v1.179.0

1.179.0 (2026-11-11)

Features

• run: cwdMissing: 'error' rejects a missing cwd with ENOENT instead of creating it (ae2f889), closes #1808

v1.178.4

1.178.4 (2026-11-11)

Bug Fixes

• mount: allow non-owner utimes on FAT-like masked mounts (8a9f5a5), closes #1791

v1.178.3

1.178.3 (2026-11-11)

Bug Fixes

• sudo: drop covered digests when a timestamp expires (1f43d43)
• sudo: timestamps respect hash-bound commands (d381efd)

v1.178.2

1.178.2 (2026-11-10)

Bug Fixes

• sudo: let the policy decide, binding user-writable commands to their sha256 (a17e29c), closes #1797
• sudo: load a granted program from the bytes that were hashed, not the compile cache (552d285)
• sudo: refuse any user-writable file a granted program loads unless it was pinned (d2f381c)

v1.178.1

1.178.1 (2026-11-10)

Bug Fixes

• net: ctx.fetch sends forbidden request headers; the page's own fetch refuses them by name (9a65ad3), closes #1796

v1.178.0

1.178.0 (2026-11-10)

Bug Fixes

• sealed: require messages in OAuth error replies (05c109c)

Features

• sealed: add vault-managed OAuth grant transport (6d94f47)

v1.177.0

1.177.0 (2026-11-09)

Features

• sudo: timestamps as in sudo: timestamp_timeout and timestamp_type Defaults, sudo -v, -k and -K (9e36145)

v1.176.2

1.176.2 (2026-11-08)

Bug Fixes

• mount: FAT-style umask/fmask/dmask for no-owners mounts (433112c)
• mount: only skip chmod owner checks when chmod is a no-op (bd7f085)
• mount: set fat only when a umask/fmask/dmask is present (78bc5ad)

v1.176.1

1.176.1 (2026-11-07)

Bug Fixes

• create paths look past a cached miss of the parent directory (d526b3a)
• cwd-relative create-parent refresh; harden link/rename rows (36a3add), closes #1780
• drop unverified link/rename parent-miss pieces (75bc9a7)
• normalize create paths before parent-miss refresh (b6cbfc3)
• refresh create parents only after ENOENT (18f6529)

v1.176.0

1.176.0 (2026-11-07)

Features

• strict embedder kind policy (session: false), dialout group and kernel.groups.add (62e70e8)