v0.1.2

Highlights

• Two flavors: full (~3 MB) ships everything; lite (~1.6 MB, built with --no-default-features) is the fully offline wrapper without [[download]] — it warns and skips download entries (or aborts the start when an entry sets fail_on_error = true). rsw --version shows the flavor.
• [download.tls]: per-entry custom CA and mTLS client certificates (PEM). Certificate verification is never disabled.
• [[download]] timeout_secs (default 120): whole-request budget; bodies stream to disk instead of buffering in memory.
• Fixes: graceful-stop ctrl-event delivery (the hidden helper subcommand never matched its spawner — the stop signal is now verifiably delivered by rsw itself); unterminated final log lines are no longer lost to an exit race (pumps are drained before exit, log lines cap at 64 KiB); SCM wait hints clamped at 24 h (no more "Too long wait_hint" panic); a.jar/a.zip download staging collision; roll-by-size-time retention now prunes whole old periods.
• rsw convert: WinSW v2 <serviceaccount> (domain+user, allowservicelogon, prompt warning), preshutdownTimeout key fixed; no longer emits the no-op hide_window.
• rsw validate masks account/download passwords and proxy credentials.
• CI: RustSec audit gate (weekly), pinned MSRV 1.88 job, dual-flavor builds, SHA256SUMS with every release.

⚠ Config compatibility

Configs are parsed with deny_unknown_fields, so older rsw binaries cannot read configs that use the new fields ([download.tls], timeout_secs). Configs using them require rsw ≥ 0.1.2.