What's Changed
- feat(cli): support --extends on nono proxy by @Frankie-Xu in #1686
- feat(cli): show resolved command_policies in profile show by @Frankie-Xu in #1685
- team-q's in README by @lukehinds in #1697
- Fix name README by @lukehinds in #1698
- fix: broken quote formatting in README by @SequeI in #1707
- fix(proxy): honor host:port deny entries under wildcard allow by @kipz in #1709
- fix(proxy): decode Basic auth for basic_auth phantom validation by @Frankie-Xu in #1683
- feat(examples): add initial set of tool sandbox examples by @lukehinds in #1696
- fix(proxy): skip network audit buffer when --no-audit is set by @Frankie-Xu in #1682
- fix(sandbox): grant Refer on command_policies outer exec gate by @SebTardif in #1722
- chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #1730
- chore(deps): bump similar from 3.1.1 to 3.2.0 by @dependabot[bot] in #1729
- chore(deps): bump thiserror from 2.0.18 to 2.0.20 by @dependabot[bot] in #1725
- chore(deps): bump base64 from 0.23.0 to 0.23.1 by @dependabot[bot] in #1727
- chore(deps): bump tokio-tungstenite from 0.28.0 to 0.30.0 by @dependabot[bot] in #1728
- chore(deps): bump aws-lc-rs from 1.17.3 to 1.18.0 by @dependabot[bot] in #1726
- docs(security): security model clarification by @lukehinds in #1734
- fix(cli): make profile promote work for existing profiles by @Frankie-Xu in #1703
- fix(cli): warn when a draft profile cannot resolve its extends chain by @Frankie-Xu in #1702
- feat(broker-path): sanitize PATH for host-side credential and URL brokers by @SequeI in #1733
- fix(proxy): add redeem_phantoms for by-value nonce redemption by @kipz in #1469
- fix(policy): make unmatched deny-glob warning platform-accurate by @SequeI in #1738
- feat(profile,proxy): glob patterns for env var and hostname allow/deny lists by @SequeI in #1692
- fix(credentials): configurable phantom format for prefix-sniffing clients by @kipz in #1489
- Update SECURITY.md to clarify security model by @lukehinds in #1747
- docs: add NEP process for design proposals by @SequeI in #1743
- fix(cli): honor inline custom credential routes in --config manifests by @Frankie-Xu in #1705
- fix(hooks): expand $WORKDIR/$HOME/etc. in session hook script paths by @SequeI in #1749
- fix(cli): hint at CAP_SYS_PTRACE on pidfd_getfd EPERM, fix doubled error prefix by @SequeI in #1750
- fix(why): evaluate network.deny_domain in nono why host queries by @SequeI in #1751
- chore(deps): bump ureq from 3.3.0 to 3.4.0 by @dependabot[bot] in #1754
- chore(deps): bump rcgen from 0.14.8 to 0.14.9 by @dependabot[bot] in #1752
- chore(deps): bump which from 8.0.5 to 8.0.6 by @dependabot[bot] in #1756
- chore(deps): bump hyper from 1.11.0 to 1.11.1 by @dependabot[bot] in #1755
- chore(deps): bump globset from 0.4.19 to 0.4.20 by @dependabot[bot] in #1753
- fix(sandbox): expand env vars anywhere in local-socket path, not just prefix by @YewFence in #1762
- fix(sandbox): use capturing group in ** deny-glob Seatbelt regex by @SequeI in #1764
- chore: release v0.75.0 by @SequeI in #1765
New Contributors
- @Frankie-Xu made their first contribution in #1686
- @SebTardif made their first contribution in #1722
Full Changelog: v0.74.0...v0.75.0