Skip to content

v0.16.0

Latest
Latest

Choose a tag to compare

View all tags
@abrichr abrichr released this 02 Sep 15:05
· 8 commits to main since this release
v0.16.0
7c59750

v0.16.0 (2026-09-02)

This release is published under the MIT License.

Bug Fixes

  • Bind guided qualification fault targets (#102, 06e6266)

  • Bind Teach corrections to halted runs (1f8674f)

  • Close Desktop release and Tray protocol gaps (#143, aaa0c59)

  • Close desktop release contract gaps (#143, aaa0c59)

  • Do not assert POSIX journal modes on Windows (#151, 5987957)

  • Enforce governed Desktop egress boundaries (#116, e6c42df)

  • Fail closed on untrusted native releases (#115, 6f43a97)

  • Require Teach correction artifacts (d92a3f8)

  • Retain dual-path qualification targets (#102, 06e6266)

  • Rustfmt overlay coords and skip POSIX 0600 on Windows (3345f7f)

  • Secure Intel macOS cryptography build (#103, 38490d0)

  • Ship the OpenAdapt robot as the macOS app icon and DMG (bacfc6c)

  • Update audited pip lock (#126, a73c3fa)

  • Update vulnerable Python dependencies (#103, 38490d0)

  • Validate release verification contract (#101, 9405a78)

  • Verify desktop release manifest bytes (#101, 9405a78)

  • Verify release metadata checksums (#101, 9405a78)

  • ci: Allowlist FFmpeg's public signing-key digest in gitleaks (#138, 6415619)

  • ci: Dispatch docs notification to renamed openadapt-ops repo (#100, 6f8a8da)

  • ci: Isolate Desktop secret scan to owned commits (b57cee9)

  • ci: Name the CI native checksum manifest exactly SHA256SUMS (#121, acfca3f)

  • release: Close the residual native release admission gaps (#122, 1511075)

  • release: Publish native chain from reviewed main (1e71b19)

  • release: Write the native version transform as exact UTF-8 LF bytes (#120, f4f1235)

  • tests: Read tracked source files as UTF-8, not as the platform locale (#140, 0ec925d)

Build System

  • Bump jsdom from 25.0.1 to 30.0.1 (#96, 0e63218)

  • Bump the npm-minor group with 3 updates (#145, 703f27b)

  • Lock python floors for httpx, segno, PyInstaller, and semantic-release (#146, 5a2aeab)

Chores

  • Ignore every .env variant, not one at a time (#134, 6ff4146)

  • Refresh audited dependency locks (7091039)

  • deps: Update GitHub Actions (#113, 9947b21)

  • deps: Update the rustls lock (#106, 40647ad)

  • deps: Update the Vite toolchain (#104, 86b1da2)

  • native: Sync native installer version to 0.15.0 (ac01e90)

  • policy: Sync generated source boundary (#136, 321f643)

Code Style

  • Consume the canonical cool design tokens from openadapt-web (b6599e7)

Continuous Integration

  • Bound the apt installs and prefer the canonical Ubuntu archive (#117, d354180)

  • Bump the actions group with 3 updates (#150, 5176e6e)

  • Bump the actions group with 3 updates (#98, 38b0502)

  • Correct the stale version comment on the pypi-publish pin (#124, bfb2882)

  • Deduplicate native release builds (#95, 25038a2)

  • Derive Desktop Production from central admission (#126, a73c3fa)

  • Gate Desktop Production on central admission (#126, a73c3fa)

  • Pin Desktop tests to merged Tray commit (#143, aaa0c59)

  • Publish verified desktop release manifest (#101, 9405a78)

Documentation

  • Align entry commands and substrate maturity across repo READMEs (#99, 18a3198)

  • Correct the signing state, the socket owner, and the left rail (#142, 098f3f6)

  • Keep the role and admission claims the metadata test pins (#142, 098f3f6)

  • Record the shell commit the phone fixtures were captured from (d8c0856)

  • Require HTTPS decision portal origin (#109, a06336b)

  • Rewrite the README, and say up front that there is no build to download (#142, 098f3f6)

  • Show mobile decision portal (#109, a06336b)

  • Tighten release candidate copy (#126, a73c3fa)

Features

  • Add a local demonstration coach HUD on the control overlay (#153, e90d3be)

  • Add the qualification program workbench (#137, 1ad1731)

  • Guide qualification fault cases (#102, 06e6266)

  • Guide the first real workflow run (#135, b02cb16)

  • Qualify this recording by filling Flow pins from the demo (#152, bb6580a)

  • Route hosted runs through Flow's governed adapter (#130, 87a08b9)

  • capture: Put both published workbench shots under the capture contract (b77a05a)

  • desktop: Authoring runner URI, Allow-per-sub, and mailbox poll (#154, 20c9304)

  • qualification: Add business decision authoring (#110, e6a9700)

  • qualification: Capture local institutional judgment cases (#112, 79a4e36)

Testing

  • Guard the POSIX 0600 assertions that cannot hold on Windows (#118, 38b17ac)

  • Pin repaired tray protocol peer (#143, aaa0c59)

  • release: State the O_NOFOLLOW contract per platform (#123, a735601)

  • runner: Make the lease-expiry test observe the clock, not race it (#119, 8bebe4b)

Detailed Changes: v0.15.0...v0.16.0

Assets 7
Loading