Skip to content

Devbox v1.4.0

Latest
Latest

Choose a tag to compare

View all tags
@foobarto foobarto released this 28 Aug 09:43
Immutable release. Only release title and notes can be modified.
v1.4.0
This tag was signed with the committer’s verified signature.
foobarto Bartosz Ptaszyński
SSH Key Fingerprint: xPieVNK/H3jRXKx/m/8Xaf1REErNRkZa5Q1ZvPIPLyI
Verified
Learn about vigilant mode.
d58e61f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's changed

  • Make .devbox.toml consent easier to review with category-specific Unicode icons and readable multiline provisioning/startup blocks.
  • Offer an optional AI summary and safety check through Codex (default), Claude, Agy, Copilot, Cursor, OpenCode, or Pi before final human approval.
  • Store approvals in owner-only user state and skip repeat warnings while the manifest SHA-256 is unchanged.
  • Resolve manifest-controlled host paths relative to .devbox.toml so cached consent has stable meaning across invocation directories.

The AI review remains advisory, sends manifest contents to the service configured for the selected CLI, and never replaces the final explicit approval.

Assets 3
Loading