What's Changed
- fix(sandbox): allow exec in writable grant-dirs under command policies by @kipz in #1391
- docs(profiles): fix codeblock by @Stef16Robbe in #1426
- fix(exec): ignore OS workqueue threads in pre-fork thread check by @kipz in #1424
- feat(proxy): add SPIFFE/SPIRE workload identity auth for upstream routes by @SequeI in #1272
- fix(tool-sandbox): attribute daemonized callers to their command (cgroup on linux, verified daemon-pid on macos) by @kipz in #1417
- feat: add profile-declared no_proxy bypass support by @anugrahsinghal in #1415
- fix: sigV4 URI generation errors for uri's that have encoded characters by @intentionally-left-nil in #1430
- fix(proxy): don't cross-deny sibling routes sharing an upstream by @zbleness in #1437
New Contributors
- @Stef16Robbe made their first contribution in #1426
- @zbleness made their first contribution in #1437
Full Changelog: v0.68.0...v0.69.0