Breaking changes
- This version drops some fields from metadata, so old
soarversions can't work with new metadata released by this version of soar.
⛰️ Features
- (install) Integrate local files in place with --integrate - (8f14c0b)
- Support codeberg, gitea and forgejo release sources (#209) - (af71c58)
🐛 Bug Fixes
- (cli) Build json2db output in an exclusive temp file (#220) - (0ec29cd)
- (cli) Keep logs off stdout for download -o - (#219) - (593f9e6)
- (cli) Harden prompts, flags, self-update, and config checks (#218) - (235c424)
- (config) Isolate system-mode paths behind SOAR_SYSTEM_* (#212) - (d079157)
- (db) Point maintainer links at the maintainers table (#228) - (7b653ae)
- (db) Harden migrations, search, sizes, and read-only URIs (#222) - (d7e0d7d)
- (dl) Bound stalls and harden resume, OCI and output writes (#216) - (8229155)
- (events) Throttle download progress and test the JSON stream (#227) - (5f0b825)
- (fs) Contain symlinks, traversal, and link ownership (#215) - (879974c)
- (install) Drop unhashed side programs, warn on unpinned URLs (#224) - (2d3fa80)
- (package) Bound onelf reads and surface integration errors (#226) - (56b21a5)
- (registry) Replace metadata atomically and harden sync (#223) - (aca7793)
- (sandbox) Enforce prebuilt ruleset and fail closed (#214) - (dfe7a08)
- Harden variant switching, symlink cleanup and path checks (#230) - (2c1a148)
- Name the host when a request lookup fails - (eb6e0ab)
🚜 Refactor
- Deprecate build_log and build_script fields (#221) - (6770ba3)
- [breaking] Drop build log fields and keep typed package errors (#229) - (e5fce6d)