Skip to content

PatchWarden v1.6.2

Choose a tag to compare

View all tags
@jiezeng2004-design jiezeng2004-design released this 25 Jul 01:55
v1.6.2
00b49fb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

PatchWarden v1.6.2

PatchWarden v1.6.2 stabilizes the Windows Desktop demo runtime and the two-stage Assessment workflow.

Highlights

  • Keeps Watcher heartbeat updates independent from long-running Agent tasks, preventing healthy Watchers from being restarted mid-task.
  • Adds restart-safe task reconciliation for cancellation, timeout, artifact collection, and Watcher ownership transitions.
  • Adds versioned Assessment security snapshots, cross-process canonical tool manifests, material configuration fingerprints, and value-free stale diagnostics.
  • Keeps Assessments valid across Watcher restarts while failing closed on policy, command, scope, timeout, and schema changes.
  • Aligns Desktop, Core, Direct, Watcher, and Tunnel launch paths on the active runtime configuration.
  • Improves bounded Agent adapter/model diagnostics, Audit evidence, Direct verification, and packaged E2E coverage.
  • Normalizes Windows drive paths independently of the CI host platform.

Windows downloads

This release currently provides Windows x64 Desktop artifacts:

  • PatchWarden-Setup-1.6.2-x64.exe
  • PatchWarden-Portable-1.6.2-x64.zip
  • PatchWarden-Desktop-SHA256SUMS.txt

The installer is not code-signed yet, so Windows SmartScreen may show an unknown-publisher warning. Verify downloads with the attached SHA256 manifests.

macOS/Linux and CLI users can continue using the existing npm package and its built-in local Dashboard. npm publication is manual and is not performed by this GitHub Release.

Validation

  • GitHub CI: Node 18, Ubuntu Node 20, Windows Node 20, Secret Scan, Windows Desktop installer, and CI Gate passed.
  • Security smoke: 141/141.
  • Unit tests: 886 passed, 3 skipped.
  • Lifecycle smoke: 22/22.
  • HTTP MCP: 17/17.
  • Doctor: 83 OK, 0 WARN, 0 FAIL.
  • Desktop tests: 56/56.
  • Clean package: 545 files; npm package surface: 544 files.
  • Final packaged Core: v1.6.2, 26 tools.
  • Final unpacked Desktop smoke: 3 viewports, single-instance check passed.

Dependency note

Core and Desktop production dependency audits report 0 vulnerabilities. The Desktop development dependency tree currently reports an upstream brace-expansion DoS advisory through electron-builder. The patched brace-expansion release requires Node 20 while PatchWarden supports Node 18, so this release does not apply an incompatible forced override or downgrade electron-builder. The affected build-only dependency is not shipped in the installed runtime.

Assets 8
Loading