What's Changed
- fix(profile): include all Unix socket grant fields in JSON output by @YewFence in #1516
- fix: allow non-UTF-8 command line arguments by @kurtisc in #1521
- docs(profile): add profile-drafts section to guide by @SequeI in #1530
- docs: fix examples that used /tmp as a blocked path on Linux by @SequeI in #1531
- fix(profile): child overrides base in env_credentials by destination env var by @dselivanov in #1533
- fix(profile): resolve symlinked parent extends by @RomainMuller in #1536
- fix(macos): group-sourced keychain caps must not bypass deny_keychains_macos by @SequeI in #1539
- fix(audit): record and show seccomp capability decisions by @wswsmao in #1525
- docs(supervisor): clarify that capability elevation is disabled by default by @SequeI in #1540
- feat(cli): add platform enrollment and audit delivery by @lukehinds in #1538
- fix(deps): bump aws-lc-rs to 1.17.3 for hardened RPM builds by @Mno-hime in #1544
- docs: add git_config paths and document --format manifest for profile show by @SequeI in #1545
- fix(tool-sandbox): collapse command-not-found warnings into one summary line by @christine-at-datadog in #1550
- fix(query): dont widen grant suggestions to $HOME or XDG roots by @SequeI in #1541
- chore(deps): bump x509-cert from 0.2.5 to 0.3.0 by @dependabot[bot] in #1462
- chore: remove deprecated nono learn command by @SequeI in #1543
- chore: release v0.71.0 by @SequeI in #1553
New Contributors
- @RomainMuller made their first contribution in #1536
- @wswsmao made their first contribution in #1525
- @Mno-hime made their first contribution in #1544
- @christine-at-datadog made their first contribution in #1550
Full Changelog: v0.70.0...v0.71.0