PasswordPusher

v2.7.3 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 19h Secrets & Credentials

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

communicate-passwords docker encryption file-sharing information-technology msp

+12 more

netsec netsec-tools password password-expiration password-pusher password-safety ruby secret security security-tools self-hosted upload-file

ReleasePort's take

Light signal

editorial:auto 17h

The release removes the unmaintained apipie-rails dependency and adds a Financial Supporters section to the README.

Why it matters: Removal of the deprecated apipie-rails dependency eliminates reliance on an unsupported library; consider reviewing any code that still references it.

Summary

AI summary

Updates arrow_up: Dependencies updates, rocket: Features, and memo: What’s Changed across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature	Low	Adds Financial Supporters section to README. Adds Financial Supporters section to README. Source: llm_adapter@2026-06-12 Confidence: high	—
Deprecation	Medium	Removes unmaintained apipie-rails dependency. Removes unmaintained apipie-rails dependency. Source: llm_adapter@2026-06-12 Confidence: high	—

Full changelog

:memo: What’s Changed

:rocket: Features

Add Financial Supporters section to README (#4529) @pglombardo

:arrow_up: Dependencies updates

Remove unmaintained apipie-rails (#4555) @pglombardo
:arrow_up: Bump google-apis-core from 1.2.2 to 1.2.3 (#4551) @dependabot[bot]
:arrow_up: Bump google-cloud-core from 1.8.0 to 1.9.0 (#4552) @dependabot[bot]
:arrow_up: Bump json from 2.19.8 to 2.19.9 (#4553) @dependabot[bot]
:arrow_up: Bump google-cloud-storage from 1.60.0 to 1.61.0 (#4554) @dependabot[bot]
:arrow_up: Bump parallel from 1.28.0 to 2.1.0 (#4550) @dependabot[bot]
:arrow_up: Bump aws-sdk-s3 from 1.225.0 to 1.225.1 (#4549) @dependabot[bot]
:arrow_up: Bump retriable from 3.8.0 to 4.1.1 (#4548) @dependabot[bot]
:arrow_up: Bump msgpack from 1.8.2 to 1.8.3 (#4547) @dependabot[bot]
:arrow_up: Bump aws-sdk-core from 3.251.0 to 3.252.0 (#4546) @dependabot[bot]
:arrow_up: Bump standard from 1.54.0 to 1.55.0 (#4545) @dependabot[bot]
:arrow_up: Bump rubocop from 1.84.2 to 1.87.0 (#4544) @dependabot[bot]
:arrow_up: Bump google-apis-core from 1.2.1 to 1.2.2 (#4543) @dependabot[bot]
:arrow_up: Bump overcommit from 0.70.0 to 0.71.0 (#4542) @dependabot[bot]
:arrow_up: Bump aws-partitions from 1.1258.0 to 1.1259.0 (#4541) @dependabot[bot]
:arrow_up: Bump msgpack from 1.8.1 to 1.8.2 (#4540) @dependabot[bot]
:arrow_up: Bump net-imap from 0.6.4 to 0.6.4.1 (#4539) @dependabot[bot]
:arrow_up: Bump google-apis-core from 1.1.0 to 1.2.1 (#4537) @dependabot[bot]
:arrow_up: Bump pagy from 43.5.5 to 43.5.6 (#4538) @dependabot[bot]
:arrow_up: Bump aws-partitions from 1.1257.0 to 1.1258.0 (#4534) @dependabot[bot]
:arrow_up: Bump sqlite3 from 2.9.4 to 2.9.5 (#4535) @dependabot[bot]
:arrow_up: Bump rubocop-rails from 2.35.3 to 2.35.4 (#4536) @dependabot[bot]

:busts_in_silhouette: List of contributors

@dependabot[bot], @pglombardo and dependabot[bot]

:motor_boat: Docker Images

Available on Docker Hub:
https://hub.docker.com/r/pglombardo/pwpush

:running_man: Run This Version

Point DNS to your server (e.g. pwpush.example.com).
Download docker-compose.yml or clone the repo.
In docker-compose.yml, uncomment and set:
- TLS_DOMAIN: 'pwpush.example.com' for automatic Let’s Encrypt TLS.
Run:

docker compose up -d

Open https://pwpush.example.com or alternatively http://your-ip:5100.

:link: Useful Links

Breaking Changes

Removed unmaintained apipie‑rails gem

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track PasswordPusher

Get notified when new releases ship.

About PasswordPusher

Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

All releases →