always-further/nono v0.10.0 on GitHub

What's Changed

Bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #210
Bump rustls from 0.23.36 to 0.23.37 by @dependabot[bot] in #213
Bump nix from 0.31.1 to 0.31.2 by @dependabot[bot] in #211
Add docs on network learn mode by @lukehinds in #187
fix: pre-create claude-code config lock file on Linux by @pierres in #221
fix: include character device files in policy group resolution by @pierres in #218
feat: profile inheritance via extends field by @josephgimenez in #203
feat: add allowed_commands support to profile security config by @josephgimenez in #204
fix: proxy host filtering and credential resolution for sandboxed by @lukehinds in #215
feat: remove RFC1918 private network CIDR deny list from host filter by @lukehinds in #226
feat: add env:// credential scheme and GitHub token proxy support by @lukehinds in #227
fix: landlock network false-negative and runtime ABI probe in setup by @josephgimenez in #230
fix: allow CLI flags to upgrade access mode of profile-covered paths by @pierres in #232
fix: don't inject phantom token for unavailable credentials (#234) by @lukehinds in #236
Add platform.claude.com to llm_apis allowlist by @pierres in #237
feat: add --override-deny CLI flag for targeted deny group exemptions by @lukehinds in #242

Full Changelog: v0.9.0...v0.10.0