What's Changed
- chore(deps): bump criterion from 0.5.1 to 0.8.2 by @dependabot[bot] in #1232
- chore(deps): bump sigstore-trust-root from 0.8.0 to 0.9.0 by @dependabot[bot] in #1229
- fix(proxy): match wildcard credential upstream routes by @panga in #1243
- docs(proxy): fix stale X-Nono-Token authentication claim by @SequeI in #1246
- docs(proxy): explain proxy activation via custom credentials by @SequeI in #1247
- ci: idempotent publish-crates + cross-compile check on release PRs by @SequeI in #1245
- refactor(network): introduce NetworkIntent and remove ProxyOnly placeholders by @SequeI in #1225
- ci: fix mapping err in compile step by @SequeI in #1251
- fix(tool-sandbox): pass TLS trust bundle env vars to tool-sandbox children by @kipz in #1249
- feat(tests): add end-to-end integration tests for sandbox execution strategies by @mvanhorn in #1213
- fix(tool-sandbox): skip missing fs_read/fs_write dirs instead of erroring by @kipz in #1253
- chore: migrate GitHub org references from always-further to nolabs-ai by @SequeI in #1235
- feat(proxy): add HTTP/2 support for reverse proxy and credential injection by @panga in #983
- fix(ci): downgrade runner to ubuntu-latest by @SequeI in #1259
- fix(sandbox): warn when capability path is on a 9P filesystem by @SequeI in #1207
- fix(network): wire --allow-endpoint through to credential routes by @SequeI in #1127
- fix(network): error early on contradictory network flag combinations by @SequeI in #1263
- feat(tool-sandbox): add @git:common-dir dynamic token by @kipz in #1271
- feat(tool-sandbox): simplify self-invocation policy by @lukehinds in #1268
- chore: release v0.66.0 by @lukehinds in #1293
Full Changelog: v0.65.1...v0.66.0