This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+2 more
Affected surfaces
Summary
AI summarySecret liveness validation and hook execution on secret changes were added.
Full changelog
What's New
Secret Liveness Validation
Test if secrets are actually valid with their target services. Built-in providers for OpenAI, Stripe, GitHub, AWS, and Generic HTTP with auto-detection from key prefixes.
qring validate OPENAI_API_KEY
qring validate --all
Hooks on Secret Change
Register shell commands, HTTP webhooks, or process signals that fire when secrets are written, deleted, or rotated.
qring hook add --key DB_PASS --exec "docker restart app"
qring hook add --tag backend --url "https://hooks.example.com/rotate"
Also in this release
.envfile import (qring import)- Project secret manifest (
qring check) - Env file sync (
qring env:generate) - Disentangle command
- Selective export (
--keys,--tags) - branchMap glob support
- Configurable rotation strategy
- Secret search/filtering
- MCP tools expanded from 20 to 31
See the full CHANGELOG for details.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About I4cTime/quantum_ring
Quantum-inspired keyring for AI coding agents. Secure secrets with superposition, entanglement, tunneling, and teleportation.
Related context
Related tools
Beta — feedback welcome: [email protected]