Skip to content

v0.2.20 — enterprise-managed plugin policy

Choose a tag to compare

@github-actions github-actions released this 14 Aug 02:24
· 21 commits to main since this release

What's New in v0.2.20

Features

  • Enterprise-managed plugin allowlist/blocklist — Administrators can now centrally control which community plugins are permitted. Drop a managed policy file at a fixed OS path (or point GEODE_POLICY_PATH at one) declaring an allow or block list of plugin ids. Blocked plugins refuse to enable, surface a Notice on startup, and show a "blocked by admin" badge in Settings. Policy is validated fail-open — a missing or malformed file never blocks the app, and a single bad entry is skipped rather than voiding the whole policy. Enforcement never touches your own .geode/plugins.json, so relaxing a policy re-enables a previously blocked plugin automatically on next launch. See docs/adr/0002-enterprise-plugin-policy.md for the design. (#28)

Improvements

  • CI: release/build workflows bumped to actions/checkout@v5 + actions/setup-node@v5 (Node 24 runtime). (#30)

Notes

  • macOS installers are unsigned — Gatekeeper will warn on first launch. See the README's "Install" section for the one-time workaround.
  • Artifacts: universal + arm64 .dmg and .zip, plus latest-mac.yml for auto-update.

Full Changelog: v0.2.19...v0.2.20