v0.2.20 — enterprise-managed plugin policy
What's New in v0.2.20
Features
- Enterprise-managed plugin allowlist/blocklist — Administrators can now centrally control which community plugins are permitted. Drop a managed policy file at a fixed OS path (or point
GEODE_POLICY_PATHat one) declaring analloworblocklist of plugin ids. Blocked plugins refuse to enable, surface a Notice on startup, and show a "blocked by admin" badge in Settings. Policy is validated fail-open — a missing or malformed file never blocks the app, and a single bad entry is skipped rather than voiding the whole policy. Enforcement never touches your own.geode/plugins.json, so relaxing a policy re-enables a previously blocked plugin automatically on next launch. Seedocs/adr/0002-enterprise-plugin-policy.mdfor the design. (#28)
Improvements
- CI: release/build workflows bumped to
actions/checkout@v5+actions/setup-node@v5(Node 24 runtime). (#30)
Notes
- macOS installers are unsigned — Gatekeeper will warn on first launch. See the README's "Install" section for the one-time workaround.
- Artifacts: universal + arm64
.dmgand.zip, pluslatest-mac.ymlfor auto-update.
Full Changelog: v0.2.19...v0.2.20