v0.25.0
v0.25.0
Highlights
fabio upgrade — Self-update command
Fabio can now update itself to the latest release directly from GitHub:
fabio upgrade --check # check if update is available
fabio upgrade # download, verify SHA256, replace binary
fabio upgrade --target-version 0.24.0 # pin specific versionSafety features:
- SHA256 checksum verification before binary replacement
- Refuses to downgrade unless
--forceis passed - Development builds (
-devsuffix) are protected from accidental overwrite - Atomic binary replacement (rename-dance on Windows for locked exe)
- Full
--dry-runsupport
Profile system improvements
--profileflag now works correctly — Previously only affected private link routing; now correctly overrides workspace, output, and capacity for the specified profileprofile savemerges — Adding a single field no longer wipes other configured fields--private-link-workspaceflag — Configurable via CLI (no more manual JSON editing)- Capacity injection —
FABIO_CAPACITYenv var wired from profiles intoworkspace assign-capacityandgateway create
Performance
- Context extract auto-scales concurrency to CPU count (previously hardcoded at 8)
Security
- Added
SECURITY.mdwith vulnerability reporting policy, scope, and response timeline
What's Changed
New Features
fabio upgradecommand (check/download/verify/replace binary from GitHub Releases)--private-link-workspaceflag onprofile save- Dev build detection: refuses upgrade on
-devversions with clear message
Bug Fixes
--profileflag now correctly overrides workspace/output/capacity (not just private_link)profile savemerges with existing profile (omitted fields preserved)FABIO_CAPACITYwired from profiles to workspace/gateway commands- Downgrade protection: refuses to install older version without
--force
Performance
- Context extract concurrency auto-scales to available CPU cores
Documentation
- Security policy (SECURITY.md)
- Strengthened testing requirements for coding agents
- Comprehensive profile documentation across all markdown files
- Renamed "agent-first" to "agent-native" across codebase
Stats
- 15 commits since v0.24.0
- 22 unit tests + 10 E2E tests for new features
- Profile tests: 17 total (13 existing + 4 new)
- Zero clippy warnings, zero unsafe code violations
Full Changelog
Full Changelog: v0.24.0...v0.25.0