age v1.3.2 released on 29-08-2026
age v1.3.2 is out now. It tightens input validation to close several edge cases and expands pre-built binaries to cover more platforms, improving robustness and installation convenience.
See the project’s GitHub release page for full notes and downloads.
What’s in this release
- Stricter input validation: rejects headers larger than 2 MiB, recipient lists with more than 1024 recipients, malformed SSH keys in recipient files, and non-UTF-8 plaintext written directly to a terminal (can be forced with -o -).
- Expanded pre-built binaries: added windows/arm64 and darwin/amd64 artifacts to the release set.
- Release archives now include compatibility plugins: age-plugin-pq, age-plugin-tag, and age-plugin-tagpq.
Upgrade notes
- Some inputs previously accepted are now rejected; check headers, recipient lists and recipient files before upgrading. To write non-UTF-8 plaintext to a terminal, use the -o – option.
- There are no other breaking API changes listed; keep a copy of the prior binary to hand if you rely on inputs that the new release rejects.
Share any comments or problems you encounter when upgrading on the project’s GitHub; feedback helps catch edge cases these stricter checks aim to close.
