What's Changed
- chore(nix): update prebuilt hashes for v0.79.0 by @github-actions[bot] in #2028
- fix(cli): harden approval ids, orphan reaping and lexical why evaluation by @lukehinds in #2033
- fix(linux): honour open ports in proxy fallback by @MateSaary in #2042
- fix(macos): allow bypassed sockets under denied directories by @SequeI in #2041
- docs(neps): add nep-0005 for windows enforcement backend by @lukehinds in #2032
- fix(supervisor): separate network denial throttling from policy enforcement by @lukehinds in #2047
- feat(tool-sandbox): per-command aws_auth + fix scoped-proxy CA env ordering by @nmgrenyi in #2024
- docs(neps): add NEP-0002 for invocation-scoped commands by @lukehinds in #1971
- chore(deps): bump clap_complete from 4.6.9 to 4.6.11 by @dependabot[bot] in #2057
- chore(deps): bump der from 0.8.1 to 0.8.2 by @dependabot[bot] in #2056
- chore(deps): bump thiserror from 2.0.20 to 2.0.21 by @dependabot[bot] in #2058
- chore(deps): bump jsonc-parser from 0.33.1 to 0.34.0 by @dependabot[bot] in #2059
- feat(cli): add command-level keychain_access grant for macOS by @lukehinds in #2093
- fix(cli): keep Claude Code on its default Keychain service (#1950) by @ranguard in #2085
- fix(proxy): add serverAuth EKU to minted TLS intercept leaf certificates by @polarctos in #2068
- chore(deps): bump sigstore-sign from 0.11.0 to 0.14.0 by @dependabot[bot] in #2060
- chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #2102
- chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in #2101
- chore(deps): bump zeroize from 1.9.0 to 1.9.1 by @dependabot[bot] in #2096
- chore(deps): bump h2 from 0.4.19 to 0.4.20 by @dependabot[bot] in #2099
- chore(deps): bump sha1 from 0.10.7 to 0.11.0 by @dependabot[bot] in #2098
- chore(deps): bump ignore from 0.4.30 to 0.4.33 by @dependabot[bot] in #2097
- chore(deps): bump tokio-rustls from 0.26.5 to 0.26.6 by @dependabot[bot] in #2100
- docs: clarify OpenCode versions and refresh Pi quickstart by @SequeI in #2103
- chore: release v0.80.0 by @SequeI in #2104
- feat(command-policy): support SHA-256 executable pinning by @SequeI in #2105
- chore(deps): bump quinn-proto to 0.11.18 by @SequeI in #2106
New Contributors
- @github-actions[bot] made their first contribution in #2028
- @nmgrenyi made their first contribution in #2024
- @polarctos made their first contribution in #2068
Full Changelog: v0.79.0...v0.80.0