v0.59.0

What's Changed

• chore(deps): bump shlex from 1.3.0 to 2.0.1 by @dependabot[bot] in #963
• fix: correct Quick Start profile reference in README by @guzalv in #1020
• refactor(profile): extract opencode profile from built-ins by @lukehinds in #1024
• feat: annotate suppressed denials and style save prompt paths by @AnnaXH in #985
• feat(cli): centralize timeout constants and make user-facing timeouts configurable by @SequeI in #981
• feat: support fine-grained method+path restrictions in allow_domain by @panga in #997

New Contributors

• @guzalv made their first contribution in #1020

Full Changelog: v0.58.0...v0.59.0

v0.58.0

What's Changed

• feat(profile): add JSONC support for profile files by @SequeI in #974
• fix(macos): emit platform rules after user write allows by @kipz in #971
• docs(readme): refine project description and quick start by @lukehinds in #988
• feat(profile): allow profiles to specify a target binary by @SequeI in #975
• ci(pr-summary): add pull request summary workflow by @lukehinds in #980
• chore(deps): update sigstore crates to 0.8.0 by @lukehinds in #992
• feat: add Bitwarden credential source (bw:// URI scheme) by @caiocdcs in #990
• ci(release): enable github attesations workflow for releases (current and future) by @lukehinds in #1006
• chore(deps): bump similar from 3.1.0 to 3.1.1 by @dependabot[bot] in #1013
• chore(deps): bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #1009
• chore(deps): bump actions/attest-build-provenance from 96b4a1ef7235a096b17240c259729fdd70c83d45 to e8998f949152b193b063cb0ec769d69d929409be by @dependabot[bot] in #1010
• chore(deps): bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #1011
• chore(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #1012
• chore(deps): bump serde_json from 1.0.149 to 1.0.150 by @dependabot[bot] in #1015
• chore(deps): bump landlock from 0.4.4 to 0.4.5 by @dependabot[bot] in #1014
• feat(policy): add java_runtime group and java-dev profile by @panga in #995
• chore(deps): bump rcgen from 0.13.2 to 0.14.8 by @dependabot[bot] in #900
• feat: session lifecycle hooks (#954) by @caiocdcs in #976
• refactor(pack-hints): refresh in detached process to avoid threads by @lukehinds in #1005
• fix(sandbox): preserve symlink path when adding CWD capability on macOS by @advaithsujith in #680
• fix(proxy): return 502 with audit entry on upstream connect failure by @attila in #1000
• fix: replace fd-based IPC with named socket for URL open helpers by @panga in #1007

New Contributors

• @attila made their first contribution in #1000

Full Changelog: v0.57.0...v0.58.0

v0.57.0

What's Changed

• feat(profiles): expand shadowing checks to include pack profiles by @lukehinds in #961
• chore(deps): bump aws-lc-rs from 1.16.3 to 1.17.0 by @dependabot[bot] in #962

Full Changelog: v0.56.0...v0.57.0

v0.56.0

What's Changed

• feat(cli): add option to configure process startup timeout by @lukehinds in #955

Full Changelog: v0.55.0...v0.56.0

v0.55.0

What's Changed

• chore(deps): bump clap_complete from 4.6.3 to 4.6.5 by @dependabot[bot] in #902
• fix: preserve child output without trailing newline (#881) by @AnnaXH in #911
• feat(landlock): add landlock v6 signal and abstract unix socket scoping by @lukehinds in #912
• feat(cli): add recursive unix socket directory grants by @lukehinds in #913
• feat(sandbox): add explicit allowlist for pathname af_unix sockets by @lukehinds in #915
• feat(profiles): verify pack signer identities and allow use of org/repo pull format by @lukehinds in #916
• feat(linux): implement af_unix pathname mediation by @lukehinds in #918
• fix(proxy): honor explicit credential_format on custom inject headers by @SequeI in #921
• Change warning to note about API changes by @lukehinds in #933
• docs(installation): add Arch Linux (AUR) section by @sarovin in #926
• refactor(package): base installs on package manifest by @lukehinds in #928
• docs(cli-security): add isolation scope and deployment model by @lukehinds in #937
• feat(macos): treat open_port 0 as localhost:* outbound by @SequeI in #931
• fix(musl): fix libc::Ioctl type mismatches for x86_64-unknown-linux-musl target by @sahuguet in #935
• test(integration-tests): use CARGO_TARGET_DIR in runner by @lukehinds in #939
• fix(pty): forward bare ESC immediately in filter_client_input by @caiocdcs in #948
• fix(cli): preserve macOS future-file grants in why --self by @panga in #949
• fix: quiet Landlock deny-overlap diagnostics on Linux by @SequeI in #950

New Contributors

• @sarovin made their first contribution in #926
• @caiocdcs made their first contribution in #948
• @panga made their first contribution in #949

Full Changelog: v0.54.0...v0.55.0

What's Changed

• chore(deps): bump clap_complete from 4.6.3 to 4.6.5 by @dependabot[bot] in #902
• fix: preserve child output without trailing newline (#881) by @AnnaXH in #911
• feat(landlock): add landlock v6 signal and abstract unix socket scoping by @lukehinds in #912
• feat(cli): add recursive unix socket directory grants by @lukehinds in #913
• feat(sandbox): add explicit allowlist for pathname af_unix sockets by @lukehinds in #915
• feat(profiles): verify pack signer identities and allow use of org/repo pull format by @lukehinds in #916
• feat(linux): implement af_unix pathname mediation by @lukehinds in #918
• fix(proxy): honor explicit credential_format on custom inject headers by @SequeI in #921
• Change warning to note about API changes by @lukehinds in #933
• docs(installation): add Arch Linux (AUR) section by @sarovin in #926
• refactor(package): base installs on package manifest by @lukehinds in #928
• docs(cli-security): add isolation scope and deployment model by @lukehinds in #937
• feat(macos): treat open_port 0 as localhost:* outbound by @SequeI in #931
• fix(musl): fix libc::Ioctl type mismatches for x86_64-unknown-linux-musl target by @sahuguet in #935
• test(integration-tests): use CARGO_TARGET_DIR in runner by @lukehinds in #939
• fix(pty): forward bare ESC immediately in filter_client_input by @caiocdcs in #948
• fix(cli): preserve macOS future-file grants in why --self by @panga in #949
• fix: quiet Landlock deny-overlap diagnostics on Linux by @SequeI in #950

New Contributors

• @sarovin made their first contribution in #926
• @caiocdcs made their first contribution in #948
• @panga made their first contribution in #949

Full Changelog: v0.54.0...v0.55.0

v0.54.0

What's Changed

• chore(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @dependabot[bot] in #898
• chore(deps): bump tokio from 1.52.2 to 1.52.3 by @dependabot[bot] in #899
• feat(profile): add platform-conditional profile fields by @lukehinds in #903
• fix(snapshot): validate restore targets against symlinks by @lukehinds in #904
• chore(deps): bump nix from 0.31.2 to 0.31.3 by @dependabot[bot] in #901
• feat: upgrade to Rust edition 2024, centralize workspace dependencies by @SequeI in #906
• feat(package): add package update, pinning and outdated by @lukehinds in #908

Full Changelog: v0.53.0...v0.54.0

v0.53.0

What's Changed

• feat: fix upstream TLS trust, intercept auth, and multi-route dispatch by @SequeI in #892
• fix(sandbox): cache Landlock ABI detection with OnceLock by @SequeI in #874
• feat(core): scrub command arguments for secrets by @lukehinds in #894

Full Changelog: v0.52.2...v0.53.0

v0.52.2

What's Changed

• feat(profile-save): suppress save-profile prompts for denied paths by @lukehinds in #876

Full Changelog: v0.52.1...v0.52.2

v0.52.1

What's Changed

• fix(cli): make 'nono why --host' aware of proxy domain filtering by @SequeI in #864
• fix(pty): stop clearing terminal scrollback on exit for normal-mode sessions by @SequeI in #878
• fix(policy): expand browser deny groups with missing Chromium-based browsers by @SequeI in #873
• fix: prevent feature unification from linking libdbus in no-keyring builds by @SequeI in #865
• fix(proxy): node 26 ignores HTTPS_PROXY by @quinncomendant in #872
• fix(schema): add missing 'environment' property to profile JSON schema by @SequeI in #884

New Contributors

• @quinncomendant made their first contribution in #872

Full Changelog: v0.52.0...v0.52.1

v0.52.0

What's Changed

• docs: restructure navigation and fix stale terminology by @SequeI in #863
• feat(env): add operator-controlled deny_vars to EnvironmentConfig by @advaithsujith in #796
• feat(cli): deprecate 'nono learn' and improve diagnostics by @lukehinds in #869

Full Changelog: v0.51.0...v0.52.0