	2a18276884	fix(postinst): correct argon2 -m parameter from raw KiB to log2 value (#55 ) * chore: bump version to 1.1.5 * fix(postinst): correct argon2 -m parameter from raw KiB to log2 value * trigger CI	2026-06-09 08:10:00 -05:00