v0.7.7

SafeSelect v0.7.7

[v0.7.7] - 2026-08-31

Added

• feat(site): evidence-led positioning and canonical landing (#190)
• feat(seo): add Google Search Console verification file (#191)
• feat(review): add manual review guidance and independent commit policy (#193)
• feat(site): add SafeSelect brand icon (#196)
• feat(mcp): add read-only guidance capabilities (#197)

Fixed

• fix(ci): make release publication verified and resumable (#188)
• fix(ci): run lightweight checks for website-only PRs (#192)
• fix(distribution): declare LobeHub MCP tool capabilities (#195)
• fix(ci): enforce CRAP ratchet at 79 (#202)
• fix(ci): accept merge commit messages (#205)
• fix(ci): accept GitHub merge commits (#206)
• fix(security): enforce database read-only policy (#199)
• fix(release): verify MCP publisher binary (#200)
• fix(mcp): restrict protocol and TLS host checks (#201)
• fix(ci): accept verified PGP and SSH signatures (#209)
• fix(security): close audited policy bypasses (#210)
• fix(security): validate TABLE ONLY schemas (#211)
• fix(agents): avoid panics for incomplete Codex MCP config (#212)

Documentation

• docs(demo): add Homebrew onboarding recording (#189)
• docs: expose easy installation options (#198)

Build And CI

• chore(distribution): add LobeHub plugin manifest (#194)

Install

Homebrew:

brew install antonillos/tap/safeselect

asdf:

asdf plugin add safeselect https://github.com/antonillos/asdf-safeselect.git
asdf install safeselect latest
asdf set -u safeselect latest

Fallback installer:

curl -fsSL https://raw.githubusercontent.com/antonillos/safeselect/main/packaging/install/install-release.sh | sh

Assets

• Runtime archives for Linux x86_64/arm64 and macOS x86_64/arm64
• SHA-256 checksum files for each archive

v0.7.6

SafeSelect v0.7.6

[v0.7.6] - 2026-08-27

Fixed

• fix: prefer DBeaver JDBC URL fields (#183)
• fix: make DBeaver SSH onboarding deterministic (#185)

Install

Homebrew:

brew install antonillos/tap/safeselect

asdf:

asdf plugin add safeselect https://github.com/antonillos/asdf-safeselect.git
asdf install safeselect latest
asdf set -u safeselect latest

Fallback installer:

curl -fsSL https://raw.githubusercontent.com/antonillos/safeselect/main/packaging/install/install-release.sh | sh

Assets

• Runtime archives for Linux x86_64, macOS x86_64, and macOS arm64
• SHA-256 checksum files for each archive

v0.7.5

SafeSelect v0.7.5

[v0.7.5] - 2026-08-27

Added

• feat: add PostgreSQL security posture preflight (#173)
• feat: add safe PostgreSQL partition metadata (#174)
• feat: add visual read-only proof demo (#178)

Fixed

• fix: make PostgreSQL posture advisory (#175)
• fix: deny direct PostgreSQL system catalogs (#177)
• fix: support DBeaver SSH key imports (#179)

Build And CI

• ci: reuse release artifacts for integration tests (#170)
• ci: refresh only CRAP badge after develop merges (#171)
• ci: select validation by changed paths
• ci: remove redundant cargo check (#176)

Install

Homebrew:

brew install antonillos/tap/safeselect

asdf:

asdf plugin add safeselect https://github.com/antonillos/asdf-safeselect.git
asdf install safeselect latest
asdf set -u safeselect latest

Fallback installer:

curl -fsSL https://raw.githubusercontent.com/antonillos/safeselect/main/packaging/install/install-release.sh | sh

Assets

• Runtime archives for Linux x86_64, macOS x86_64, and macOS arm64
• SHA-256 checksum files for each archive

v0.7.4

SafeSelect v0.7.4

[v0.7.4] - 2026-08-26

Added

• feat(demo): add deterministic database fixtures (#145)
• feat(demo): add SafeSelect VHS workflow (#146)
• feat(demo): version Codex integration setup (#147)
• feat: enforce nested MongoDB aggregation policy (#160)
• feat: bound MongoDB resource options (#161)

Fixed

• fix(release): verify nested registry response (#139)
• fix(install): replace binaries atomically (#142)
• fix(agent): uninstall local Claude config without cli (#143)
• fix(agents): resolve scoped integration targets safely (#144)

Documentation

• docs: broaden SafeSelect positioning (#140)
• docs(demo): add recording gallery (#148)
• docs: add Security Proof v1 (#150)
• docs: define reusable adversarial security suite (#157)
• docs: add mcpservers.org listing badge (#165)

Build And CI

• test: add versioned adversarial case manifest (#158)
• test: expand adversarial corpus and connect adapters (#159)
• test: cover PostgreSQL adversarial side effects and parser cases (#162)
• test: cover PostgreSQL stored procedure probes (#163)
• test: cover MCP transport security cases (#164)

Dependencies

• chore(deps): bump actions/upload-pages-artifact from 3 to 5 (#151)
• chore(deps): bump actions/upload-artifact from 4 to 7 (#153)
• chore(deps): bump actions/deploy-pages from 4 to 5 (#154)
• chore(deps): bump toml_edit from 0.22.27 to 0.25.13+spec-1.1.0 (#155)
• chore(deps): bump uuid from 1.24.1 to 1.25.0 (#156)

Other

• refactor: reduce CRAP and enforce 80-warning ratchet (#149)

Install

Homebrew:

brew install antonillos/tap/safeselect

asdf:

asdf plugin add safeselect https://github.com/antonillos/asdf-safeselect.git
asdf install safeselect latest
asdf set -u safeselect latest

Fallback installer:

curl -fsSL https://raw.githubusercontent.com/antonillos/safeselect/main/packaging/install/install-release.sh | sh

Assets

• Runtime archives for Linux x86_64, macOS x86_64, and macOS arm64
• SHA-256 checksum files for each archive

v0.7.3

SafeSelect v0.7.3

[v0.7.3] - 2026-08-24

Added

• feat: add secure multi-agent MCP setup (#127)
• feat(release): publish checksummed MCP bundles (#133)

Fixed

• fix(ci): support stacked pull request merges (#130)
• fix(agent): sanitize canonical MCP entry names (#131)
• fix(agent): propagate custom config directories (#132)

Documentation

• docs: position README as SafeSelect MCP home (#128)

Build And CI

• ci: avoid duplicate verify runs on labels (#121)
• test: reduce CRAP warnings to 140 (#124)
• ci: dispatch main-to-develop sync after release (#123)
• test: reduce CRAP warnings to 90 (#126)

Other

• refactor: reduce CRAP warnings to 99 (#125)

Install

Homebrew:

brew install antonillos/tap/safeselect

asdf:

asdf plugin add safeselect https://github.com/antonillos/asdf-safeselect.git
asdf install safeselect latest
asdf set -u safeselect latest

Fallback installer:

curl -fsSL https://raw.githubusercontent.com/antonillos/safeselect/main/packaging/install/install-release.sh | sh

Assets

• Runtime archives for Linux x86_64, macOS x86_64, and macOS arm64
• SHA-256 checksum files for each archive

v0.7.2

SafeSelect v0.7.2

[v0.7.2] - 2026-08-20

Fixed

• fix(ci): dispatch releases after smart merge (#99)
• fix: refresh CRAP badge after smart merge (#110)
• fix: align CRAP coverage across platforms (#113)

Build And CI

• ci: clean up integration test warnings (#101)
• test(postgres): cover stacked query attacks (#102)
• test(postgres): enforce least-privilege fixtures (#103)
• test(mcp): add negative validation pack (#104)
• ci: add report-only CRAP analysis (#105)
• test: expand setup server coverage (#108)
• test: cover MCP compose handler and publish CRAP badge (#109)
• test: reduce near-threshold CRAP warnings (#111)
• test: cover low-complexity CRAP findings (#114)
• test: deepen CRAP coverage (#115)
• test: expand second CRAP reduction batch (#117)
• chore: remove obsolete asdf plugin scripts (#118)

Dependencies

• chore(deps): bump uuid from 1.24.0 to 1.24.1 (#98)

Other

• refactor: reduce CRAP technical debt (#106)
• refactor: continue CRAP debt reduction (#107)
• refactor: bring CRAP warnings below 200 (#112)
• refactor: continue CRAP reduction (#116)

Install

Homebrew:

brew install antonillos/tap/safeselect

asdf:

asdf plugin add safeselect https://github.com/antonillos/asdf-safeselect.git
asdf install safeselect latest
asdf set -u safeselect latest

Fallback installer:

curl -fsSL https://raw.githubusercontent.com/antonillos/safeselect/main/packaging/install/install-release.sh | sh

Assets

• Runtime archives for Linux x86_64, macOS x86_64, and macOS arm64
• SHA-256 checksum files for each archive

v0.7.1

SafeSelect v0.7.1

[v0.7.1] - 2026-08-18

Added

• feat(cli): add binary-only uninstall
• feat(mongodb): add indexes and statistics tools (#93)
• feat(postgres): add index and statistics tools (#95)

Fixed

• fix(mongodb): preserve implicit index uniqueness (#94)

Documentation

• docs: categorize v0.7.0 changelog entries

Build And CI

• ci: require MongoDB integration before merge

Install

Homebrew:

brew install antonillos/tap/safeselect

asdf:

asdf plugin add safeselect https://github.com/antonillos/asdf-safeselect.git
asdf install safeselect latest
asdf set -u safeselect latest

Fallback installer:

curl -fsSL https://raw.githubusercontent.com/antonillos/safeselect/main/packaging/install/install-release.sh | sh

Assets

• Runtime archives for Linux x86_64, macOS x86_64, and macOS arm64
• SHA-256 checksum files for each archive

v0.7.0

SafeSelect v0.7.0

[v0.7.0] - 2026-08-16

Added

• feat(mcp): add agent-first response contract (#84)
• feat(mongodb): block server-side JavaScript (#85)
• Add PostgreSQL catalog discovery (#88)
• Expose session audit metadata (#89)

Fixed

• fix(mcp): make error guidance actionable (#86)
• fix(mcp): shorten untrusted data warning (#87)

Build And CI

• ci: add MongoDB integration check
• test: resolve MongoDB service container dynamically
• test: isolate MongoDB timeout scenario

Dependencies

• chore(deps): bump actions/github-script from 8 to 9 (#77)
• chore(deps): bump thiserror from 2.0.18 to 2.0.19 (#78)
• chore(deps): bump clap from 4.6.4 to 4.6.5 (#79)
• chore(deps): bump toml from 1.1.3+spec-1.1.0 to 1.1.4+spec-1.1.0 (#80)
• chore(deps): bump clap from 4.6.5 to 4.6.6 (#81)
• chore(deps): bump thiserror from 2.0.19 to 2.0.20 (#82)
• chore(deps): bump similar from 3.1.1 to 3.1.2 (#83)

Install

Homebrew:

brew install antonillos/tap/safeselect

asdf:

asdf plugin add safeselect https://github.com/antonillos/asdf-safeselect.git
asdf install safeselect latest
asdf set -u safeselect latest

Fallback installer:

curl -fsSL https://raw.githubusercontent.com/antonillos/safeselect/main/packaging/install/install-release.sh | sh

Assets

• Runtime archives for Linux x86_64, macOS x86_64, and macOS arm64
• SHA-256 checksum files for each archive

v0.6.3

SafeSelect v0.6.3

[v0.6.3] - 2026-07-27

Added

• feat: harden agent database workflows

Documentation

• docs: align changelog for next release

Build And CI

• ci: sync develop after release completion (#65)
• ci: add smart merge command (#69)

Other

• chore(deps): bump serde_json from 1.0.150 to 1.0.151 (#59)
• chore(deps): bump uuid from 1.23.5 to 1.24.0 (#63)
• chore(deps): bump clap from 4.6.1 to 4.6.4 (#61)
• chore(deps): bump libc from 0.2.186 to 0.2.189 (#62)
• chore(deps): bump serde from 1.0.228 to 1.0.229 (#60)
• chore(deps): bump tools.jackson.core:jackson-databind (#64)
• release: bump to 0.6.2 (#66)
• feat(mcp): add secure schema discovery
• fix(mcp): harden schema discovery guidance
• feat(mcp): add type-aware SQL guidance
• fix(mcp): strengthen SQL recovery guidance
• fix(ci): track a single verify run in smart merge
• fix(ci): wait for required merge checks

Install

Homebrew:

brew install antonillos/tap/safeselect

asdf:

asdf plugin add safeselect https://github.com/antonillos/asdf-safeselect.git
asdf install safeselect latest
asdf set -u safeselect latest

Fallback installer:

curl -fsSL https://raw.githubusercontent.com/antonillos/safeselect/main/packaging/install/install-release.sh | sh

Assets

• Runtime archives for Linux x86_64, macOS x86_64, and macOS arm64
• SHA-256 checksum files for each archive

v0.6.2

SafeSelect v0.6.2

[v0.6.2] - 2026-07-26

Build And CI

• ci: sync develop after release completion (#65)

Other

• chore(deps): bump serde_json from 1.0.150 to 1.0.151 (#59)
• chore(deps): bump uuid from 1.23.5 to 1.24.0 (#63)
• chore(deps): bump clap from 4.6.1 to 4.6.4 (#61)
• chore(deps): bump libc from 0.2.186 to 0.2.189 (#62)
• chore(deps): bump serde from 1.0.228 to 1.0.229 (#60)
• chore(deps): bump tools.jackson.core:jackson-databind (#64)

Install

Homebrew:

brew install antonillos/tap/safeselect

asdf:

asdf plugin add safeselect https://github.com/antonillos/asdf-safeselect.git
asdf install safeselect latest
asdf set -u safeselect latest

Fallback installer:

curl -fsSL https://raw.githubusercontent.com/antonillos/safeselect/main/packaging/install/install-release.sh | sh

Assets

• Runtime archives for Linux x86_64, macOS x86_64, and macOS arm64
• SHA-256 checksum files for each archive