v0.5.2
Fixes
- Package installation persistence — Snapshots now correctly include installed packages (
libc::sync()after install + QEMU exit code fix for macOS HVF) - JavaScript scoped package validation —
@scope/packagesyntax now validated correctly
Changes
- Moved static catalogs to
src/exec_sandbox/resources/ - Removed unused
allow_list_*_pathsettings
Tests
- 57 new package validator tests (66 total) covering version specifiers, malformed inputs, security edge cases (typosquatting, homoglyphs, path traversal)
- 7 integration tests for package installation
Full Changelog: v0.5.1...v0.5.2