v1.13.0

Changelog

• 2d2e69f Merge pull request #163 from ashishkurmi/akurmi/fix/release-resolve-draft-race
• 0325326 fix(ci): wait for release-list propagation before resolving draft tag
• 8f0e591 Merge pull request #161 from raysubham/subham/feat/wt/device-policy-ga
• ac979bb feat(featuregate): enable device-policy enforcement by default
• b837f57 Merge pull request #160 from swarit-stepsecurity/swarit/fix/wt/windows-yarn-globals
• 71c052c fix(node): enumerate yarn classic globals on Windows
• b0c88ce Merge pull request #159 from swarit-stepsecurity/swarit/fix/wt/node-global-discovery
• 4dd5db8 Merge branch 'main' into swarit/fix/wt/node-global-discovery
• a911076 fix(node): parse global lockfile when node_modules walk is empty (pnpm store)
• c69100f fix(node): discover pnpm v10+ globals (global/v//node_modules)
• 6b7a999 Merge pull request #158 from swarit-stepsecurity/swarit/chore/wt/up-ver-1.12.1
• 0bb1dc8 chore(release): update to 1.13.0
• f797e76 Merge pull request #157 from swarit-stepsecurity/swarit/chore/wt/coding-guidelines
• 5e1b172 docs: rename coding-guidelines.md to AGENTS.md at repo root
• b4f9888 Merge branch 'main' into swarit/chore/wt/coding-guidelines
• f585dc0 Merge pull request #138 from raysubham/feat/dmg-policy-profiles
• 413cc83 Merge branch 'main' into feat/dmg-policy-profiles
• c9b913c Merge pull request #156 from swarit-stepsecurity/swarit/feat/wt/migrate-npm-scanning
• 02b0de7 Merge branch 'main' into swarit/feat/wt/migrate-npm-scanning
• 665eaaa Merge pull request #143 from shubham-stepsecurity/sm/launchd-troubleshooting
• e6a1427 Merge branch 'main' into swarit/feat/wt/migrate-npm-scanning
• 83915ba Merge branch 'main' into sm/launchd-troubleshooting
• 5bb357e Merge pull request #142 from shubham-stepsecurity/sm/classic-visual-studio
• 8b3b85f Merge branch 'main' into sm/classic-visual-studio
• 8a34e8c Merge branch 'main' into swarit/feat/wt/migrate-npm-scanning
• 992f385 feat(detector): discover classic Visual Studio extensions and installs
• 74fbd1c Merge pull request #155 from swarit-stepsecurity/swarit/feat/wt/migrate-py-scanning
• 59e25b7 Merge branch 'main' into swarit/feat/wt/migrate-py-scanning
• 44474f0 Merge pull request #152 from swarit-stepsecurity/swarit/feat/wt/lock-acquire-logging
• 9b596f9 Merge branch 'main' into swarit/feat/wt/lock-acquire-logging
• 1d6ac5e fix(node): count disk packages in scan cap; gate delta on PMVersion
• 4abd891 docs(tcc): configure Full Disk Access for all devices only
• ff29a5b docs: add coding guidelines derived from existing patterns
• 3f35a34 Merge branch 'main' into swarit/feat/wt/migrate-npm-scanning
• e5c6633 feat(node): add disk-based package scanning (lockfile parsing)
• 4b927a3 Merge pull request #141 from shubham-stepsecurity/sm/fix
• 7360ce3 Merge branch 'main' into sm/fix
• 1abf3c0 fix(telemetry): don't assume lock failure means contention
• d85e9c5 fix(python): address PR review on disk-based scanning
• 8266443 feat(devicepolicy): make policy identity target-aware (category + target)
• 70e644a fix(python): use type conversion for PackageDetail->PythonPackage (staticcheck S1016)
• d113b95 feat(python): add disk-based package scanning (dist-info metadata)
• efbd43b feat(telemetry): log and report lock-acquisition contention at info level
• 8d7920c fix(install): don't enforce IDE policy inline under SYSTEM
• c36dfd4 fix(devicepolicy): fetch policy from run-config, drop removed effective-policy endpoint
• d52c941 Merge branch 'main' into feat/dmg-policy-profiles
• 68fdfb3 Merge pull request #151 from raysubham/subham/fix/schtasks-daily-schedule-24h
• 83a8f73 fix(schtasks): use DAILY schedule for scan frequencies of 24h+
• 1c83b7d Merge pull request #146 from shubham-stepsecurity/sm/scheduler-info-interval-gate
• 37a0a42 Merge branch 'main' into sm/scheduler-info-interval-gate
• 2412a3f Merge pull request #144 from swarit-stepsecurity/swarit/chore/wt/add-logs-python
• 911866e Merge branch 'main' into swarit/chore/wt/add-logs-python
• 2a5db1c feat(telemetry): include this run's loader-script logs
• af7bb2f feat: enable Windows Task Scheduler history; address review feedback
• 823bedb feat: run-on-login scheduling, reliability fixes, scheduler diagnostics
• c9b55b7 Merge pull request #148 from swarit-stepsecurity/swarit/feat/last-run-heartbeat
• 6f07968 Merge branch 'main' into swarit/feat/last-run-heartbeat
• e888d9b Merge pull request #150 from swarit-stepsecurity/swarit/chore/disable-delta-npm-feat
• e8b774b chore(telemetry): gate scan-state delta protocol off by default
• 0a5d73e Merge branch 'main' into swarit/feat/last-run-heartbeat
• 55cab2d Merge branch 'main' into feat/dmg-policy-profiles
• 66a6666 Merge pull request #140 from shubham-stepsecurity/sm/bump
• 034941f Merge branch 'main' into sm/bump
• 8a4ad99 feat(heartbeat): write last-run.json at top of send-telemetry
• 0f4cece Merge pull request #147 from ashishkurmi/main
• aa4cf43 Merge branch 'main' into main
• dc3bce9 Merge pull request #145 from eromosele-stepsecurity/Update-readme
• 199f2a3 ci(macos): automate Developer ID signing + notarization in GitHub Actions
• 447af09 Corrections to the setup for macOS
• 6dd69ea Update README
• 96ac3e9 chore: add per-venv scan logging to Python project detector
• 8238e03 Merge pull request #131 from swarit-stepsecurity/swarit/feat/wt/scan-state-package
• 078814d chore: go fmt
• f7d1e09 fix: address copilot review comments
• 6022c47 feat(devicepolicy): key on-device state by category to avoid a future migration
• 2ff6d54 feat(devicepolicy): reject state files from a newer schema version
• e21c0ef docs: enhance launchd troubleshooting guide with detailed scheduling information
• 7421d92 docs: add macOS launchd troubleshooting guide
• 5e302b0 refactor: move atomicfile to internal/atomicfile
• 2bf8b46 test(devicepolicy): assert settings.json write leaves a recoverable .bak backup
• 5c3e887 chore(devicepolicy): align feature gate name with renamed package
• 48e8f53 fix(detector): guard NodeScanner.pmAvailability with a mutex
• 646be01 fix(telemetry): persist scan-state in --telemetry-out path
• 4d2ac90 feat(detector): npm scan cache + concurrent workers (phase 4)
• 321dcc8 feat(telemetry): flip payload to delta protocol (phase 3)
• 99ff7cb feat(config): add use_legacy_package_scan opt-out
• e9992c7 fix(detector): resolve node PM versions via default install paths
• ce63e1c ci: build golangci-lint with Go 1.26 to unblock lint
• 1af7d7c chore: bump Go toolchain to 1.26
• 4bfdac1 feat(telemetry): track python projects, globals, and removals in scan-state
• e7b0d09 feat(telemetry): wire scan-state into npm scan path (phase 1)
• aeb0e80 fix(state): address copilot review comments
• 454f8e1 refactor(devicepolicy): merge channel halves into api.go, interface into settings_writer.go
• de9bc09 refactor(devicepolicy): rename package devmdm to devicepolicy
• da39b15 Merge remote-tracking branch 'upstream-main' into feat/dmg-policy-profiles
• 6001eb0 refactor(devmdm): enforce via user-scope settings.json instead of OS policy locations
• 4840f38 feat(devmdm): enforce VS Code extension allowlist via OS-native policy
• 2666acd Merge branch 'main' into swarit/feat/wt/scan-state-package
• e3c61c6 chore: go fmt
• 5019987 fix: gosec issues
• 5520716 feat(state): add scan-state package for npm/python delta uploads