v0.15.0

What's Changed

• config sync: copy the lab to a control host from git, read-only (#375) by @curtisgalloway in #376
• config sync: HTTPS lab sources with a bearer token (#375) by @curtisgalloway in #377
• dashboard: single-use ticket instead of daemon tokens in the URL (#293) by @curtisgalloway in #378
• windows: read a process image name from the kernel, not tasklist (#379) by @curtisgalloway in #380
• release-train: re-pin profile sources for v0.15.0 by @curtisgalloway in #381

Full Changelog: v0.14.0...v0.15.0

v0.14.0

What's Changed

• netif, lease: report failed address release and surviving processes (#372) by @curtisgalloway in #373
• lease: block the target when cleanup fails (#372) by @curtisgalloway in #374

Full Changelog: v0.13.0...v0.14.0

v0.13.0

What's Changed

• release: skip winget with a notice until the package exists in winget-pkgs by @curtisgalloway in #359
• dsdble: power helper for DSD TECH Bluetooth LE relays (write-only) by @curtisgalloway in #363
• build(deps): Bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in #362
• docs/power: DTR driving a DFRobot DFR0643 DC power switch by @curtisgalloway in #365
• docs: add recommended hardware, linked ahead of tested hardware by @curtisgalloway in #366
• dsdrelay: document rewriting the SH-UR04A's shared 0001 serial by @curtisgalloway in #367
• error: add a category to the JSON error object (#361) by @curtisgalloway in #368
• serial: declarative fault rules for serial wait (#361) by @curtisgalloway in #369
• lease: whole-target control-host leases (#360) by @curtisgalloway in #364
• build(deps): bump certifi in evals/ocr to refresh the dependency graph by @curtisgalloway in #370
• release-train: re-pin profile sources for v0.13.0 by @curtisgalloway in #371

Full Changelog: v0.12.0...v0.13.0

v0.12.0

What's Changed

• build(deps): Bump aiohttp from 3.14.3 to 3.14.4 in /zigplug in the uv group across 1 directory by @dependabot[bot] in #333
• docs: netif down-hard does not reliably drop the carrier; switch port does (#321) by @curtisgalloway in #336
• ci: profile pins warn on PRs, block in the release workflow by @curtisgalloway in #337
• release: publish only on a pushed v* tag, never on a manual dispatch (#338) by @curtisgalloway in #339
• cambrionix: map charge-finished F to on; document VBUS-only off (#329, #330) by @curtisgalloway in #342
• switchport: managed-switch port helper and netif link hooks (#334) by @curtisgalloway in #344
• discover: don't guess between interfaces of one serial adapter (#332) by @curtisgalloway in #340
• doctor: parenthesize case pattern so macOS /bin/sh parses the hook prefix by @curtisgalloway in #341
• netif vlan: several netboot targets through one adapter and a managed switch (#335) by @curtisgalloway in #345
• build(deps): Bump the uv group across 1 directory with 2 updates by @dependabot[bot] in #343
• ch9329: flush a stalled Openterface CDC parser on Linux (#238) by @curtisgalloway in #347
• serialcap: give timeout_and_cap_are_explicit_outcomes a 2 s deadline (#348) by @curtisgalloway in #349
• zigplug: require aiohttp >= 3.14.4, the first patched release by @curtisgalloway in #350
• dsdrelay: power helper for DSD TECH SH-UR01A/SH-UR04A USB relays by @curtisgalloway in #351
• notes: design for panio-owned privileged host-peer traffic (#325) by @curtisgalloway in #346
• ci: skip build and test jobs on doc-only PRs, enforced by stripping docs by @curtisgalloway in #352
• switchport: D-Link DGS-1100-05V2 setup skill and docs (#334) by @curtisgalloway in #353
• ci: split the netbootd matrix so doc-only PRs report its required check by @curtisgalloway in #355
• docs/hardware: managed switches, cabling rule, SH-UR04A relay by @curtisgalloway in #354
• ch9329: cancel an in-flight command when its client goes away (#328) by @curtisgalloway in #356
• switchport: support the TL-SG205E 2025 Easy Smart web UI (#334) by @curtisgalloway in #357
• release-train: re-pin profile sources for v0.12.0 by @curtisgalloway in #358

Full Changelog: v0.11.0...v0.12.0

v0.11.0

What's Changed

• AGENTS.md: tag PRs with the issue they fix, in a form GitHub parses by @curtisgalloway in #308
• netbootd: allow concurrent macOS netboot interfaces (#204) by @curtisgalloway in #310
• serialcap: request/response transaction endpoint with a per-interface lock (#301) by @curtisgalloway in #311
• power: named power levels (soft vs hard) per target (#302) by @curtisgalloway in #313
• cli: PANIOLO_PLUGIN_PATH plugin roots for out-of-tree helpers and skills (#303) by @curtisgalloway in #314
• doctor: opt-in, read-only health checks provided by helpers (#304) by @curtisgalloway in #315
• ocr: support helper help on macOS and Windows (#309) by @curtisgalloway in #312
• serialcap: /transact waits for the journal to reach its boundary (#301) by @curtisgalloway in #316
• AGENTS.md: split internals into per-component files and tighten (148 KB -> 30 KB) by @curtisgalloway in #320
• amt: require verified TLS for WS-Man by default (#152) by @curtisgalloway in #319
• hid: wait for daemon exit before returning from stop (#296) by @curtisgalloway in #322
• serialcap: wait for live receive boundaries to reach the journal (#317) by @curtisgalloway in #323
• cli: remove the freed-port race from the daemon connection test (#318) by @curtisgalloway in #324
• doctor: accept empty remote IPv4 listings (#251) by @curtisgalloway in #326
• docs: define guarded RAM-only USB fastboot staging (#285) by @curtisgalloway in #327
• Rename paniolo to panio by @curtisgalloway in #331

Full Changelog: v0.10.0...v0.11.0

v0.10.0

This project is now panio (docs: https://panio.dev). Releases from v0.11.0 on are published as panio.

What's Changed

• helper: run on the lab host that owns a target's channel (#300) by @curtisgalloway in #305
• action: named target actions for controls that are not power (#299) by @curtisgalloway in #306
• release-train: v0.10.0 archaeology and profile fix by @curtisgalloway in #307

Full Changelog: v0.9.1...v0.10.0

v0.9.1

What's Changed

• cli: exit 0 quietly when the stdout reader goes away by @curtisgalloway in #298

Full Changelog: v0.9.0...v0.9.1

v0.9.0

What's Changed

• console: make the dashboard reachable from an SSH session by @curtisgalloway in #292
• lab: let each dashboard daemon pin a fixed port by @curtisgalloway in #295
• serialcap: stop the wait test aborting on Windows by @curtisgalloway in #297

Full Changelog: v0.8.0...v0.9.0

v0.8.0

v0.8.0 adds read-only serial health, immutable raw receive evidence, and bounded serial wait/follow commands. It also improves daemon binary identity diagnostics, missing TFTP root errors, and helper help.

After upgrading, restart an existing serial capture daemon with paniolo daemons restart serialcap before using the new serial commands. --stale restarts only proven binary content changes; explicitly name a daemon when its binary identity is unknown.

Bug fixes merged in order:

• Bug issue #279: structured serial health and capture identity — PR #289.
• Bug issue #280: immutable received-byte evidence — PR #290.
• Bug issue #281: bounded waits with fresh receive boundaries — PR #291.
• Bug issue #282: binary content diagnostics — PR #288.
• Bug issue #283: missing TFTP root configuration errors — PR #287.
• Bug issue #284: reliable helper-help syntax — PR #286.

What's Changed

• feat: expose structured serial health and capture identity by @curtisgalloway in #289
• feat: preserve immutable serial receive evidence by @curtisgalloway in #290
• feat: add bounded serial wait and fresh receive boundaries by @curtisgalloway in #291
• fix: distinguish daemon content changes from metadata replacement by @curtisgalloway in #288
• fix: report missing TFTP roots as configuration errors by @curtisgalloway in #287
• docs: show separator syntax for helper help by @curtisgalloway in #286

Full Changelog: v0.7.2...v0.8.0

v0.7.2

What's Changed

• build(deps): Bump the cargo group across 2 directories with 1 update by @dependabot[bot] in #276
• build(deps): Bump golang.org/x/net from 0.54.0 to 0.55.0 in /jetkvm in the go_modules group across 1 directory by @dependabot[bot] in #270
• build(deps): Bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in #278
• build(deps): Bump multidict from 6.7.1 to 6.9.1 in /zigplug in the uv group across 1 directory by @dependabot[bot] in #277

Full Changelog: v0.7.1...v0.7.2