v1.8.0

v1.8.0 (2026-08-29)

Bug Fixes

• Harden artifact crypto streaming error and spool boundaries (7e76813)

• Harden Drive inventory authority boundary (b9d626e)

• Prove artifact spool ownership on Unix (b6630d4)

• Secure artifact spools on Windows (51a269c)

• Validate artifact spool security by handle (88db173)

• integration: Wire artifact CLI and harden restore and history boundaries (bc5895d)

Chores

• Format safety changes (6101688)

Features

• Add versioned run and cycle history stores with fail-closed scheduler evidence (c944673)

• Implement Git-backed approval store and quarantine mutations (dd03e02)

• Stream artifact crypto through secure spools (e41caa4)

• restore: Implement typed provider and checkpointed restore (4200dbc)

• sync: Add cycle history and bounded replica concurrency (6c86d26)

---

Detailed Changes: v1.7.0...v1.8.0

v1.7.0

v1.7.0 (2026-08-25)

Bug Fixes

• Align Go floor across CI platforms (#134, edb394e)

• Bind cleanup intents to canonical approvals (#134, edb394e)

• Bind restore floors to provider (#134, edb394e)

• Close final backup safety gaps (#134, edb394e)

• Consolidate BDrive verification gates (#134, edb394e)

• Document cleanup binding flags (#134, edb394e)

• Fail closed on unsupported child image platforms (#134, edb394e)

• Gate unsupported Darwin runtime paths (#134, edb394e)

• Harden release publication policy (#134, edb394e)

• Isolate mutable rclone transfer config (#134, edb394e)

• Make runtime fixtures portable across CI hosts (#134, edb394e)

• Publish stable from macOS and retry existing release tags (#141, c19d90a)

• Push release commit with the CI App identity (#140, cf5e67b)

• Reject cleanup budget overflow (98c88b6)

• Reject duplicate inventory cursors (#134, edb394e)

• Reject inventory byte count overflow (ae86974)

• Require authenticated backup evidence (#134, edb394e)

• Require exact inventory metadata (#134, edb394e)

• Restrict Scorecard to default branch (#134, edb394e)

• Support macOS candidate verification (#134, edb394e)

• ci: Snapshot untagged candidate builds (#134, edb394e)

• release: V1.7.0 [skip ci] (c982fc4)

• safety: Harden local backup contracts (#134, edb394e)

Features

• Add authenticated artifact seal and open (#134, edb394e)

• Add cleanup approval workflow (#134, edb394e)

• Add config schema v2 and pinned runtime (#134, edb394e)

• Add credential-free release preparation (#134, edb394e)

• Add direction and replica transfer execution (#134, edb394e)

• Add exact-id cleanup controls (#134, edb394e)

• Add protected stable publication path via better-semantic-release (#139, 5bce437)

• Add read-only managed scheduler surfaces (#134, edb394e)

• Add safe restore planning and staging (#134, edb394e)

• Add transfer safety guard primitives (#134, edb394e)

• Bind cleanup manifests to inventory (#134, edb394e)

• Collect deterministic drive root sets (#134, edb394e)

• Collect paginated drive inventory (#134, edb394e)

• Complete local backup safety contracts (#134, edb394e)

• Enforce enrolled cleanup approval roots (#134, edb394e)

• Harden cleanup approval and inventory controls (8bae7f3)

• Harden replica floors and runtime preflight (#134, edb394e)

• Harden restore and installer gates (#134, edb394e)

• Journal cleanup previews (#134, edb394e)

• Persist scheduler and replica state (#134, edb394e)

---

Detailed Changes: v1.6.0...v1.7.0

v1.6.0

v1.6.0 (2026-08-15)

Bug Fixes

• Address scorecard security controls (7784896)

• Document intentional error handling (f8e9d9d)

• Handle resource close errors (6c10aa5)

• Harden rclone config path resolution (838039f)

• Harden systemd autostart path escaping (96d9a80)

• Harden tray path handling (e88cdaf)

• Move this repo to Apache-2.0 (#63, 213a74d)

• Publish scorecard-recognized release signatures (#98, 59dd0e7)

• Update non-major dependencies (f54f5c8)

• deps: Update step-security/harden-runner action to v2.20.1 (#96, 06abb54)

Features

• Add dynamic tray menu tooltips (451a21f)

• Add repository governance and developer guardrails (43cfb68)

• Disable paused sync action (e432693)

• Finalize mount and sync reliability (6311b28)

• Optimize ignore-line translation (59072a1)

• Sync cross-promo section (#47, 83e8ca7)

---

Detailed Changes: v1.5.1...v1.6.0

v1.5.1

v1.5.1 (2026-07-25)

Bug Fixes

• Publish the homebrew tap as a cask instead of the retired brews config (df7654c)

---

Detailed Changes: v1.5.0...v1.5.1

v1.5.0

v1.5.0 (2026-07-25)

---

Detailed Changes: v1.5.0-beta.4...v1.5.0

v1.5.0-beta.4

v1.5.0-beta.4 (2026-07-25)

Bug Fixes

• Document the sync --resync recovery path (#40, 8824071)

• Keep prereleases out of the scoop bucket and homebrew tap (#38, a81ec55)

• Key each pair's bisync workdir by identity and add sync --resync (#39, 40bd257)

• Key each pair's bisync workdir by identity instead of config position (#39, 40bd257)

• Let the installer smoke test actually run and drop the dead branch trigger (#37, 4715bbf)

• Pin ci.yml to the checkout and setup-go versions the other workflows use (#32, e0ed2fa)

• Recognise the lost-baseline bisync abort under --resilient (#39, 40bd257)

• Write the last two Vietnamese code comments in English (#31, cfc3d00)

• deps: Update actions/checkout action to v7 (#34, 7cd1b75)

• deps: Update actions/setup-go action to v7 (#35, b86ed98)

• deps: Update github/codeql-action action to v4 (#36, dd261c9)

• deps: Update go module directive to v1.26.5 (#33, ce21f6a)

Features

• Add sync --resync to rebuild a lost bisync baseline (#39, 40bd257)

---

Detailed Changes: v1.5.0-beta.3...v1.5.0-beta.4

v1.5.0-beta.3

v1.5.0-beta.3 (2026-07-25)

Bug Fixes

• Name the way out in the guard messages, not only in the json remediation (#29, 4f2ce21)

• Read .driveignore through os.OpenRoot so symlinks cannot escape the pair root (f916caf)

• Walk rclone output without materialising a line slice (c13936a)

Features

• Add account list showing Drive remotes, their state and the pairs using them (#29, 4f2ce21)

• Add account remove guarded against deleting a remote still in use (#29, 4f2ce21)

• Add engine methods to list Drive remotes and read their quota (#29, 4f2ce21)

• Add the account command group and non-interactive setup (#29, 4f2ce21)

• Build the darwin release binaries with cgo so the tray works on macOS (#28, 616c9fb)

• Document the account commands, non-interactive setup and macOS tray (#30, 0372b50)

• Emit a JSON error envelope for --format json command failures (#27, b7a1ed5)

• Enable the system tray and cgo darwin release builds on macOS (#28, 616c9fb)

• Enable the system tray on macOS (#28, 616c9fb)

• Expose setup as account add without changing its output (#29, 4f2ce21)

• Group tray menu actions with separators (b449a50)

• Let setup run without a browser via token or service-account credentials (#29, 4f2ce21)

---

Detailed Changes: v1.5.0-beta.2...v1.5.0-beta.3

v1.5.0-beta.2

v1.5.0-beta.2 (2026-07-25)

Bug Fixes

• Skip the real resync mkdir under --dry-run so no changes are made (23abbe1)

Features

• Make the CLI agent-drivable (json output, exit codes, stderr hygiene, dry-run) (4117b11)

---

Detailed Changes: v1.5.0-beta.1...v1.5.0-beta.2

v1.5.0-beta.1

v1.5.0-beta.1 (2026-07-24)

Bug Fixes

• Configure Renovate with SHA pinning and rate limits (#1, 63e5202)

• Pin GitHub Action references to commit SHAs (#8, cd0a822)

Chores

• Configure Renovate (#1, 63e5202)

Features

• Show dynamic sync status in system tray tooltip and disable invalid actions (a70278e)

---

Detailed Changes: v1.4.0...v1.5.0-beta.1

v1.4.0

v1.4.0 (2026-07-19)

Bug Fixes

• Keep macOS build headless (defer cgo tray), correct README to Windows/Linux tray (eb6a974)

• Refresh README for shell-out rclone engine + cross-platform install (c545c44)

• Run rclone with CREATE_NO_WINDOW so the GUI daemon stops flashing console windows (9dbaadb)

Features

• Document macOS system-tray support in README (c552af2)

• Enable systray daemon on linux and macOS (188c3eb)

---

Detailed Changes: v1.3.0...v1.4.0