This is a maintenance release that updates the bundled root certificates to remove the compromised emSign certificate, see GHSA-6q48-6c7w-9gw2.

• Add test for nethsm commands by @AdityaMitra5102 in #805
• NetHSM CLI improvements by @mmerklinger in #809
• Update OpenPGP key for Markus by @robin-nitrokey in #811
• Update dependencies and release v0.14.1 by @robin-nitrokey in #812

Full Changelog: v0.14.0...v0.14.1

• trussed: Add model and revision to status output by @robin-nitrokey in #795
• Allow cryptography <53 by @robin-nitrokey in #798
• Use secrets rather than random to generate secrets by @dirkmueller in #800
• nk3: secret: Make get-password pipe compatible by @symptog in #801
• Fix typo in NetHSM error message by @mmerklinger in #802

• @dirkmueller made their first contribution in #800
• @symptog made their first contribution in #801

Full Changelog: v0.13.0...v0.14.0

This release adds support for NethHSM v5 and the fido2 provision-credential command, updates the minimum Python version to 3.11 and fixes some bugs.

Note that the default branch for this repository is now main. The master branch will be deleted soon.

• PIV factory-reset: show proper error message when the PIN isn't locked by @sosthene-nitrokey in #771
• Windows versioninfo and version format by @mmerklinger in #774
• pre-registration for entra by @AdityaMitra5102 in #783
• nethsm generate-key: Fix interactive mechanism selection by @robin-nitrokey in #784
• PIV import and PUK fixes by @ABuljko in #766
• fido2: plug some resource leaks in the client by @kevans91 in #781
• Add NetHSM features from Nethsm v3.0.0rc by @AdityaMitra5102 in #787
• Entra provision by @AdityaMitra5102 in #789
• Update clustering features for NetHSM v5.0 and release v0.13.0rc1 by @robin-nitrokey in #788
• Release v0.13.0 by @robin-nitrokey in #793

• @AdityaMitra5102 made their first contribution in #783
• @ABuljko made their first contribution in #766
• @kevans91 made their first contribution in #781

Full Changelog: v0.12.3...v0.13.0

• PIV factory-reset: show proper error message when the PIN isn't locked by @sosthene-nitrokey in #771
• Windows versioninfo and version format by @mmerklinger in #774
• pre-registration for entra by @AdityaMitra5102 in #783
• nethsm generate-key: Fix interactive mechanism selection by @robin-nitrokey in #784
• PIV import and PUK fixes by @ABuljko in #766
• fido2: plug some resource leaks in the client by @kevans91 in #781
• Add NetHSM features from Nethsm v3.0.0rc by @AdityaMitra5102 in #787
• Entra provision by @AdityaMitra5102 in #789
• Update clustering features for NetHSM v5.0 and release v0.13.0rc1 by @robin-nitrokey in #788

• @AdityaMitra5102 made their first contribution in #783
• @ABuljko made their first contribution in #766
• @kevans91 made their first contribution in #781

Full Changelog: v0.12.3...v0.13.0rc1