This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Affected surfaces
ReleasePort's take
Light signalRelease v0.1.0 adds RFC 6238 TOTP with PBKDF2 and SHA‑256 login signature authentication features.
Why it matters: If you use or develop auth flows for the tool, test the new TOTP and SHA‑256 signature support in a dev environment before production rollout.
Summary
AI summaryAdds RFC 6238 TOTP with PBKDF2 and SHA‑256 login signature authentication features.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
HTTP client, AskoResponse envelope, typed errors added to API HTTP client, AskoResponse envelope, typed errors added to API Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
User and session endpoint wrappers implemented in API User and session endpoint wrappers implemented in API Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
RFC 6238 TOTP with PBKDF2 golden vector added for authentication RFC 6238 TOTP with PBKDF2 golden vector added for authentication Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
SHA-256 login signature with golden vector implemented in auth SHA-256 login signature with golden vector implemented in auth Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
KeyObfuscator and login secret ported with golden-vector test in auth KeyObfuscator and login secret ported with golden-vector test in auth Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
login, logout, whoami commands added to CLI login, logout, whoami commands added to CLI Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
profile settings/follow/user subcommands added to CLI profile settings/follow/user subcommands added to CLI Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
TTY detection with NO_COLOR support implemented in output TTY detection with NO_COLOR support implemented in output Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
json/pretty renderer with file + TTY awareness added to output json/pretty renderer with file + TTY awareness added to output Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
XDG-aware session.json with 0600 perms introduced for sessions XDG-aware session.json with 0600 perms introduced for sessions Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
doctor, endpoints table, README, CONTRIBUTING added to project scaffolding doctor, endpoints table, README, CONTRIBUTING added to project scaffolding Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
MIT LICENSE and goreleaser config added for builds MIT LICENSE and goreleaser config added for builds Source: llm_adapter@2026-05-21 Confidence: low |
— |
Full changelog
suuntool v0.1.0
Unofficial Go CLI for the Suunto / Sports-Tracker API.
See README for usage and disclaimers.
⚠️ Unofficial, experimental, not affiliated with Suunto. May violate Suunto's TOS — use at your own risk.
Changelog
Features
- f2b30d98bd87cb13c2604f1e69206065a53311f6 feat(api): HTTP client, AskoResponse envelope, typed errors
- 26dc0100cf101ec2387f7ef156674c200cd14d38 feat(api): user + session endpoint wrappers
- c6b6b184b3fd8800a2014990911200294e38a0b9 feat(auth): RFC 6238 TOTP with PBKDF2 golden vector
- 59d2e886c13d330cc3cdfb9462160993851eaba5 feat(auth): SHA-256 login signature with golden vector
- 5ef21460d0a36c7dfc18481509c4a894f7381b9f feat(auth): port KeyObfuscator and login secret with golden-vector test
- 2da8dc4f52d698bd387695991d5c043ef48bb3a0 feat(cmd): login, logout, whoami commands
- 87c58898d7394ceba7bdb1cbcc1af5ff850607fd feat(cmd): profile settings/follow/user subcommands
- 31a5f670361c02812c9014b718442537ff48a3b4 feat(output): TTY detection with NO_COLOR support
- 227900b77d1ef8e3ea6c8f7abab775355a39bf09 feat(output): json/pretty renderer with file + TTY awareness
- 9d83eebe436786b57d4aa0bbb84857b77471739d feat(session): XDG-aware session.json with 0600 perms
- 035e59bdeddda8f190696e09687504947f7bf57a feat: doctor, endpoints table, README, CONTRIBUTING
- 29059e91af5f8080785872a36927b16c499d45b6 feat: scaffold suuntool module with root command and version
Other
- a698a3d83bb553884a411a9c59910f5425cbf4a9 build: add goreleaser config and MIT LICENSE for releases
Install (Homebrew, once the tap formula is published):
brew install tajchert/tap/suuntool
Install (Go):
go install github.com/tajchert/[email protected]
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About CLI and MCP for Suunto smartwatches data
All releases →Related context
Beta — feedback welcome: [email protected]