Security Advisories
What's Changed
- docs(cli): update built-in profiles and groups list by @lukehinds in #1840
- feat(profile)!: remove all legacy aliases and deprecation shims for v1.0.0 prep by @SequeI in #1826
- docs(cli): link built-in groups to their policy.json source by @SequeI in #1850
- fix(cli): ignore unhandled keys in the denied-path review selector by @MateSaary in #1852
- fix(cli): always re-invoke the credential source for ambient captures by @kipz in #1849
- fix(lib): validate localhost port ranges for zero end and inverted ranges by @Ayush7614 in #1860
- fix(cli): guard denied-path selector against type-ahead by @MateSaary in #1863
- fix(cli): keep legacy ~/.claude.json in sync with CLAUDE_CONFIG_DIR redirects by @SequeI in #1837
- ci: run full integration suite on PRs by @SequeI in #1872
- feat(cli): use CLONE_FILES bootstrap for network-notification sessions by @lukehinds in #1825
- chore: release v0.77.0 by @lukehinds in #1874
- fix(proxy): fail closed when upstream DNS returns no addresses by @SebTardif in #1894
- feat(macos): allow opting out of implicit DNS grants by @domenkozar in #1876
- fix(cli): reject . and .. in pack namespace and name by @SebTardif in #1896
- fix(cli): harden calculate_dir_size against silent errors and symlink cycles by @Ayush7614 in #1862
- feat(cli): backend-signed approval webhooks with submit-and-poll by @lukehinds in #1879
- feat(cleanup)!: remove remaining deprecated surfaces by @SequeI in #1871
- fix(cli): stop save-prompt failures from overriding the child exit code by @SequeI in #1804
- fix(why): tolerate volatile process-relative aliases in --self reload by @tim-nordell-nimbelink in #1873
- feat(nix): add #prebuilt output for release tarball installs by @levonk in #1823
- fix(cli): pass through AF_UNIX traffic in proxy-only mode by @lukehinds in #1902
- test: isolate integration suite XDG state by @SequeI in #1911
- chore(deps): bump DeterminateSystems/nix-installer-action from 22 to 23 by @dependabot[bot] in #1904
- build(deps): update rustls and chacha20 by @SequeI in #1915
- chore(deps): bump DeterminateSystems/magic-nix-cache-action from 14 to 15 by @dependabot[bot] in #1906
- chore(deps): bump aws-lc-rs from 1.18.0 to 1.18.1 by @dependabot[bot] in #1907
- chore(deps): bump aws-config from 1.10.1 to 1.12.0 by @dependabot[bot] in #1909
- chore(deps): bump jsonschema from 0.48.0 to 0.56.0 by @dependabot[bot] in #1908
- chore(deps): bump ureq from 3.4.0 to 3.4.1 by @dependabot[bot] in #1905
- chore(deps): bump landlock from 0.4.5 to 0.4.7 by @dependabot[bot] in #1910
- fix(proxy): preserve query string on jwt-bearer token_url by @SebTardif in #1913
- ci: add release runbook and preflight checks by @SequeI in #1914
- chore: refresh maintainer guidance and remove stale references by @SequeI in #1922
- fix(tool-sandbox): fall back to the interpreter's directory for RPATH-less ELF dependencies by @Ekleog in #1650
- chore: release v0.78.0 by @SequeI in #1928
New Contributors
- @Ayush7614 made their first contribution in #1860
- @domenkozar made their first contribution in #1876
- @tim-nordell-nimbelink made their first contribution in #1873
- @Ekleog made their first contribution in #1650
Full Changelog: v0.76.0...v0.78.0