Verified 2026-08-17

Release status

opentine v0.7.0 is the current tagged release on GitHub and PyPI. v0.7.1 is under review in an open pull request; it is not a published package or a second set of release guarantees.

Use v0.7.0 for published behavior

python -m pip install --upgrade "opentine==0.7.0"
python -c "import opentine; print(opentine.__version__)"

• The exact source is the v0.7.0 tag, and the wheel and source distribution are on PyPI.
• Supported Python is Python 3.11–3.14; portable artifacts remain.tine v2, and repository objects remainv3.
• The tagged changelog is the source of truth for shipped commands, integrations, and compatibility guarantees.

v0.7.1 is a hardening follow-up

A hardening follow-up is under review in pull request #12, covering stronger secret redaction, signing and round-trip checks, safer shell environments, and explicit overwrite safeguards. It is not tagged or published to PyPI.

The work below is visible in the public pull request but remains unreleased. Do not present it as v0.7.0 behavior or install a nonexistent v0.7.1 wheel from PyPI.

• Quoted credentials and sensitive legacy migration blobs are being scrubbed on the paths that store or serve recorded content.
• Signing, attestation, overwrite, and save/load checks are being made more explicit so one safety override cannot silently imply another.
• Export/import and stored-data round trips are being audited across deep, mixed, and malformed shapes while preserving clear failure boundaries.
• The shell tool's inherited environment is being scrubbed before a subprocess can receive credential-shaped variables.

Product versions are not format versions

“v0.7.1” names a possible package release. It does not mean.tine format v0.7.1 or repository format v0.7.1. The published storage contracts remain portablev2 and repository v3 unless a future tagged release explicitly changes them.