google/santa 2022.2 on GitHub

Notes

USB device blocking mode is now reported in santactl status and configurable GUI notifications have been added.
Package will no longer prompt to install Rosetta on ARM machines (fixes #732).
santactl version now reports the build version alongside the product version. This is part of the CFBundleVersion for each component.
A new fail-closed configuration key has been added that will cause Santa to block execution if it's unable to read a file.

santad: Add fail-closed mode by @russellhancox in #722
Fix additional strlcpy issue, simplify call paths by @mlw in #723
Update version of bazel rules_apple to fix broken 12.3 builds by @tnek in #726
Report USB blocking status with santactl status by @tnek in #727
Fix: remediate a crash in santametricservice by @pmarkowsky in #729
santad: Fix fail open tests in SNTExecutionControllerTest by @russellhancox in #730
Project: Add arm64 to hostArchitectures for productbuild by @russellhancox in #733
Project: Bump version to 2022.2 by @russellhancox in #734
Add a USB device blocking popup. by @tnek in #728
Project: Add build version to CFBundleVersion by @russellhancox in #736
Packaging: Keep package versions simple by @russellhancox in #737

Full Changelog: 2022.1...2022.2