v0.7.1

Changelog

• 1b36efc Brew formula update for agent-proxy version v0.7.0
• 8df2531 feat: Prometheus metrics endpoint on PAC server (/metrics)
• fea94a2 feat: env.sh hot-reload, config-validate, SSH agent, doctor --fix, templates
• 87c8427 feat: web management dashboard at /dashboard with /api/status and /api/stats
• 58fde56 release: v0.7.1 — dashboard, metrics, docs site, SLSA, doctor --fix, env hot-reload

v0.7.0

Changelog

• 8dd6d32 feat: Homebrew tap via GoReleaser + cosign release signing
• cae4f8c feat: README rewrite + multi-ECS failover
• 7fa2f39 feat: doctor no_proxy check, stats command, PAC hot-reload
• 6a0ecaa fix: Homebrew formula to same repo (Formula/ dir), no separate tap needed
• 3a23e7c fix: Windows CI — USERPROFILE in tests, skip perm check, use config.EnvPath
• 05c6ea2 fix: add .aliyuncs.com to default no_proxy — prevents Alibaba Cloud traffic from routing through proxy
• 8e0ac40 release: v0.7.0 — stats, doctor audit, PAC hot-reload, failover, Homebrew, signing

v0.6.1

Changelog

• e11ddb6 fix: trust-host blocked by own guard; install.sh tmp_dir unbound variable

v0.6.0

Changelog

• 653e264 fix: Windows CI — set USERPROFILE in tests, add nil guard for os.Stat
• 4562bd8 fix: exclude PowerShell self-match in FindPIDsByPattern
• 8833089 fix: fifth audit — fingerprint, known_hosts migration, CLI-only, nonce bind
• e8b300d fix: fourth audit — restore order, error propagation, CLI-only, regex
• 594a276 fix: re-audit — PAC idempotency, strict tunnel check, metadata ACL, fail-closed checksum
• 98c9249 fix: skip Unix permission check on Windows in config tests
• a604d6a fix: third audit — PAC state machine, Squid parse, WMIC, platform state
• c6aab18 fix: upgrade Go 1.22 → 1.24, fixes macOS CI dyld LC_UUID crash
• 1a7b232 release: v0.6.0 — security audit hardening
• 93e3593 security: P2 hardening — SSH TOFU fix, PAC nonce, Actions SHA pin
• d480bc0 security: audit fix — strict tunnel boundary, deny-first ACL, remove Basic auth
• ae4689e security: sanitize sensitive info from docs and strengthen .gitignore

v0.5.2

Changelog

• 79671d8 fix: audit P0-P2 — Windows compat, validation, CI, tests, update cmd (#6)

v0.5.1

Changelog

• 7d230e0 perf: split Google wildcards into specific domains for faster page loads (#5)
• 00648f1 revert: remove WireGuard/udp2raw tunnel — keep SSH optimizations only (#4)

v0.5.0

Changelog

• 2c0657f feat: WireGuard tunnel with auto-fallback, SSH ControlMaster, TFO, Squid tuning (#3)

v0.4.4

Changelog

• 2b1c1ba fix: PAC daemon isolation, migration cleanup, tunnel perf tuning (#2)

v0.4.3

Changelog

• a4a7965 fix: service ownership, PID safety, Validate, vet, deploy guard

v0.4.2

Changelog

• f5638df fix: P2 hardening — port split, escaping, Windows autostart, bench, tests