The full list is in CHANGELOG.md; releases with signed downloads are on GitHub Releases.

0.3.5 — 2026-09-16

License: the app, CLI and core move from MIT to FSL-1.1-MIT — source public, no competing products, MIT again two years after each release. SDKs, the skill and the plugin stay MIT.
keykeeper import ./.env imports a project into one inject-only credential: approve the variable names, and every imported value goes into the Keychain. No guessing which values are safe to expose as plain metadata. Originals remain untouched; review skipped variables and verify the project before deleting them. Single-line assignments only, no shell interpolation; malformed/multiline syntax is refused.
Provider picker lists brands with regional and plan variants underneath; 113 templates, one docs page each.
Bundled Codex and Claude Code plugins, with installation instructions in Settings.
Separate access/change histories and drill-down caller permissions; historical results are distinct from current approval.
Fix approval status refresh, prompt corners after expanding details, and missing Chrome import options for existing website sessions.

0.3.4 — 2026-09-15

Approvals moved from plain files into a single app-owned Keychain item. Always is scoped to the approved program; an unsigned app is identified by the file it runs from; a fresh install enforces background approvals. Existing approvals ask once more.
Approval window redesigned: the caller's message in the middle, KeyKeeper's own verdict, three answers — just this once, while it runs, don't ask again.
Requests carry --reason (a missing one shows in orange in the window); new keys declare a purpose; rules flag inflated requests; an optional second-model reviewer adds an opinion.
Inject-only credentials: keys an agent creates are served only to keykeeper run.
Plain fields written over the socket are not injected until confirmed in the app.
Clipboard saves take what is on the clipboard and show a masked preview with the copy time.
Login sessions can be opened inside KeyKeeper; credentials can record an expiry date.