v1.7.0

1.7.0 (2026-05-06)

Features

• add ci data flag with overlay-level conditions for brew and agent-permissions (4a2ea02)
• agent-permissions: adopt GitHub Codespaces terminal auto-approve defaults (5256493)
• brew: add CI conditions to non-essential base packages (6d52d53)
• codespaces: add setup bootstrap shim for templated installer (a62897d)
• windows: refresh YASB and GlazeWM desktop defaults (a85320e)
• winget: manage WinSCP via base overlay (5a96965)
• zsh: add chezmoi wrapper for auto Bitwarden unlock on apply (80d8d41)

Bug Fixes

• bootstrap: always load brew shellenv before post-install tools (fc8e59e)
• bootstrap: render Brewfile at template time to avoid lock (894c9e8)
• bootstrap: render Brewfile via stdin with explicit source (86428fd)
• bootstrap: resolve source context and disable CI brew upgrades (ebded53)
• bootstrap: resolve source dir and force no-upgrade in CI (36b6258)
• bootstrap: use CHEZMOI_SOURCE_DIR/Brewfile.tmpl path (ecad242)
• bootstrap: use grep for neovim Brewfile guard (c156d4e)
• brew: move neovim and tmux into base overlay (a5caa92)
• brew: remove iTerm2 in favor of Ghostty (239c2e9)
• ci: MegaLinter, DevSkim config, and YAML workflow hygiene (da515ee)
• ci: skip package upgrade maintenance scripts in CI (4ce63a1)
• ci: stabilize brewfile render in bootstrap path (ac2fd3a)
• ci: use POSIX grep in repro workflow (4aba020)
• codespaces: manage gitconfig overrides via source state (ca08bff)
• e2e: add bitwarden-cli to mise.toml instead of runtime install (17c1194)
• e2e: add deterministic Brewfile fallback path for bootstrap (9ad02a6)
• e2e: avoid brittle windows path and brew hash assumptions (545827e)
• e2e: correct mise tool name from bitwarden-cli to bitwarden (73a2454)
• e2e: enable volatile storage for Vaultwarden in CI (3785a2f)
• e2e: exclude scripts and externals when running install.sh in CI (20cc5ea)
• e2e: force Bitwarden setup in Linux install run (2cd988f)
• e2e: force CI env through install step for brew gating (5aafdd6)
• e2e: install bitwarden-cli via mise instead of npm (7c3d91f)
• e2e: invoke seed script with uv run, not python3 (79d6358)
• e2e: keep install test single-pass with scripts enabled (8071961)
• e2e: make install-script workflow pass with Vaultwarden and script phase (ed656ed)
• e2e: normalize windows managed-target checks and brew guard (f3922ad)
• e2e: pass --script to uv run so inline metadata is parsed (26ab625)
• e2e: pin bitwarden CLI to 2025.10.0 for HTTP Vaultwarden tests (cfb5d6c)
• e2e: render and run the actual install.sh instead of manual chezmoi commands (acd5f58)
• e2e: render Brewfile from source data (not init context) (ecb8218)
• e2e: render Brewfile with explicit source and honor excludes (c35c607)
• e2e: render Brewfile with init data and assert neovim (45a3625)
• e2e: skip Bitwarden templating during Linux install run (926cfcf)
• e2e: stabilize Windows home checks and Brewfile rendering (1fe905e)
• e2e: support Vaultwarden registration endpoint variants (e2d2fc9)
• e2e: symlink checkout as default chezmoi source dir (1e1e88c)
• e2e: unlock vault before Linux seed writes (69b68a9)
• e2e: use Docker health check instead of manual poll loop (7374182)
• e2e: use uv inline script metadata instead of pip install (65b2b12)
• e2e: use valid bitwarden CLI version (2026.3.0) (fe280cb)
• e2e: validate bw session before seeding vault (5fe3c4d)
• install: check chezmoi exit code instead of printing false Done (2bca1d6)
• installer: preserve mise path and assert neovim install in bootstrap (73ec017)
• install: install powershell-core before chezmoi init on Windows (d21d1f0)
• install: support DOTFILES_CHEZMOI_EXCLUDE for CI and non-interactive runs (9849a69)
• install: unlock Bitwarden before chezmoi secret templates (40404ab)
• lint: correct YAML escape in mega-linter config and update brewfile test (a695e4f)
• lint: resolve all MegaLinter non-blocking warnings (ca887f7)
• lint: resolve MegaLinter blocking errors (cfc6aff)
• linux: treat finicky config as macOS-only (22d917c)
• opencode: render generated config cleanly (c740059)
• scripts: source brew shellenv in tmux symlinks script (2dd6d49)
• test: init template data for bootstrap render checks (9ad7838)
• test: provide explicit codespaces data in bootstrap rendering (fac655f)
• test: render bootstrap template from home source root (f6f43ff)
• tests: make source renders deterministic under CI env (9396309)
• tmux: create config dir before symlink (dbd23ac)
• tmux: resolve brew shellenv before zsh/antidote checks (7c6fb9c)
• windows-bootstrap: enforce fail-fast and stabilize WSL package gating (1e5d4bd)
• windows-bootstrap: harden elevated logging and WSL first-run apply (a2304c3)
• windows-bootstrap: stabilize WSL provisioning and package gating (76a2a2f)
• windows-ci: bypass UAC elevation helper in CI (f2096c1)
• windows-install: preserve chezmoi command after PATH refresh (61258e6)
• windows: install gnupg so mise can verify tool signatures (751b7df)
• windows: streamline bootstrap and GlazeWM setup (3fa655f)
• windows: warn visibly when mise install fails during bootstrap (fd0715f)

Miscellaneous

• deps: update dependency chezmoi to v2.70.2 (#53) (7f29eb6)
• deps: update dependency chrome-devtools-mcp to v0.24.0 (#50) (fa902d1)
• deps: update dependency pipx:pre-commit to v4.6.0 (#51) (bcbb1fb)
• deps: update dependency uv to v0.11.10 (#48) (b293717)
• deps: update ghcr.io/chipwolf/badgesort docker digest to ddcd973 (#46) (3c1d8c6)
• deps: update github/codeql-action digest to e46ed2c (#47) (257cdb6)
• deps: update googleapis/release-please-action action to v5 (#52) (16d084f)
• deps: update mcr.microsoft.com/devcontainers/universal docker tag to v6 (#49) (539d221)
• opencode: don't double-ask when logging to daily note (2e52e16)