0.1.72 (2026-09-21)
Features
- fuse: deny CAP_SYS_ADMIN-only syscalls with no legitimate use via seccomp (732a36a)
Bug Fixes
- fuse: avoid proven deadlock by moving unlink/rmdir notifications off the fuser thread (4caf29f)
- ipc: cap request line length to bound unbounded-read DoS (d453549)
- login_flow: derive Debug on LoginFlowInit to fix test build (8ac6fd8)
- nc_passwords: clear password state from view on unmount (82a9bd1)
- nc_passwords: redact password field from PasswordEntry Debug output (40e4d79)
- nc_passwords: validate and encode domain in favicon URL (2f016ef)
- security: reject plaintext http/ws to non-loopback servers unless explicitly allowed (ce6f562)