v1.4.6

1.4.6 (2026-11-14)

What's Changed

• ci: exclude docs and .github from releases by @sarahmaeve in #146
• fix(deps): update go toolchain to v1.27.4 by @renovate[bot] in #156
• fix(deps): update module golang.org/x/crypto to v0.59.0 [security] by @renovate[bot] in #154
• chore(deps): update module github.com/minio/minlz to v1.2.4 by @renovate[bot] in #157
• chore(deps): update ci go tools by @renovate[bot] in #158
• chore(deps): update module github.com/andybalholm/brotli to v1.3.0 by @renovate[bot] in #159
• fix(deps): update go dependencies by @renovate[bot] in #155
• fix(deps): update go dependencies by @renovate[bot] in #162
• chore(deps): update dependency goreleaser/goreleaser to v2.20.1 by @renovate[bot] in #163

New Contributors

• @sarahmaeve made their first contribution in #146

Full Changelog: v1.4.5...v1.4.6

v1.4.5

1.4.5 (2026-11-09)

What's Changed

• fix(deps): update go dependencies by @renovate[bot] in #148

Full Changelog: v1.4.4...v1.4.5

v1.4.4

1.4.4 (2026-11-09)

What's Changed

• chore(deps): update module golang.org/x/sys to v0.50.0 by @renovate[bot] in #149

Full Changelog: v1.4.3...v1.4.4

v1.4.3

1.4.3 (2026-11-09)

What's Changed

• chore(deps): update ci go tools by @renovate[bot] in #143

Full Changelog: v1.4.2...v1.4.3

v1.4.2

1.4.2 (2026-11-09)

What's Changed

• fix(deps): update go dependencies by @renovate[bot] in #142

Full Changelog: v1.4.1...v1.4.2

v1.4.1

1.4.1 (2026-11-09)

What's Changed

• fix(deps): update module github.com/aws/smithy-go to v1.28.8 by @renovate[bot] in #134
• chore(deps): update dependency goreleaser/goreleaser to v2.20.0 by @renovate[bot] in #136
• chore(deps): update module github.com/andybalholm/brotli to v1.2.8 by @renovate[bot] in #137
• chore(deps): update module github.com/nwaples/rardecode/v2 to v2.4.6 by @renovate[bot] in #139
• fix(deps): update go dependencies by @renovate[bot] in #138
• fix(deps): update golang:1.27.3 docker digest to e519d3b by @renovate[bot] in #141

Full Changelog: v1.4.0...v1.4.1

v1.4.0

1.4.0 (2026-11-06)

What's Changed

• docs: tighten the README for the public release by @amckinley in #122
• docs: explain tap trust for Homebrew upgrades by @amckinley in #124
• fix(deps): update module github.com/klauspost/cpuid/v2 to v2.4.2 by @renovate[bot] in #128
• fix: honor XDG_CONFIG_HOME on macOS by @blackmichael in #130
• docs: AUR package by @ThatOneCalculator in #126
• feat: per-profile session_header for gateways that key sessions on their own header by @amckinley in #131
• fix: keep replayed conversations byte-stable and name why a tool loop ended by @amckinley in #132
• fix: send real required fields to Anthropic and bump Fantasy to v0.46.0 by @amckinley in #133

New Contributors

• @blackmichael made their first contribution in #130
• @ThatOneCalculator made their first contribution in #126

Full Changelog: v1.3.0...v1.4.0

v1.3.0

1.3.0 (2026-11-05)

First public release of Roast. The public repository starts from a single commit; releases v1.1.0 through v1.2.1 remain available on GitHub Releases.

Bug Fixes

• The untracked-file secret denylist matches SSH private keys with suffixes (for example id_ed25519_github).
• Configuration templates containing control characters are rejected, and the install summary and upload confirmation escape template-provided values.
• Dependency updates.

v1.2.1

1.2.1 (2026-11-01)

What's Changed

• fix(deps): update go dependencies by @renovate[bot] in #104
• fix: harden review engine against untrusted repository content by @amckinley in #110
• fix: keep configured credentials bound to their endpoints by @amckinley in #109
• fix: keep provider SDKs from forwarding ambient credentials and headers by @amckinley in #111
• docs: prepare public documentation and notices by @amckinley in #108
• ci: use the shared hardened Claude review workflows by @amckinley in #112
• ci: mint release tokens from the public-repo release App by @amckinley in #113

Full Changelog: v1.2.0...v1.2.1

v1.2.0

1.2.0 (2026-11-01)

What's Changed

• fix(deps): update golang:1.27.3 docker digest to 2920bb1 by @renovate[bot] in #103
• feat: collapse moved files to git's rename form in diff reviews by @amckinley in #106

Full Changelog: v1.1.30...v1.2.0