Comprehensive Security, Performance & Quality Improvements for Bitwarden Provider

.claude/settings.local.json

@@ -3,8 +3,11 @@
     "allow": [
       "Bash(mkdir:*)",
       "Bash(jq:*)",
-      "Bash(cat:*)"
+      "Bash(cat:*)",
+      "Bash(rustc:*)",
+      "Bash(git commit:*)",
+      "Bash(git push:*)"
     ],
     "deny": []
   }
-}
+}

.github/workflows/release.yml

@@ -1,4 +1,4 @@
-# This file was autogenerated by dist: https://opensource.axo.dev/cargo-dist/
+# This file was autogenerated by dist: https://axodotdev.github.io/cargo-dist
 #
 # Copyright 2022-2024, axodotdev
 # SPDX-License-Identifier: MIT or Apache-2.0
@@ -63,7 +63,7 @@ jobs:
         # we specify bash to get pipefail; it guards against the `curl` command
         # failing. otherwise `sh` won't catch that `curl` returned non-0
         shell: bash
-        run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargo-dist/releases/download/v0.28.1-prerelease.2/cargo-dist-installer.sh | sh"
+        run: "curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargo-dist/releases/download/v0.28.2/cargo-dist-installer.sh | sh"
       - name: Cache dist
         uses: actions/upload-artifact@v4
         with:

.gitignore

@@ -1,5 +1,5 @@
 .devenv*
-.pre-commit*
+.pre-commit-hooks.yaml
 .direnv
 target
 .DS_Store

.pre-commit-config.yaml

@@ -0,0 +1,5 @@
+repos:
+  - repo: https://github.com/doublify/pre-commit-rust
+    rev: v1.0
+    hooks:
+      - id: fmt

CHANGELOG.md

@@ -10,10 +10,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Integrate `secrecy` crate for secure secret handling with automatic memory zeroing
 - Bitwarden provider supports Bitwarden & Bitwarden Secrets Manager via
-  `bitwarden://` & `bws://` URIs.
+  `bitwarden://` & `bws://` URIs with enhanced error message sanitization.
+- Add `reflect()` method to Provider trait for provider introspection
+- Export `Provider` trait from secretspec crate for use in derived code
 
 ### Changed
 - Made keyring provider optional via `keyring` feature flag (enabled by default)
+- Unified provider parsing logic in init command to support all provider formats consistently
+- Downgraded keyring dependency to 3.6.2
+- Updated `with_provider` in derive macro to accept `TryInto<Box<dyn Provider>>` for consistent provider handling
+
+### Fixed
+- Fixed secret optionality logic: having a default value no longer makes a secret optional in generated types
 
 ## [0.2.0] - 2025-07-17