Skip to content

Guard 3.0.16

Choose a tag to compare

View all tags
@kantorcodes kantorcodes released this 04 Sep 19:07
· 294 commits to main since this release
v3.0.16
3adc32b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Guard 3.0.16 is a stable release cut from 3adc32b.
1 commit • 1 merged pull request • 1 contributor since Guard 3.0.15.

Fixes

  • guard: Reseal Core native manifest after PyInstaller signing (#2659)
    • After PyInstaller packages the attested native runtime into the Desktop Core sidecar, rewrite the CArchive native manifest so runtime_sha256 and runtime_size match the packaged bytes.
    • Keep --add-data packaging. PyInstaller compresses DATA entries and can re-sign Mach-O payloads, which changes digest after the pre-package identity refresh.
    • Preserve neighboring archive entries and the bootloader prefix. Write the updated manifest uncompressed. Reject TOC entries that overlap the archive payload, and fail closed if extracted native bytes do not match the…

Install

Install this release:

uv tool install "hol-guard[cisco]==3.0.16"

Full changelog: v3.0.15...v3.0.16

Thanks @kantorcodes!

Contributors

kantorcodes
Assets 2
Loading