TAG
#secrets
Stories connected through a shared idea, actor, technology or theme.
pnpm 12.8 warns about accidental environment-file publicationPackage packing and publishing now flag `.env` and `.env.*` files that are not explicitly listed in package metadata. The release also records pnpmfile checksums in pnpr lockfiles and avoids running unapproved build scripts while preparing certain git dependencies.→OpenHands 1.20 adds profile-scoped secrets and Docker runtime forwardingOpenHands 1.20 lets agent profiles select the secrets available to them, forwards Docker conversation runtime settings and allows automations to choose saved profiles. The release also isolates mock-LLM profiles from ambient secrets in tests.→Mastra 1.67 adds persisted workflow authoring and platform-backed agent toolsMastra 1.67 adds a Studio Workflow Builder backend that authors persisted workflow definitions through permission-gated server endpoints. Its new @mastra/connect package turns platform connections into agent tools with injected credentials, token refresh, live discovery and optional allowlisting.→