always-further/nono v0.27.0 on GitHub

What's Changed

Update warning in README for alpha release by @lukehinds in #551
fix: harden deny-overlap, reject unknown profile fields, narrow user_tools by @andreaTP in #550
feat(policy): split linux system groups for granular host compatibility by @lukehinds in #553
feat(keystore): add file:// credential source support by @lukehinds in #552
fix(macos): align Seatbelt signal isolation with Linux Landlock behav… by @kipz in #558
docs: move endpoint filtering to networking page by @andreaTP in #557
docs: add wsl2 cross-references to feature docs and fix discoverability by @scp7 in #556
feat(proxy): auto-detect credential format from inject_header by @RobertWi in #516
feat(manifest): add schema-first capability manifest with --config and --format manifest by @andreaTP in #534
feat(proxy): block CONNECT tunnels to credential upstreams and smart NO_PROXY by @RobertWi in #518
chore(deps): bump ureq from 3.2.0 to 3.3.0 by @dependabot[bot] in #542
chore(deps): bump tracing-subscriber from 0.3.22 to 0.3.23 by @dependabot[bot] in #543
docs: replace mention of --supervised with --capability-elevation in README by @rnestler in #565
feat(policy): check credentials Option with is_some_and instead of field access by @lukehinds in #566
fix(test): use real temp directories for env_nono_allow_comma_separated by @lukehinds in #564

Full Changelog: v0.26.1...v0.27.0