Skip to content

Release v0.14.5

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Aug 03:40
· 143 commits to main since this release
v0.14.5
3118925
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • Snapshots can now be read in a format bashkit does not yet write. The
    next release stores sessions as a content-addressed object graph, which is a
    new on-disk format. This release teaches the reader that format and changes
    nothing else, so a deployment can take it first and still be able to read
    what the next release writes
    (#2226).
  • Scripts can be inspected before they run. analyze() — in Rust, Node,
    and Python — returns a static report of the commands, arguments, redirect
    targets, and function definitions a script refers to, for host permission
    prompts and audit logging. It is advisory by design: dynamic dispatch,
    eval/source, nested shells, and truncated walks surface as unknown via
    is_opaque, with the before_tool hook remaining the enforcement backstop
    (#2222).

Upgrading

  • Both additions are backward compatible. snapshot() still writes the same
    bytes, every existing snapshot restores exactly as before, and analyze() is
    purely additive.
  • Take this release before the one that writes the new format. Versions
    older than this one fail on the new format with expected value at line 1 column 1 — a JSON parse error naming neither the version nor the format —
    so they are not usable rollback targets. This release is.
  • From the new format onward this cannot recur: the container header records a
    min_reader version, so a reader too old for a snapshot says so and points at
    the upgrade instead of reporting corruption.

What's Changed

  • feat(snapshot): read the v2 container without writing it (#2226) by @chaliy
  • fix(ci): unblock main — guard third-party LLM steps and refresh retired model id (#2225) by @chaliy
  • chore(knowledge): repair dangling cross-links and enforce OKF trust metadata (#2224) by @chaliy
  • feat(analysis): add analyze() for pre-execution script introspection (#2222) by @chaliy
  • fix(docs): repoint broken cross-tree markdown links and guard them in CI (#2220) by @chaliy
  • chore(deps): bump turso_core from 0.8.0-pre.1 to 0.8.0-pre.2 (#2218) by @dependabot
  • chore(deps): bump the rust-dependencies group with 3 updates (#2217) by @dependabot
  • chore(ci): bump taiki-e/install-action from 2.85.0 to 2.85.2 in the github-actions group (#2216) by @dependabot

Full Changelog: v0.14.4...v0.14.5

Contributors

chaliy and dependabot
Assets 8
Loading