v1.1.7

Dependency-maintenance release — no optimizer behavior changes from v1.1.6.

What changed since v1.1.6:

• Build-tool security bumps (fleet sweeps #4 and #5): setuptools 75.8.2 → 84.1.0 in the build system and dev set (through 83.0.0 for PYSEC-2026-34, then 84.1.0 for GHSA-xmj3-9gf7-h52w), the pywin32 pin aligned 310 → 312 to match the canonical pin list, and black 25.1.0 → 26.10.1 in the dev set (PYSEC-2026-2120/2121). Build and development tooling only — no runtime dependency changed.
• Dependency installs are hash-locked now (fleet policy adopted 2026-10-25): the runtime, development, and release sets each have a committed lock (NitroCore/requirements.lock.txt, requirements-dev.lock.txt, requirements-release.lock.txt), and every install path — CI, the release workflow, and the documented from-source routes — installs with --require-hashes. The release workflow's PyInstaller install, previously an inline pip install pyinstaller==6.11.1 with floating transitives, now goes through the release lock.
• A full functional bug hunt ran on this tree and found no defects to fix: full suite 195 passed, 1 skipped; --help, --self-check, and a headless --dry-run preview pass; the interface was built under a virtual display with all six tabs visited and every registered button confirmed wired to a real command.

Assets: NitroCoreOptimizer.exe, NitroCorePortable.zip, SHA256SUMS.txt. The release workflow's staged start proof (including the standard-user spawn check) ran and passed before publishing; no other hardware proof is claimed.

Full Changelog: v1.1.6...v1.1.7

v1.1.6

Full Changelog: v1.1.5...v1.1.6

v1.1.5

What's Changed

• chore(deps): bump softprops/action-gh-release from 2.6.2 to 3.0.3 by @dependabot[bot] in #11
• chore(deps-dev): bump wheel from 0.45.1 to 0.48.0 in /NitroCore by @dependabot[bot] in #5
• chore(deps): bump pywin32 from 310 to 312 in /NitroCore by @dependabot[bot] in #2
• chore(deps): bump github/codeql-action/init from 3.38.3 to 4.38.3 by @dependabot[bot] in #13
• chore(deps): bump github/codeql-action/analyze from 3.38.3 to 4.38.3 by @dependabot[bot] in #12
• chore(deps-dev): bump flake8 from 7.1.2 to 7.4.1 in /NitroCore by @dependabot[bot] in #6
• chore(deps-dev): bump types-setuptools from 75.8.0.20250110 to 84.0.0.20261006 in /NitroCore by @dependabot[bot] in #4
• chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 by @dependabot[bot] in #3
• chore(deps-dev): bump pytest-cov from 6.2.1 to 7.1.0 in /NitroCore by @dependabot[bot] in #1

Full Changelog: v1.1.4...v1.1.5

v1.1.4

Full Changelog: v1.1.3...v1.1.4

v1.1.3

Security

• Registry undo restore now refuses any snapshot entry outside HKCU — a
  planted %APPDATA%\NitroCore\registry_undo\undo-*.json can never turn this
  elevated process into a registry writer in another hive (every snapshot the
  app writes is HKCU)
• Helper executables (powershell, powercfg, cleanmgr, dism) are now
  resolved via %SystemRoot%\System32 instead of PATH (system_tool_path()),
  so a PATH-hijacked binary can never be picked up with admin rights
• Build and dev dependencies fully pinned (setuptools==75.8.2 in
  pyproject.toml; exact pins across requirements.txt /
  requirements-dev.txt) for reproducible privileged builds

Added

• First pytest suite (NitroCore/tests/, 90+ tests): profiles/pipeline logic,
  preview recorder, CLI parsing, reparse-point fail-closed gate, registry
  undo serialization, dry-run paths for temp/disk/performance/services, and
  restore-point guards. Windows-only paths are marked windows_only and
  skipped off Windows; no test mutates the registry, services, or filesystem.
• pyproject.toml: pytest config, ruff (E/F/I/W) and black (88 cols) settings.
• CI now runs the pytest suite and ruff + black checks on every push/PR
  (ubuntu runner, SHA-pinned actions).
• requirements-dev.txt is now Linux-safe (no longer pulls in pywin32 via
  requirements.txt); adds ruff.
• Issue templates (bug report, feature request) and a PR template with a
  safety checklist for system-mutating changes.
• README rewritten with full per-tab feature rundown, architecture notes,
  Preview Mode docs, verification guide, roadmap, and a Donations section.

Fixed

• Registry undo: snapshots are now cleared from memory once written to disk,
  so repeated runs can't accumulate stale snapshots (a later "undo" could
  previously revert values from an earlier run instead of the run being undone)
• Temp/Downloads cleanup: pathologically deep directory trees (deeper than the
  interpreter recursion limit) now skip that subtree instead of failing the
  whole cleanup step with a RecursionError
• Run All pipeline now invalidates the cached power-plan reading on
  completion, so the header can't show a stale plan for up to 120 s (the
  Pip-Boy purge path already did this)
• Service Manager: service handles are now released in finally, fixing a
  handle leak when a query/control call raised after the handle was opened
• Restore-point PowerShell call now runs with -NonInteractive, matching the
  pagefile optimization call site

Changed

• Whole codebase formatted with black and ruff --fix (whitespace, import
  order, two genuinely-unused imports removed). No behavior changes.

What's Changed

• chore(deps): bump actions/setup-python from 5.6.0 to 7.0.0 by @dependabot[bot] in #9
• chore(deps): bump github/codeql-action/autobuild from 3.38.3 to 4.38.2 by @dependabot[bot] in #10

New Contributors

• @dependabot[bot] made their first contribution in #9

Full Changelog: v1.1.2...v1.1.3

v1.1.2

Full Changelog: v1.1.1...v1.1.2

v1.1.1

Full Changelog: v1.1.0...v1.1.1

Full Changelog: v1.1.0...v1.1.1

v1.1.0

Full Changelog: v1.0.2...v1.1.0

v1.0.2

Full Changelog: v1.0.1...v1.0.2

v1.0.1

Full Changelog: v1.0.0...v1.0.1