luckyPipewrench/pipelock v3.2.0

on GitHub

Changelog

🐛 Bug Fixes

• 4500249 fix(contain): narrow credential guard watches (#1008)
• a48d545 fix(coveragecert): fail closed when no trusted signer is supplied (#1014)

📦 Dependencies

• 3747656 chore(deps): update dependency setuptools to v83 [security] (#1007)

Other Changes

• 7a6f866 Add MCP tool-policy example with verify script (#1006)
• e0536c4 Add fetch proxy SSRF example with verify script (#1005)
• 913a051 Add kill switch example with verify script (#1004)
• c0715e6 Fail closed when replay verification is unpinned (#1016)
• 8c5ab23 Fix A2A forward request-body scanning (#1013)
• 990725b Harden security trust boundaries and parser semantics (#1010)
• 371893f Make executable config examples fail closed in CI (#1011)
• 51b21d4 Make startup validation honest and accelerate releases (#1012)
• 39e93b4 chore(ci): fail CI when a shipped config example cannot start (#1009)
• ecbe637 chore(release): reconcile v3.2.0 changelog, chart version, and broken instructions (#1017)
• 3850edb chore(release): set v3.2.0 changelog date to the tag date (2026-07-17) (#1019)
• ca1eb9a chore(release): stamp v3.2.0 date and add release-readiness gate (#1018)

📚 Docs: https://pipelab.org • 💬 Community: https://discord.gg/badNfhGKTc

Pipelock is an open-source agent firewall. Come poke holes in it.