Changes for version 0.004 - 2026-09-20
- SECURITY: fixes CVE-2026-85783, an unbounded age-header stanza count that let a single document force expensive work per decrypt attempt. Crypt::Age is raised to 0.004; decrypt (and decrypt_file/extract/rotate/edit) also caps age entries processed per document at 64 by default, raise-able via the new max_stanzas argument. (k192, k194)
- creation_rules_for no longer prints a spurious escape-sequence warning to STDERR before refusing a path_regex that Perl and Go RE2 read apart; the refusal itself is unchanged. (k197)
Modules
Perl implementation of Mozilla SOPS encrypted file format
age encryption backend for SOPS
the leaf a sops comment becomes -- not a value, and not a string
Parse and generate SOPS encrypted values
dotenv (.env) format handler for SOPS
the tied hash that keeps a flat format's parse in document order
INI format handler for SOPS
JSON format handler for SOPS
YAML format handler for SOPS
SOPS metadata section handling
the flat sops_age__list_0__map_enc metadata encoding of the ENV and INI formats