v1.0.3

Changelog

All notable changes to this project will be documented in this file.

[1.0.3] - 2026-04-27

Bug Fixes

• executor: Restore tty foreground pgrp for interactive sessions (#42)

CI

• Bump the github-actions group with 2 updates (#36)

Dependencies

• Bump the rust-dependencies group across 1 directory with 4 updates (#40)

Features

• executor: Forward signals to sandboxed process group to prevent orphans (#39)

Miscellaneous

• ci: Ignore false positive gitleaks finding in QA workflow cache key (#41)

[1.0.2] - 2026-04-06

Bug Fixes

• security: Harden sandbox with env filtering, mach/signal/dev restrictions (#31)

CI

• Bump the github-actions group across 1 directory with 3 updates (#33)

Dependencies

• Bump the rust-dependencies group across 1 directory with 6 updates (#34)

[1.0.1] - 2026-02-26

Bug Fixes

• profile: Use correct config path and merge seatbelt rules (#28)

[1.0.0] - 2026-02-26

Bug Fixes

• claude: Add XDG state and cache paths for Claude Code 2.x (#20)

Dependencies

• Bump the rust-dependencies group with 2 updates (#21)

• Bump the rust-dependencies group with 4 updates (#23)

• Bump the rust-dependencies group with 3 updates (#25)

Documentation

• changelog: Cliff config (#19)

Features

• profile: Add opencode profile and improve config handling (#24)

• Add allow_exec_sugid config option for setuid binary execution (#26)

[0.3.0] - 2026-02-02

Bug Fixes

• security: Enable Claude OAuth refresh and tighten sandbox access

CI

• Bump the github-actions group with 3 updates (#15)

Dependencies

• Bump clap from 4.5.54 to 4.5.56 in the rust-dependencies group (#14)

Documentation

• Rewrite for clarity and supply chain focus (#18)

Features

• Add allow_list_dirs for Bun runtime compatibility (#17)

[0.2.9] - 2026-01-31

Bug Fixes

• profile: Allow Claude Code UID-suffixed tmp dirs and skills (#12)

[0.2.8] - 2026-01-30

Bug Fixes

• Update zsh completions and README documentation (#10)

Documentation

• Update installation to recommend Homebrew over Cargo

[0.2.7] - 2026-01-29

Bug Fixes

• ci: Simplify homebrew formula update, remove version line

[0.2.6] - 2026-01-29

Bug Fixes

• ci: Update homebrew script for binary formula

[0.2.5] - 2026-01-29

Bug Fixes

• ci: Replace mislav action with custom homebrew update script

[0.2.4] - 2026-01-29

Bug Fixes

• ci: Use full repo path for homebrew tap push-to

• ci: Configure homebrew action for direct push to tap

• ci: Add GITLEAKS_LICENSE secret to gitleaks action

[0.2.3] - 2026-01-29

Bug Fixes

• ci: Push directly to homebrew tap instead of forking

• ci: Use GitHub App token for release commits

[0.2.2] - 2026-01-28

Bug Fixes

• sandbox: Harden path validation and error handling (#9)

• ci: Skip cargo install if binary already cached

Refactor

• release: Simplify Homebrew tap update workflow (#8)

v1.0.2

Changelog

All notable changes to this project will be documented in this file.

[1.0.2] - 2026-04-06

Bug Fixes

• security: Harden sandbox with env filtering, mach/signal/dev restrictions (#31)

CI

• Bump the github-actions group across 1 directory with 3 updates (#33)

Dependencies

• Bump the rust-dependencies group across 1 directory with 6 updates (#34)

[1.0.1] - 2026-02-26

Bug Fixes

• profile: Use correct config path and merge seatbelt rules (#28)

[1.0.0] - 2026-02-26

Bug Fixes

• claude: Add XDG state and cache paths for Claude Code 2.x (#20)

Dependencies

• Bump the rust-dependencies group with 2 updates (#21)

• Bump the rust-dependencies group with 4 updates (#23)

• Bump the rust-dependencies group with 3 updates (#25)

Documentation

• changelog: Cliff config (#19)

Features

• profile: Add opencode profile and improve config handling (#24)

• Add allow_exec_sugid config option for setuid binary execution (#26)

[0.3.0] - 2026-02-02

Bug Fixes

• security: Enable Claude OAuth refresh and tighten sandbox access

CI

• Bump the github-actions group with 3 updates (#15)

Dependencies

• Bump clap from 4.5.54 to 4.5.56 in the rust-dependencies group (#14)

Documentation

• Rewrite for clarity and supply chain focus (#18)

Features

• Add allow_list_dirs for Bun runtime compatibility (#17)

[0.2.9] - 2026-01-31

Bug Fixes

• profile: Allow Claude Code UID-suffixed tmp dirs and skills (#12)

[0.2.8] - 2026-01-30

Bug Fixes

• Update zsh completions and README documentation (#10)

Documentation

• Update installation to recommend Homebrew over Cargo

[0.2.7] - 2026-01-29

Bug Fixes

• ci: Simplify homebrew formula update, remove version line

[0.2.6] - 2026-01-29

Bug Fixes

• ci: Update homebrew script for binary formula

[0.2.5] - 2026-01-29

Bug Fixes

• ci: Replace mislav action with custom homebrew update script

[0.2.4] - 2026-01-29

Bug Fixes

• ci: Use full repo path for homebrew tap push-to

• ci: Configure homebrew action for direct push to tap

• ci: Add GITLEAKS_LICENSE secret to gitleaks action

[0.2.3] - 2026-01-29

Bug Fixes

• ci: Push directly to homebrew tap instead of forking

• ci: Use GitHub App token for release commits

[0.2.2] - 2026-01-28

Bug Fixes

• sandbox: Harden path validation and error handling (#9)

• ci: Skip cargo install if binary already cached

Refactor

• release: Simplify Homebrew tap update workflow (#8)

v1.0.1

Changelog

All notable changes to this project will be documented in this file.

[1.0.1] - 2026-02-26

Bug Fixes

• profile: Use correct config path and merge seatbelt rules (#28)

[1.0.0] - 2026-02-26

Bug Fixes

• claude: Add XDG state and cache paths for Claude Code 2.x (#20)

Dependencies

• Bump the rust-dependencies group with 2 updates (#21)

• Bump the rust-dependencies group with 4 updates (#23)

• Bump the rust-dependencies group with 3 updates (#25)

Documentation

• changelog: Cliff config (#19)

Features

• profile: Add opencode profile and improve config handling (#24)

• Add allow_exec_sugid config option for setuid binary execution (#26)

[0.3.0] - 2026-02-02

Bug Fixes

• security: Enable Claude OAuth refresh and tighten sandbox access

CI

• Bump the github-actions group with 3 updates (#15)

Dependencies

• Bump clap from 4.5.54 to 4.5.56 in the rust-dependencies group (#14)

Documentation

• Rewrite for clarity and supply chain focus (#18)

Features

• Add allow_list_dirs for Bun runtime compatibility (#17)

[0.2.9] - 2026-01-31

Bug Fixes

• profile: Allow Claude Code UID-suffixed tmp dirs and skills (#12)

[0.2.8] - 2026-01-30

Bug Fixes

• Update zsh completions and README documentation (#10)

Documentation

• Update installation to recommend Homebrew over Cargo

[0.2.7] - 2026-01-29

Bug Fixes

• ci: Simplify homebrew formula update, remove version line

[0.2.6] - 2026-01-29

Bug Fixes

• ci: Update homebrew script for binary formula

[0.2.5] - 2026-01-29

Bug Fixes

• ci: Replace mislav action with custom homebrew update script

[0.2.4] - 2026-01-29

Bug Fixes

• ci: Use full repo path for homebrew tap push-to

• ci: Configure homebrew action for direct push to tap

• ci: Add GITLEAKS_LICENSE secret to gitleaks action

[0.2.3] - 2026-01-29

Bug Fixes

• ci: Push directly to homebrew tap instead of forking

• ci: Use GitHub App token for release commits

[0.2.2] - 2026-01-28

Bug Fixes

• sandbox: Harden path validation and error handling (#9)

• ci: Skip cargo install if binary already cached

Refactor

• release: Simplify Homebrew tap update workflow (#8)

v1.0.0

Changelog

All notable changes to this project will be documented in this file.

[1.0.0] - 2026-02-26

Bug Fixes

• claude: Add XDG state and cache paths for Claude Code 2.x (#20)

Dependencies

• Bump the rust-dependencies group with 2 updates (#21)

• Bump the rust-dependencies group with 4 updates (#23)

• Bump the rust-dependencies group with 3 updates (#25)

Documentation

• changelog: Cliff config (#19)

Features

• profile: Add opencode profile and improve config handling (#24)

• Add allow_exec_sugid config option for setuid binary execution (#26)

[0.3.0] - 2026-02-02

Bug Fixes

• security: Enable Claude OAuth refresh and tighten sandbox access

CI

• Bump the github-actions group with 3 updates (#15)

Dependencies

• Bump clap from 4.5.54 to 4.5.56 in the rust-dependencies group (#14)

Documentation

• Rewrite for clarity and supply chain focus (#18)

Features

• Add allow_list_dirs for Bun runtime compatibility (#17)

[0.2.9] - 2026-01-31

Bug Fixes

• profile: Allow Claude Code UID-suffixed tmp dirs and skills (#12)

[0.2.8] - 2026-01-30

Bug Fixes

• Update zsh completions and README documentation (#10)

Documentation

• Update installation to recommend Homebrew over Cargo

[0.2.7] - 2026-01-29

Bug Fixes

• ci: Simplify homebrew formula update, remove version line

[0.2.6] - 2026-01-29

Bug Fixes

• ci: Update homebrew script for binary formula

[0.2.5] - 2026-01-29

Bug Fixes

• ci: Replace mislav action with custom homebrew update script

[0.2.4] - 2026-01-29

Bug Fixes

• ci: Use full repo path for homebrew tap push-to

• ci: Configure homebrew action for direct push to tap

• ci: Add GITLEAKS_LICENSE secret to gitleaks action

[0.2.3] - 2026-01-29

Bug Fixes

• ci: Push directly to homebrew tap instead of forking

• ci: Use GitHub App token for release commits

[0.2.2] - 2026-01-28

Bug Fixes

• sandbox: Harden path validation and error handling (#9)

• ci: Skip cargo install if binary already cached

Refactor

• release: Simplify Homebrew tap update workflow (#8)

v0.3.0

Changelog

All notable changes to this project will be documented in this file.

Bug Fixes

• security: Enable Claude OAuth refresh and tighten sandbox access

CI

• Bump the github-actions group with 3 updates (#15)

Documentation

• Rewrite for clarity and supply chain focus (#18)

Features

• Add allow_list_dirs for Bun runtime compatibility (#17)

Deps

• Bump clap from 4.5.54 to 4.5.56 in the rust-dependencies group (#14)

Bug Fixes

• profile: Allow Claude Code UID-suffixed tmp dirs and skills (#12)

Bug Fixes

• Update zsh completions and README documentation (#10)

Documentation

• Update installation to recommend Homebrew over Cargo

Bug Fixes

• ci: Simplify homebrew formula update, remove version line

Bug Fixes

• ci: Update homebrew script for binary formula

Bug Fixes

• ci: Replace mislav action with custom homebrew update script

Bug Fixes

• ci: Use full repo path for homebrew tap push-to

• ci: Configure homebrew action for direct push to tap

• ci: Add GITLEAKS_LICENSE secret to gitleaks action

Bug Fixes

• ci: Push directly to homebrew tap instead of forking

• ci: Use GitHub App token for release commits

Bug Fixes

• sandbox: Harden path validation and error handling (#9)

• ci: Skip cargo install if binary already cached

Refactor

• release: Simplify Homebrew tap update workflow (#8)

v0.2.9

Changelog

All notable changes to this project will be documented in this file.

Bug Fixes

• profile: Allow Claude Code UID-suffixed tmp dirs and skills (#12)

Bug Fixes

• Update zsh completions and README documentation (#10)

Documentation

• Update installation to recommend Homebrew over Cargo

Bug Fixes

• ci: Simplify homebrew formula update, remove version line

Bug Fixes

• ci: Update homebrew script for binary formula

Bug Fixes

• ci: Replace mislav action with custom homebrew update script

Bug Fixes

• ci: Use full repo path for homebrew tap push-to

• ci: Configure homebrew action for direct push to tap

• ci: Add GITLEAKS_LICENSE secret to gitleaks action

Bug Fixes

• ci: Push directly to homebrew tap instead of forking

• ci: Use GitHub App token for release commits

Bug Fixes

• sandbox: Harden path validation and error handling (#9)

• ci: Skip cargo install if binary already cached

Refactor

• release: Simplify Homebrew tap update workflow (#8)

v0.2.8

Changelog

All notable changes to this project will be documented in this file.

Bug Fixes

• Update zsh completions and README documentation (#10)

Documentation

• Update installation to recommend Homebrew over Cargo

Bug Fixes

• ci: Simplify homebrew formula update, remove version line

Bug Fixes

• ci: Update homebrew script for binary formula

Bug Fixes

• ci: Replace mislav action with custom homebrew update script

Bug Fixes

• ci: Use full repo path for homebrew tap push-to

• ci: Configure homebrew action for direct push to tap

• ci: Add GITLEAKS_LICENSE secret to gitleaks action

Bug Fixes

• ci: Push directly to homebrew tap instead of forking

• ci: Use GitHub App token for release commits

Bug Fixes

• sandbox: Harden path validation and error handling (#9)

• ci: Skip cargo install if binary already cached

Refactor

• release: Simplify Homebrew tap update workflow (#8)

v0.2.7

Changelog

All notable changes to this project will be documented in this file.

Bug Fixes

• ci: Simplify homebrew formula update, remove version line

Bug Fixes

• ci: Update homebrew script for binary formula

Bug Fixes

• ci: Replace mislav action with custom homebrew update script

Bug Fixes

• ci: Use full repo path for homebrew tap push-to

• ci: Configure homebrew action for direct push to tap

• ci: Add GITLEAKS_LICENSE secret to gitleaks action

Bug Fixes

• ci: Push directly to homebrew tap instead of forking

• ci: Use GitHub App token for release commits

Bug Fixes

• sandbox: Harden path validation and error handling (#9)

• ci: Skip cargo install if binary already cached

Refactor

• release: Simplify Homebrew tap update workflow (#8)

v0.2.6

Changelog

All notable changes to this project will be documented in this file.

Bug Fixes

• ci: Update homebrew script for binary formula

Bug Fixes

• ci: Replace mislav action with custom homebrew update script

Bug Fixes

• ci: Use full repo path for homebrew tap push-to

• ci: Configure homebrew action for direct push to tap

• ci: Add GITLEAKS_LICENSE secret to gitleaks action

Bug Fixes

• ci: Push directly to homebrew tap instead of forking

• ci: Use GitHub App token for release commits

Bug Fixes

• sandbox: Harden path validation and error handling (#9)

• ci: Skip cargo install if binary already cached

Refactor

• release: Simplify Homebrew tap update workflow (#8)

v0.2.5

Changelog

All notable changes to this project will be documented in this file.

Bug Fixes

• ci: Replace mislav action with custom homebrew update script

Bug Fixes

• ci: Use full repo path for homebrew tap push-to

• ci: Configure homebrew action for direct push to tap

• ci: Add GITLEAKS_LICENSE secret to gitleaks action

Bug Fixes

• ci: Push directly to homebrew tap instead of forking

• ci: Use GitHub App token for release commits

Bug Fixes

• sandbox: Harden path validation and error handling (#9)

• ci: Skip cargo install if binary already cached

Refactor

• release: Simplify Homebrew tap update workflow (#8)