v1.9.1

1.9.1 (2026-07-20)

Bug Fixes

• ci: gate lint on new issues only until v1.5 debt cleanup (516d77b)
• ci: pin Go toolchain to 1.25.12 for patched stdlib (govulncheck) (ab97d96)
• ci: repin actions/checkout to the v4.3.1 release SHA (f802e79)
• ci: run pipeline on master and pin actions/tools to immutable versions (c4cad81)
• cli: emit FILTER-03 warning once, guard empty Direction render, use json struct tags (85d1796)
• deps: bump cilium to v1.19.4 and x/net to v0.55.0 (govulncheck) (37a7fb4)
• evidence,output: dedup contributing sessions, validate policy refs, describe all selectors (69840d4)
• flowsource,dropclass: report truncated replay, honor ctx cancel in scan loop, hints doc (6843471)
• hubble: surface stream failures, populate LostEvents, apply --timeout, count write failures (1559343)
• land all 29 confirmed findings from the Fable 5 full code review (be06b7b)
• output: validate policy ref before writing YAML (7e4ce88)
• policy: nil-Spec merge guard, content-aware dedup keys, multi-entry ICMP merge, DNS rule dedup (4c2e474)