sysm 1.26.3.0 — Q3 2026 Security & Release-Cycle Milestone

This release establishes sysm's quarterly release-cycle numbering and consolidates the security hardening delivered in v1.13.3 with the follow-on secure secret-input work now on main.

Highlights

• Introduces GENERATION.YY.QUARTER.REVISION versioning, beginning with the Q3 2026 base release at revision 0.
• Includes the P2 security remediation batch first shipped in v1.13.3, covering updater integrity and stronger plugin, workflow, and process-execution trust boundaries.
• Removes six remaining secret-bearing command-line argument paths for Slack, CalDAV, Keychain, and PDF operations.
• Includes the repaired Podcasts command and playback behavior delivered during the same hardening cycle.

Breaking security changes

Secrets are no longer accepted directly in process arguments. Affected commands now use a protected terminal prompt, non-TTY standard input, or an explicitly inherited file descriptor. Existing automation that passes Slack tokens, CalDAV app passwords, Keychain values, or PDF passwords as flag values must migrate to the secure input forms documented in the secure secret-input guide.

This intentional compatibility break prevents secrets from being exposed through process listings and shell history.

Release-cycle policy

1.26.3.0 means product/UI generation 1, year 2026, quarter 3, base revision 0. Later Q3 releases increment only the final field; the Q4 base becomes 1.26.4.0.

Changes since the previous release

• SYSM-79: adopt release-cycle versioning for 1.26.3.0 (#5) (ba8ffe9)
• SYSM-78: replace secret argv with protected input (#4) (930a095)
• Sunday slow roll, nudging a little something out the door (d5411c5)

Installation

Homebrew

brew tap brndnsvr/tap
brew install sysm

Direct Download

curl -L -o sysm.tar.gz https://github.com/brndnsvr/sysm/releases/download/v1.26.3.0/sysm-1.26.3.0-macos-arm64.tar.gz
tar -xzf sysm.tar.gz
sudo mv sysm /usr/local/bin/

SHA256: 73b4124c75b79a56ccbe744f2fe411e8edffc1245b930c0c48ca8136944d2e12