v2.17.0

Adds -PlainText deterministic ASCII console output for automation logs, RMM consoles, and screen readers. Plain-text mode suppresses progress rendering and color-only status while preserving log file output.

SHA256: 6b1be2718c76a2b58f543ae6e75645d036aeacab5d1ff8ed7a0357ee114ad801

v2.16.0

Adds -SupportBundle for redacted diagnostic zip creation with WURepair log, JSON report, WindowsUpdate.log, CBS/DISM tails, relevant event exports, and manifest. Adds -NoRedact for intentional raw support bundles and a .NET SHA256 fallback for Catalog validation when Get-FileHash is unavailable.

SHA256: eefb5ad587fc3b69e6bcc9bc7df49010d1f8b3bb880fa8c0028afeed68ef2bc4

v2.15.0

Adds managed update-source guardrails for WSUS/SUP/WUfB policy values. Full repair preserves managed source policy by default and requires -ResetManagedUpdatePolicy for intentional removal.

SHA256: 77f5c9c3f7f4655df0aa6756a5055ecab51aef98bb0e17837eb4e2a94af20aed

v2.14.0

Validates Microsoft Update Catalog SSU packages with SHA256 plus Microsoft Authenticode signature before wusa.exe runs and records validation metadata in JSON reports.

SHA256: 47128d186a8dfdafa2056d9ab1277fcfa8259631c8b7ddce826fe875c108c89e

v2.13.0

Adds per-run mutation journal JSON for hosts, registry, policy, and cache changes; adds -RollbackJournal preview plus -ApplyRollback restore mode for reversible entries; and includes journal path/counts in JSON reports.\n\nSHA256: acb1308e7ac64d3a1b2a2ec4ad4263f3472eea42ff385ff24aec9887e7385b74

v2.12.0

Adds -Unattended mode for RMM/Intune/PDQ/Tanium runs, timeout-safe sc.exe service control, phase warning/error statuses, automation exit codes, and local parser/analyzer/Pester validation checks.\n\nSHA256: cf715dfa3563fc226eea74725f9d48a02b476894f6108447a6b3709d7ec6b25a

v2.11.0

Adds optional -JsonReport output for RMM ingestion. JSON reports include run metadata, options, phase results, pre/post diagnostics, changed fields, and service deltas.

SHA256: aa68de1491f2287c22feb29bbf8a62b2eb7951b1f2384b1395934532532cf799

v2.10.0

Adds optional -RepairServicingStack Microsoft Update Catalog SSU repair. Catalog repair downloads the newest matching SSU .msu, installs it with wusa.exe /quiet /norestart, and retries the next match on 0x800f0922.

SHA256: e5ba9742dadec0b5daa623db71b07156156e56547d891bc5175964414cba2e02

v2.9.0

Adds DISM /AnalyzeComponentStore parsing before component cleanup. StartComponentCleanup /ResetBase now runs only when cleanup is recommended and reclaimable component-store data is at least 1024 MB.

SHA256: 63cf71579b33e21289cbbb46f7635752bdcf80da517302b4b1860137fe71c99e

v2.8.0

Adds optional -StageSSU / -StageServicingStack preflight before DISM. The preflight uses Windows Update Agent to find, download, and install the latest applicable Servicing Stack Update before RestoreHealth.

SHA256: 867a860bdc741e5931a03ea6e9baf1c2045353a68d1e22658f91537f2d4d3faa