Release v1.1.2

Security fixes

• macOS: ssh-agent no longer reachable from sessions. SSH_AUTH_SOCK was passed into the sandbox, so an agent could use your ssh keys. It's removed from every session and the socket is denied.
• macOS: deny_exec now applies under symlinked paths (/var → /private/var); blocked tools there still ran.
• Linux: deny_read covers files that appear during a session — a .env pulled in another terminal, or an editor saving a hidden file by renaming a temp file over it. Needs slirp4netns (the usual setup).

Fixes

• Linux: intermittent bwrap: loopback: Failed RTM_NEWADDR at session start on slower machines.
• macOS tests now run on every PR.

Release Notes (Git Log Fallback)

Release Information

• Current Tag: v1.1.2
• Release Date: 2026-11-10

Commits

Fixes

• 92d827f: fix: hide deny_read files that appear during a session (#53) (by @machado144)
• 07157aa: fix: macOS ssh-agent leak and deny_exec paths; run macOS CI on PRs (#52) (by @machado144)

Contributors

• @machado144

Installation

Linux/macOS (AMD64)

curl -L https://github.com/AxeForging/aigate/releases/download/v1.1.2/aigate-linux-amd64.tar.gz -o aigate-linux-amd64.tar.gz
tar -xvf aigate-linux-amd64.tar.gz aigate-linux-amd64
chmod +x aigate-linux-amd64
sudo mv aigate-linux-amd64 /usr/local/bin/aigate

Linux/macOS (ARM64)

curl -L https://github.com/AxeForging/aigate/releases/download/v1.1.2/aigate-linux-arm64.tar.gz -o aigate-linux-arm64.tar.gz
tar -xvf aigate-linux-arm64.tar.gz aigate-linux-arm64
chmod +x aigate-linux-arm64
sudo mv aigate-linux-arm64 /usr/local/bin/aigate

Windows

Invoke-WebRequest -Uri https://github.com/AxeForging/aigate/releases/download/v1.1.2/aigate-windows-amd64.zip -OutFile aigate-windows-amd64.zip
Expand-Archive -Path aigate-windows-amd64.zip -DestinationPath .
Move-Item -Path aigate-windows-amd64/aigate-windows-amd64.exe -Destination aigate.exe

From Source

go install github.com/AxeForging/aigate@v1.1.2