2.10.0

What's Changed

• Fix xonsh support by @Hind-M in #4366
• fix: Clear stale negative cache entries by @jjerphan in #4328
• ci: Add win-arm64 static builds workflows by @jjerphan in #4357
• fix: Escape MatchSpec quotes in env export --json --from-history by @jjerphan in #4376
• fix: Correct extracted packages traversal when cleaning tarballs by @mikemhenry in #4353
• Fix shell init with cmd.exe by @Hind-M in #4370
• maint: Use cxx-compiler <2 by @jjerphan in #4381
• fix: Bound HTTP header value parsing in the curl callback by @jjerphan in #4386
• fix: Make macOS ad-hoc codesign spawn reliably by @jjerphan in #4387
• Add test for shell hook with powershell by @Hind-M in #4390
• feat: Inject channels+mirrors coming from mambajs env-lockfiles by @Klaim in #4126
• maint: Adapt build setup for cxx-compiler >=2 by @jjerphan in #4382
• Fix nushell detection by @Hind-M in #4385
• fix: remove any usage of exit() by @Klaim in #4397
• Fix softlink by @Hind-M in #4398
• feat: Suggest closest command on typo by @faze-geek in #4367
• feat: Remove stop-reason mechanism from logging system by @Klaim in #4399
• Fix error code print by @Hind-M in #4403
• feat: Add std::chrono::parse polyfill for libc++ by @jjerphan in #4402
• feat: remove restriction that channels from conda env-lockfile were not taken into account by @Klaim in #4396
• feat: Complete exclude_newer policy by @jjerphan in #4344
• fix: Assign channel priority in ctx.channels order by @black-desk in #4395
• build(deps): bump jlumbroso/free-disk-space from 1.3.1 to 2.0.0 by @dependabot[bot] in #4408
• fix: Honor override_virtual_packages configuration by @jjerphan in #4364
• Add comments and documentation for exclude_newer policy by @Hind-M in #4409
• ci: Add Windows ARM64 shared-library test workflow by @jjerphan in #4383
• fix: Use RtlGetVersion for Windows long-path OS check by @r3wretrhy in #4404
• fix: Handle many missing top-level packages by @jjerphan in #4361
• Preserve per-package repodata URLs by @GruffElixir in #4406
• fix: pass activation help through #4114 by @GruffElixir in #4412
• Completed C++20 upgrade by @JohanMabille in #4413
• Removed implementations of TUF by @JohanMabille in #4415
• fix: Honor disabled pip injection when requesting Python by @maresb in #4423
• Remove mamba-content-trust entirely by @Hind-M in #4417
• Fix auth tests by @Hind-M in #4425
• fix: Ignore non-string values in shard index info map by @r3wretrhy in #4421
• ci: recreate coverage environment with cached downloads by @maresb in #4424
• Fix PowerShell syntax error of quotes (Fixes #3908) by @gghhffyy368 in #4179
• fix: incorrect pyzzer/distlib entry point scanning by @Klaim in #4435
• Fix update/install by @Hind-M in #4431
• Use stdext::contains by @Hind-M in #4437
• fix: incorrect file extension check by @Klaim in #4436
• fix: Tokens dropped on package download (broken since 2.9.0, 2026-08-07) by @hmaarrfk in #4440
• update_changelog: Handles issue number in PR titles by @JohanMabille in #4441
• Releaser now accepts version numbers with two digits by @JohanMabille in #4442

New Contributors

• @black-desk made their first contribution in #4395
• @r3wretrhy made their first contribution in #4404
• @GruffElixir made their first contribution in #4406
• @gghhffyy368 made their first contribution in #4179

Full Changelog: 2.9.0...2.10.0