arbstr v2.1.0

Image: ghcr.io/johnzilla/arbstr:2.1.0 (also :2.1), linux/amd64 + linux/arm64
Digest: sha256:009df0a43cc9f5189f205d9cf2266a55d3eed411a44b18cd0129c2b4eb82e0eb

Verify build provenance:

gh attestation verify oci://ghcr.io/johnzilla/arbstr:2.1.0 --owner johnzilla

What's Changed

• fix(vault): expand ${VAR} in [vault] config and return 401 for bad agent tokens by @johnzilla in #6
• fix(vault): classify reserve 401s by error code, not message text by @johnzilla in #7
• chore(deps): bump openssl, rustls-webpki and rand for security alerts by @johnzilla in #8
• fix(vault): cover prompt framing in reserve estimate; warn on capped settle by @johnzilla in #9
• ci: test PRs and publish multi-arch image on merge to main by @johnzilla in #10
• fix(vault): return a clean 403 with vault's policy reason by @johnzilla in #12
• chore(deps): bump rustls from 0.23.37 to 0.23.46 in the cargo group across 1 directory by @dependabot[bot] in #11
• docs: sweep README and dev docs; remove GSD planning artifacts by @johnzilla in #13
• ci: move Docker and artifact actions to Node 24; add Dependabot for actions by @johnzilla in #14
• chore(deps): bump actions/checkout from 5 to 7 in the github-actions group by @dependabot[bot] in #15
• feat(auth): protect analytics with operator_token; verify agents for models/cost by @johnzilla in #16
• build: Rust 1.99.1 in CI and Docker; fix result_large_err by @johnzilla in #17
• release: v2.1.0 and a tag-driven release pipeline by @johnzilla in #18

New Contributors

• @dependabot[bot] made their first contribution in #11

Full Changelog: v2.0...v2.1.0