v0.4.2

This release brings a selection of fixes and new features:

Fixes:

• Now correctly handles windows style newlines in news for displaying
  note titles and lines
• tempfile file extension should now be more accurate when editing notes
  (for markdown vs plaintxt notes)
• python dependency updates
• workarounds documented for running on Windows

New features:

• Simplenote credentials may now be stored in environment variables,
  as an alternative to the configuration file.
  For example:

  [email protected] SN_PASSWORD=nihilist ./sncli
  

• new option to default to markdown for new notes
  (cfg_default_markdown = yes)

• Dockerfile for running sncli in a Docker container.

Thanks to all contributors who made this possible:

@gregwebs @wyattwalter @lostways @pataquets @clach04

:)

v0.4.1

This is a small bug-fix release. Now, sncli will not cleanup tempfiles created by editing or creating notes. This should help avoid data loss if sncli crashes between exiting the editor and the notes being saved or synced.

v0.4.0

It's time for another release!

---

IMPORTANT: this release contains a security fix for an arbitrary code execution bug. See commit ecc410f for technical details.

Code execution was possible on the following conditions:

• a note is being viewed in the internal pager
• the user uses the keyboard shortcut to copy a line to the system clipboard
• the line being copied was crafted in a way that would be interpreted by the shell

This can only be exploited with the user's explicit interaction, and the user's simplenote account would need to be breached for an attacked to add malicious lines. Therefore, this attack vector is probably low severity. There is a higher possibility that a user may copy a line that incidentally contains code that gets executed on copy.

Please update as soon as possible!

---

Changelog since 0.3.0:

• fix for code execution bug. See commit ecc410f.
• fixes for the following minor issues:
  • crash on invalid modification date #71
  • crash on failed login
  • crash and unhelpful debugging info on config file errors
• tidy setup.py to not depend on sncli (can cause strange issues installing)
• add ability to set custom config file through $SNCLIRC env var (thanks to
  @vrillusions #83)

v0.3.0

This release is the first release to use the Simperium syncing api instead of the legacy Simplenote api. Please update as soon as possible because the legacy api will be shut down by October. See original tracking issue: #64. Porting was added in pull request #67.

You may need to delete your current local notes database before launching the new version due to the note schema changing. Note data should not be lost, but you may see crashes and/or notes not syncing if this is the case. For the smoothest transition I would recommend:

1. make a backup copy of your current local notes database (found at cfg_db_path)
2. delete all files in the local notes database
3. update sncli to 0.3.0
4. launch sncli and wait for notes to be synced from server.
5. continue as usual

For any discovered problems, please open a new issue with details! While the new syncing backend has been manually tested by multiple users and various bugs identified and fixed, it is still likely that further issues remain. Please be sure to back up your notes!

Another important thing to note is that there is a new dependency: simperium-python3 (the simperium syncing client). If you install sncli and deps via pip/pipenv it should be fine, but system package maintainers may need to update their packages.