v0.68.2

Point release over v0.68.1: the current stable plus 1 applied commit(s), isolated from the changes still soaking on main.

Applied: f6f8e7d

Patch Changes

• Path containment holds on Windows.

  The check that keeps agent tools inside the project root compared the resolved relative path against a literal ../ prefix. On Windows the separator is a backslash, so a traversal written as ..\ was not recognised and the path was treated as contained.

  exec does sandbox its shell to a root, but that root is whatever the cwd argument resolved to. When the cwd itself escaped, the sandbox was faithfully rooted at the escaped directory and had nothing left to catch. That asymmetry is what made this reachable.

  Separators are now normalised before the check. Absolute paths, other drives, and UNC shares were already refused and still are. Windows was the only platform at risk, though one behaviour changes everywhere: a file whose name literally begins with ..\ is now refused as well.

Downloads

Platform	Architecture	Download
macOS	Apple Silicon	OpenKnowledge-arm64.dmg
Windows	x64	OpenKnowledge-Setup-x64.exe
Windows	arm64	OpenKnowledge-Setup-arm64.exe
Debian / Ubuntu	x64	OpenKnowledge-amd64.deb
Debian / Ubuntu	arm64	OpenKnowledge-arm64.deb
Fedora / RHEL	x64	OpenKnowledge-x86_64.rpm
Fedora / RHEL	arm64	OpenKnowledge-aarch64.rpm