v0.76.0

What's Changed

• fix(proxy): disable audit buffer for standalone nono proxy by @panga in #1766
• fix(policy): remove blanket /Volumes read grant from system_read_macos by @SequeI in #1769
• fix: allow fire-and-forget child processes by @kurtisc in #1737
• fix(sandbox): resolve multi-hop symlinks in fs grants by @kipz in #1776
• feat(tool-sandbox): support Git fsmonitor socket via unix_socket_bind by @kipz in #1780
• fix(proxy): load declarative credentials from profiles by @Haoxincode in #1789
• feat: add Nix flake support by @levonk in #1784
• chore(github): remove triage label from issue templates by @lukehinds in #1798
• fix(proxy): read chunked HTTP request bodies on L7 forward path by @Frankie-Xu in #1687
• fix(cli): route tracing warnings to stderr, not stdout by @SequeI in #1801
• fix(cgroup): skip control files when sweeping stale lineage sessions by @SequeI in #1802
• chore(deps): bump softprops/action-gh-release from 3.0.2 to 3.0.3 by @dependabot[bot] in #1810
• chore(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #1815
• chore(deps): bump tokio-rustls from 0.26.4 to 0.26.5 by @dependabot[bot] in #1809
• chore(deps): bump regress from 0.11.1 to 0.12.0 by @dependabot[bot] in #1811
• chore(deps): bump clap from 4.6.4 to 4.6.6 by @dependabot[bot] in #1812
• chore(deps): bump serde from 1.0.228 to 1.0.229 by @dependabot[bot] in #1813
• chore(deps): bump h2 from 0.4.16 to 0.4.19 by @dependabot[bot] in #1814
• fix(policy): resolve nss module error by @YewFence in #1806
• ci(spire): scope SPIRE workflow to code changes by @SequeI in #1800
• fix(cli): use CLAUDE_CONFIG_DIR instead of ~/.claude.json symlink redirects by @SequeI in #1820
• fix(cli): preserve file permissions on write_file wiring copy by @SequeI in #1807
• fix(proxy): make * stop at / in endpoint path patterns by @MateSaary in #1828
• feat(cli): add --max-total-size flag to audit cleanup by @christine-at-datadog in #1819
• docs(neps): add NEP-0001, pre-1.0.0 tech debt and API-freeze cleanup by @SequeI in #1758
• fix(cli): gate diagnostic remedies on observed evidence by @roli-lpci in #1816
• chore: release v0.76.0 by @SequeI in #1832

New Contributors

• @Haoxincode made their first contribution in #1789
• @levonk made their first contribution in #1784
• @MateSaary made their first contribution in #1828
• @roli-lpci made their first contribution in #1816

Full Changelog: v0.75.0...v0.76.0