Revision history for pg_vault_tde

This file tracks default_version bumps in pg_vault_tde.control / VERSION.
Dates are taken from git history (`git log --follow -- VERSION
pg_vault_tde.control`) or, where available, from the annotated release tag;
"in-tree" means the version string changed in this branch's history but the
commit was not (yet) tagged as a release at the time of writing. See
doc/ROADMAP.md for the full feature-by-feature history, including v1.0-v1.3.

1.7.0  (in-tree since 2026-06-09; current default_version, unreleased)
    - TOAST chunk-level storage encryption, KEK hierarchy / key rotation for
      all KMS providers, PKCS#11 / HSM support, audit logging, fixed-size
      type index key encryption for tde_btree (int4, int8, uuid, date,
      timestamptz), CREATE INDEX CONCURRENTLY / REINDEX CONCURRENTLY support
      on encrypted_heap tables.
    - See doc/ROADMAP.md "v1.7" section for the complete list.

1.6.0  (tagged 2026-05-26)
    - Local PKCS#12 wallet KMS provider (production-ready offline
      encryption): passphrase via command/env/file, dev-mode passphrase
      convenience, wallet lock/unlock, Vault-to-wallet migration.

1.5.0  (in-tree since 2026-03-04)
    - Per-table DEK isolation, online key rotation (pg_vault_tde_rotate_online),
      wire format v3 with per-tuple authenticated associated data.

1.4.0  (in-tree since 2026-02-28)
    - Containerized CI/CD pipeline, tde_btree encrypted index access method
      (AES-256-SIV), wire format v2.

1.0.0 - 1.3.0
    - Initial development: AES-256-GCM encrypted_heap Table Access Method,
      HashiCorp Vault / OpenBao KMS integration, logical decoding
      compatibility, multi_insert / background worker / health_check.
    - Not individually dated in this file; see doc/ROADMAP.md.