PR Nanny 0.1.0-rc.6 — signed macOS beta

PR Nanny 0.1.0-rc.6 is a macOS ARM64 beta with Developer ID signing, hardened runtime, a secure timestamp, and Apple notarisation. The ticket is stapled to the app before the final ZIP and SHA-256 checksum are created.

The source commit and qualification run are recorded in SOURCE.txt and signing-manifest.json. The signed macOS archive is a local transformation of the exact qualified CI package; the manifest records both hashes and the Apple submission. The original CI archive's attestation does not apply to the transformed ZIP.

Windows and Linux packages, where included, retain their original qualified CI archives and source attestations. Windows is unsigned. Linux requires glibc 2.39+, GTK4, WebKitGTK 6 and Secret Service. The signed macOS beta is the scope of this release's signing and desktop acceptance.

Verify downloads against SHA256SUMS. Prior releases and their assets remain unchanged. PR Nanny has no telemetry or GitHub mutations. See SECURITY.md for remaining platform and framework limits.

PR Nanny 0.1.0-rc.5 — unsigned prerelease

PR Nanny is a passive GitHub.com pull-request monitor for macOS ARM64, Windows x64 and Linux x64. The changes below are generated from the commits since the previous release.

This release is published only after all required validation jobs and source-attestation checks pass for the exact source commit. The source commit is recorded in SOURCE.txt. Verify downloaded application archives against SHA256SUMS.

Trust and platform limits: macOS uses ad-hoc signing, without Developer ID or notarization. Windows is unsigned. The launch/IPC smoke tests exercise actual native executables but do not prove physical tray clicks, notifications, autostart or every desktop configuration. Fedora KDE requires native desktop qualification. OS notification delivery and permissions depend on your environment.

Use the application archives and platform instructions in README.md. Linux requires glibc 2.39+, GTK4, WebKitGTK 6 and Secret Service. Windows requires Microsoft Edge WebView2. Homebrew manifests for the existing alexcatdad/tap are attached for macOS and Linux; Homebrew has no native Windows installation path.

No telemetry or GitHub mutations. See SECURITY.md for the threat model and residual risks.

What's Changed

Other changes

• Polish popup and settings UI, new branch-and-bell icon by @alexcatdad in #13
• ci: diagnose the Homebrew App key before dispatching the tap update by @alexcatdad in #14
• fix: stop polling the Go bridge every second from the popup by @alexcatdad in #15
• fix: keep PR monitoring working when team discovery is denied, and cut team-search API cost by @alexcatdad in #16
• chore: prepare v0.1.0-rc.5 release and record reliability evidence by @alexcatdad in #17

Full Changelog: v0.1.0-rc.4...v0.1.0-rc.5

PR Nanny 0.1.0-rc.4 — unsigned prerelease

PR Nanny is a passive GitHub.com pull-request monitor for macOS ARM64, Windows x64 and Linux x64. The changes below are generated from the commits since the previous release.

This release is published only after all required validation jobs and source-attestation checks pass for the exact source commit. The source commit is recorded in SOURCE.txt. Verify downloaded application archives against SHA256SUMS.

Trust and platform limits: macOS uses ad-hoc signing, without Developer ID or notarization. Windows is unsigned. The launch/IPC smoke tests exercise actual native executables but do not prove physical tray clicks, notifications, autostart or every desktop configuration. Fedora KDE requires native desktop qualification. OS notification delivery and permissions depend on your environment.

Use the application archives and platform instructions in README.md. Linux requires glibc 2.39+, GTK4, WebKitGTK 6 and Secret Service. Windows requires Microsoft Edge WebView2. Homebrew manifests for the existing alexcatdad/tap are attached for macOS and Linux; Homebrew has no native Windows installation path.

No telemetry or GitHub mutations. See SECURITY.md for the threat model and residual risks.

What's Changed

Other changes

• docs: record production desktop and runtime qualification by @alexcatdad in #10
• fix: reuse release GitHub App for Homebrew updates by @alexcatdad in #11
• chore: prepare v0.1.0-rc.4 release by @alexcatdad in #12

Full Changelog: v0.1.0-rc.3...v0.1.0-rc.4

PR Nanny 0.1.0-rc.3 — unsigned prerelease

PR Nanny is a passive GitHub.com pull-request monitor for macOS ARM64, Windows x64 and Linux x64. The changes below are generated from the commits since the previous release.

This release is published only after all required validation jobs and source-attestation checks pass for the exact source commit. The source commit is recorded in SOURCE.txt. Verify downloaded application archives against SHA256SUMS.

Trust and platform limits: macOS uses ad-hoc signing, without Developer ID or notarization. Windows is unsigned. The launch/IPC smoke tests exercise actual native executables but do not prove physical tray clicks, notifications, autostart or every desktop configuration. Fedora KDE requires native desktop qualification. OS notification delivery and permissions depend on your environment.

Use the application archives and platform instructions in README.md. Linux requires glibc 2.39+, GTK4, WebKitGTK 6 and Secret Service. Windows requires Microsoft Edge WebView2. Homebrew manifests for the existing alexcatdad/tap are attached for macOS and Linux; Homebrew has no native Windows installation path.

No telemetry or GitHub mutations. See SECURITY.md for the threat model and residual risks.

What's Changed

Other changes

• docs: add the product website and community guidance by @alexcatdad in #6
• fix: clarify refresh status after production qualification by @alexcatdad in #9

Full Changelog: v0.1.0-rc.2...v0.1.0-rc.3

PR Nanny 0.1.0-rc.2 — unsigned prerelease

PR Nanny is a passive GitHub.com pull-request monitor for macOS ARM64, Windows x64 and Linux x64. The changes below are generated from the commits since the previous release.

This release is published only after all required validation jobs and source-attestation checks pass for the exact source commit. The source commit is recorded in SOURCE.txt. Verify downloaded application archives against SHA256SUMS.

Trust and platform limits: macOS uses ad-hoc signing, without Developer ID or notarization. Windows is unsigned. The launch/IPC smoke tests exercise actual native executables but do not prove physical tray clicks, notifications, autostart or every desktop configuration. Fedora KDE requires native desktop qualification. OS notification delivery and permissions depend on your environment.

Use the application archives and platform instructions in README.md. Linux requires glibc 2.39+, GTK4, WebKitGTK 6 and Secret Service. Windows requires Microsoft Edge WebView2. Homebrew manifests for the existing alexcatdad/tap are attached for macOS and Linux; Homebrew has no native Windows installation path.

No telemetry or GitHub mutations. See SECURITY.md for the threat model and residual risks.

What's Changed

Other changes

• chore: strengthen engineering quality and release provenance by @alexcatdad in #5

Full Changelog: v0.1.0-rc.1...v0.1.0-rc.2

PR Nanny 0.1.0 RC1 — unsigned prerelease

PR Nanny is a passive GitHub.com pull-request monitor for macOS ARM64, Windows x64 and Linux x64.

This release candidate passed its linked native build, frontend, backend, credential-store, packaging and security gates. The source commit is recorded in SOURCE.txt. Verify downloaded application archives against SHA256SUMS.

Trust and platform limits: macOS uses ad-hoc signing, without Developer ID or notarization. Windows is unsigned. The launch/IPC smoke tests exercise actual native executables but do not prove physical tray clicks, notifications, autostart or every desktop configuration. Fedora KDE requires native desktop qualification. OS notification delivery and permissions depend on your environment.

Use the application archives and platform instructions in README.md. Linux requires glibc 2.39+, GTK4, WebKitGTK 6 and Secret Service. Windows requires Microsoft Edge WebView2. Homebrew manifests are provided for a local macOS/Linux tap; Homebrew has no native Windows installation path.

No telemetry or GitHub mutations. See SECURITY.md for the threat model and residual risks. This is prerelease software, not a stable release.