What's New in Rot: v2026.10

Release notes for Rot v2026.10.
By Candid Development |
Tags:

Deprecations

Features

Dynamic Values

Rot can now execute Jsonnet scripts to render dynamic values from other secrets. This can be used to generate dynamic secrets using other secret values or metadata.

TPM Management

Rot can now manage TPM PCRs and use it to encrypt/decrypt values via TPM sealing/unsealing. See Manage TPMs for more information.

Enhancements

  • Added rot entropy for calculating entropy of strings
  • Added Config > random to centrally set the character set, length, and cryptographic strength of randomly generated strings.
  • rot hash-new can now deterministically hash directories.
  • Updated dependencies

Fixes

Removals