ConfigForge v0.3.103

ConfigForge v0.3.103

Fixed

• Makes all bundled Windows Server 2016 and 2019 account-policy controls safe for Machine Configuration by using the same non-mutating Test wrappers as the repaired 2022 profiles.
• Treats controls without an authoritative value as informational instead of permanently noncompliant.
• Accepts the effective unset Windows Firewall inbound default on Server 2022 domain roles.
• Treats domain-managed Windows Server 2025 NTP client state as informational.

Validation

• Native Azure validation across Windows Server 2016, 2019, 2022, and 2025.
• Domain controller, domain member, and workgroup roles: 12 baselines total.
• Every Audit report matched its exact expected resource count with zero unread entries.
• Every ApplyAndAutoCorrect report finished Compliant with zero remaining noncompliant resources.
• The UseMachineId regression probe changed from 0 to 1 on every target.
• All Machine Configuration packages embed Microsoft.OSConfig 1.4.3 with the ConfigForge Set compatibility patch.

Windows and Linux artifacts are unsigned convenience builds. Verify downloads with the platform-specific SHA256SUMS files.

ConfigForge v0.3.102

Fixed

• Fixed pre-deploy Audit with OSConfig 1.4.3. Direct exec resource reads now normalize the CLI's single-item array response, so CSP, Registry, Test, and User Rights resources report their actual compliance instead of false indeterminate or "could not read" results.

ConfigForge Author v0.3.101-author.1 (macOS)

ConfigForge Author 0.3.101-author.1 - macOS

Release state: prerelease.

This release brings the author-safe Windows Server baseline, lossless data,
Machine Configuration packaging, build compatibility, and dependency security
updates from the 0.3.101 Full-edition line to Apple Silicon Macs.

Added

• Added a fail-closed Azure Machine Configuration package helper that patches
  both packaged Microsoft.OSConfig 1.4.3 Set wrappers to pass resource
  properties as compressed JSON.

Fixed

• Repaired the Windows Server 2022 Member Server, Domain Controller, and
  Workgroup Member baselines for standalone authoring and Machine
  Configuration export.
• Preserved exact QWord values and canonical Registry contracts across YAML,
  JSON, spreadsheets, Visual mode, Diff, reports, registration, and MOF
  export.
• Serialized overlapping history-retention and rationale writes.
• Supported source builds on Node 22.12 and Node 24.

Security

• Updated js-yaml to 4.3.1, DOMPurify to 3.4.13, fast-uri to 3.1.5,
  ip-address to 10.4.0, React Router to 7.18.2, Undici 6.x to 6.28.0, and
  Undici 7.x to 7.29.0.

Author-only scope

• Device deploy, audit, enforce, revert, elevation, health, and audit-results
  storage remain intentionally excluded.

Expected assets

1. ConfigForge-Author-0.3.101-author.1-mac-arm64.dmg
2. ConfigForge-Author-0.3.101-author.1-mac-arm64.dmg.blockmap
3. latest-mac.yml
4. sbom-macos-author.cdx.json
5. SHA256SUMS-macos-author.txt