v0.1.22

What's Changed

• chore: set real sha256 for v0.1.21 release tarball by @musqz in #117
• docs: add contribution flow for reporting AUR packages by @musqz in #118
• docs: reorder README so Quick Start comes before the deep-dive material by @musqz in #119
• docs: show the --refresh Lists-loaded banner in Quick Start by @musqz in #120
• fix: PKGBUILD never installed the audit-rules.conf template by @musqz in #121
• feat: add allowlist CLI verbs and --format=json for archcanary-gtk by @musqz in #122
• feat: add --extra-lists-list/add/remove CLI verbs by @musqz in #123
• feat: add CLI verbs for aur-audit toggle, audit rules, Lynis profile by @musqz in #124
• feat: allow-list unowned user-systemd ExecStart binaries by @musqz in #125
• fix: match unowned-ExecStart allowlist on full path, not basename by @musqz in #126
• fix: bash completion missing 14 CLI verbs from recent PRs by @musqz in #127
• fix: allowlist-add/remove rejected full-path values by @musqz in #128
• fix: register bash completion for ./archcanary.sh too by @musqz in #129
• docs: add per-package git-grep evidence source to SOURCES.md by @musqz in #130
• fix: two check_autostart false positives (home-bin script, commented RC) by @musqz in #131
• feat: soften INFECTED wording for heuristic checks, add allowlist hints by @musqz in #132
• docs: add openconnect-sso + second-wave AUR attack sources by @musqz in #133
• fix: check_autostart false positive for Flatpak apps by @musqz in #134
• chore: remove aurscan integration by @musqz in #135
• fix: GUI Full scan blocked entirely without root; wrong diagnosis by @musqz in #137
• chore: bump version to 0.1.22 by @musqz in #136

Full Changelog: v0.1.21...v0.1.22