v0.20.1
Bug Fixes
Container package-manager compatibility — Fixed apt-get failures (privilege-drop to _apt user) and npm gyp EPERM: operation not permitted, fchown errors inside sandbox containers. The container now selectively re-adds five POSIX ownership/permission capabilities (CHOWN, DAC_OVERRIDE, FOWNER, SETGID, SETUID) after the blanket --cap-drop=ALL. In rootless Podman these remain scoped to the user namespace; capabilities that package managers don't need stay dropped. (#456)
Other Changes
- Testing strategy documentation — Added
doc/testing.mdcovering unit test coverage enforcement, integration test infrastructure, config migration testing, and CI pipeline checks. (#455)