v0.1.42

Changelog

Bug fixes

• 90707e3: fix: preserve denyRead precedence in linux mount planner (#100) (@jy-tan)
• 6692982: fix: restore Linux PTY and toolchain access for sandboxed CLIs (#105) (@jy-tan)
• a24ce65: fix: stage linux sandbox bootstrap executables (#106) (@jy-tan)

Other work

• b1221ad: Update dependabot GitHub Action rule (@jy-tan)
• 2086bfc: chore: add dependabot config (#101) (@jy-tan)

v0.1.41

Changelog

Bug fixes

• b13c863: fix: deduplicate macos seatbelt rules (#99) (@jy-tan)

Other work

• f624e5f: Support GitHub Copilot (@jy-tan)
• 6e66d9d: perf: reduce WSL runtime exec deny startup cost (#98) (@jy-tan)

v0.1.40

Changelog

New Features

• d5bce6a: feat: add config show command for active config inspection (#94) (@jy-tan)

Other work

• 625d52b: Update install URL on README.md (@jy-tan)

v0.1.39

Changelog

New Features

• 202f191: feat: auto-discover project configs (#93) (@jy-tan)

Other work

• a4118d9: Support Amp (@jy-tan)
• 1614f72: Support Crush (@jy-tan)
• 107f9d6: Update README.md badges (@jy-tan)
• 8eccd87: Update release workflow to host install script (@jy-tan)
• bd79483: config-schema: add descriptions (#91) (@dwt)

v0.1.38

Changelog

Bug fixes

• c414931: fix: detect multilink binaries and add option to skip runtime deny for them (#70) (@dwt)
• cb83cf1: fix: use os.SameFile for cross-platform shared executable detection (#89) (@jy-tan)

Other work

• b20b5fa: Add gopls and gotestsum to shell.nix (#88) (@dwt)

v0.1.37

Changelog

Bug fixes

• 0ba4319: fix: restore linux interactive PTY and runtime-dir behavior (#84) (@jy-tan)

Other work

• e586d56: Support Pi coding agent (@jy-tan)
• f1b7e2b: Update configuration doc (@jy-tan)
• 1e6b2d3: Update docs (@jy-tan)

v0.1.36

Changelog

Bug fixes

• 8d96d46: fix: preserve minimal /dev mounts in linux sandboxes (#83) (@jy-tan)
• 89bbe92: fix: use ~/.config as the canonical macOS config path (#81) (@jy-tan)

v0.1.35

Changelog

Bug fixes

• 5e925f5: fix(linux): respect allowGitConfig on sandbox (#77) (@zerone0x)
• ce87340: fix: make linux device setup container-safe (#80) (@jy-tan)

Other work

• 611b87f: Fix lint (@jy-tan)

v0.1.34

Changelog

Bug fixes

• fded07f: fix: harden linux sandbox reverse bridge startup (#78) (@jy-tan)

v0.1.33

Changelog

Bug fixes

• 6f975af: fix: harden linux deny mount canonicalization (#60) (@jy-tan)
• da9bfa1: fix: match command deny prefixes ending with '=' (#68) (@dwt)

Other work

• 95dd675: Add missing build binaries (#72) (@dwt)
• cd60788: Document how to run fence via Nix (#64) (@dwt)
• 4f0418e: Expose config resolution and merging for library (@jy-tan)
• b92c7d1: chore: add direnv nix shell for dev dependencies (#69) (@dwt)