Maestro 0.10.49

What's Changed

• chore: sync public mirror from internal by @haasonsaas in #696
• chore: sync public mirror from internal by @haasonsaas in #698
• chore: sync public mirror from internal by @haasonsaas in #701
• chore: sync public mirror from internal by @haasonsaas in #702
• chore: sync public mirror from internal by @haasonsaas in #703
• chore: sync public mirror from internal by @haasonsaas in #704
• chore: sync public mirror from internal by @haasonsaas in #713
• [maestro] harden version-bump workflow against native git-hook token exfiltration by @haasonsaas in #710
• chore: sync public mirror from internal by @haasonsaas in #716
• [maestro] prevent MCP readOnlyHint from suppressing destructive approvals by @haasonsaas in #708
• [maestro] harden startup updater environment by @haasonsaas in #706
• chore: sync public mirror from internal by @haasonsaas in #719
• chore: sync public mirror from internal by @haasonsaas in #720
• [maestro] redact hosted runtime progress freeform fields by @haasonsaas in #715
• chore: sync public mirror from internal by @haasonsaas in #721
• chore: sync public mirror from internal by @haasonsaas in #722
• chore: sync public mirror from internal by @haasonsaas in #723
• chore: sync public mirror from internal by @haasonsaas in #724
• chore: sync public mirror from internal by @haasonsaas in #725
• chore: sync public mirror from internal by @haasonsaas in #726
• chore: sync public mirror from internal by @haasonsaas in #727
• chore: sync public mirror from internal by @haasonsaas in #728
• chore: sync public mirror from internal by @haasonsaas in #729
• chore: sync public mirror from internal by @haasonsaas in #730
• [maestro] gate plugin bundle lifecycle mutations behind session mutability by @haasonsaas in #711
• [maestro] Isolate published registry smoke workflow by @haasonsaas in #707
• [maestro] Pin tag release permission assertions by @haasonsaas in #732
• chore: sync public mirror from internal by @haasonsaas in #731
• chore: sync public mirror from internal by @haasonsaas in #733
• chore: sync public mirror from internal by @haasonsaas in #734
• [maestro] Default hosted runner bind address to localhost by @haasonsaas in #705
• [maestro] block protocol/mode/set while in review mode by @haasonsaas in #712
• chore: sync public mirror from internal by @haasonsaas in #735
• [maestro] Require project approval for Fathom CUA MCP server by @haasonsaas in #709
• [maestro] Require user presence for desktop device identity signing key by @haasonsaas in #714
• chore: sync public mirror from internal by @haasonsaas in #737
• chore: sync public mirror from internal by @haasonsaas in #738
• chore: sync public mirror from internal by @haasonsaas in #739
• chore: sync public mirror from internal by @haasonsaas in #740
• chore: sync public mirror from internal by @haasonsaas in #741
• chore: sync public mirror from internal by @haasonsaas in #748
• chore: sync public mirror from internal by @haasonsaas in #751
• chore: sync public mirror from internal by @haasonsaas in #752
• chore: sync public mirror from internal by @haasonsaas in #753
• chore: sync public mirror from internal by @haasonsaas in #755
• chore: sync public mirror from internal by @haasonsaas in #756
• chore: sync public mirror from internal by @haasonsaas in #757
• chore: sync public mirror from internal by @haasonsaas in #758
• Fix public workflow footgun guardrail inputs by @haasonsaas in #760
• Run public workflow footgun smoke on infra PRs by @haasonsaas in #761
• chore: sync public mirror from internal by @haasonsaas in #759
• chore: sync public mirror from internal by @haasonsaas in #762
• chore: sync public mirror from internal by @haasonsaas in #764
• chore: sync public mirror from internal by @haasonsaas in #765
• chore: sync public mirror from internal by @haasonsaas in #766
• chore: sync public mirror from internal by @haasonsaas in #767
• chore: sync public mirror from internal by @haasonsaas in #768
• chore: sync public mirror from internal by @haasonsaas in #769
• chore: sync public mirror from internal by @haasonsaas in #770
• chore: sync public mirror from internal by @haasonsaas in #773
• [maestro] Add Agent Workforce native event projector by @haasonsaas in #774
• chore(deps): bump astral-sh/setup-uv from 8.1.0 to 8.2.0 by @dependabot[bot] in #776
• [maestro] Ignore project MCP workspace trust policy entries by @haasonsaas in #771
• chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #777
• chore: sync public mirror from internal by @haasonsaas in #775
• [maestro] Pin AgentRuntime safe projection gaps by @haasonsaas in #778
• chore: sync public mirror from internal by @haasonsaas in #779
• chore: sync public mirror from internal by @haasonsaas in #780
• chore: sync public mirror from internal by @haasonsaas in #781
• chore(deps): bump actions/setup-java from 4.7.1 to 5.3.0 by @dependabot[bot] in #782
• chore: sync public mirror from internal by @haasonsaas in #783

Full Changelog: v0.10.48...v0.10.49