What's Changed
- chore(nix): update prebuilt hashes for v0.81.0 by @github-actions[bot] in #2230
- feat(cli): record proxy audit events live to audit log by @lukehinds in #2235
- fix(cli): pause the PTY relay for network approval prompts by @panga in #2234
- fix(cli): support kitty release and repeat events in detach matcher by @lukehinds in #2239
- docs(nep): propose nep-0009 for cli oauth login and device enrollment by @lukehinds in #2245
- feat(cli): support approval elevation for AF_UNIX pathname sockets by @lukehinds in #2238
- docs(neps): update implementation status and pre-1.0 compatibility guidance by @SequeI in #2249
- chore(deps): bump the routine-rust group with 6 updates by @dependabot[bot] in #2251
- feat(approval): unix-socket webhook transport and network approvals in
nono proxyby @panga in #2240 - fix(proxy): fail upstream connections that go silent by @jeremy in #2237
- fix(policy): keep exact-file directory bypasses literal by @SebTardif in #2142
- feat(cli): add nono login and logout commands by @lukehinds in #2250
- fix(proxy): strip hop headers when the colon is spaced by @SebTardif in #2254
- refactor(cli): simplify remote session display and selector layout by @lukehinds in #2260
- fix(proxy): enforce endpoint rules for forward HTTP requests by @LuckVd in #2184
- docs(neps): add nep 0010 for session terminal capture by @lukehinds in #2259
- docs(schema): add command sandbox exec_paths and open_port fields by @daescha in #2276
- feat(proxy): network approval for plain-HTTP forward requests by @panga in #2265
- docs(undo): fix snapshot comments that describe a fast check and zeroed hash by @no-hup in #2264
- fix(docker): create home directory for nono user by @SequeI in #2278
- fix(sandbox): scope macOS process-exec to the read set by @panga in #2282
- feat(proxy): select aws_auth signing profile by placeholder access key ID by @nmgrenyi in #2277
- chore(deps): bump the routine-actions group with 5 updates by @dependabot[bot] in #2288
- chore(deps): bump ureq from 3.5.0 to 3.5.1 in the routine-rust group by @dependabot[bot] in #2289
- feat(proxy): derive aws_auth signing region from request host for wildcard upstreams by @panga in #2280
- fix(proxy): skip synthetic EP env vars for endpoint-filtered routes (#2286) by @bharathvemula in #2287
- feat(proxy): match AWS operations in endpoint_policy on aws_auth routes by @panga in #2279
- feat(proxy): add phantom_format to custom credentials by @panga in #2281
- fix(deps): upgrade aws-config and remove crypto-bigint audit exception by @SequeI in #2294
- feat(cli): add session terminal recording (NEP-0010) by @lukehinds in #2293
- feat(proxy): approvals for allow_domain endpoints by @panga in #2266
- fix(proxy): normalize trailing slash in endpoint rule paths by @rnestler in #2295
- fix(proxy): distinguish credential capture failures in HTTP responses by @wincent in #2191
- feat(cli)!: unify platform commands and automatic enrollment by @SequeI in #2297
- feat(proxy): accept AWS GovCloud regions and s3 bucket-subdomain wildcards by @panga in #2302
- fix(cli): allow mise to read ~/.tool-versions by @rnestler in #2307
- chore: release v0.82.0 by @SequeI in #2311
New Contributors
- @daescha made their first contribution in #2276
- @no-hup made their first contribution in #2264
- @wincent made their first contribution in #2191
Full Changelog: v0.81.0...v0.82.0