v0.4.8

0.4.8 (2026-08-10)

Features

• cartridge: persist a booted .dmg on eject (#189) (bad09f1)
• cli: add br up + grouped help; dedup --json guard (#146) (0f7cc73), closes #131
• cli: answer to the verbs other tools use (#273) (73b637c)
• cli: close the ergonomics gap with colima (#271) (b92ee59)
• cli: run the VM under the holder (#190) (54cb184)
• cli: suggest the right verb for another tool's word (#272) (c688722)
• cli: surface cartridge eject protection (#187) (5c0b623)
• default to the pre-baked guest image (#173) (ce330e8)
• enable + fail-closed-verify the hosted image (#172) (fb81338), closes #155
• imagebuild: add the Linux native build mechanic (#255) (bb90d29)
• imagebuild: create the Incus storage pool at bake time (#275) (b991811)
• imagebuild: fetch a pinned, verified base image (#259) (759ac33)
• imagebuild: own guest image build policy (#250) (ca37cf1)
• imagebuild: own the guest image build in Go (#263) (2918848)
• update: ed25519 self-updater + .dmg docs (#148) (cd3e0c1)
• update: embed production update public key (#150) (9bd25fd)
• update: publish latest.json on release (#151) (09c1332)
• vm: share one base image across instances (#274) (04600c5)

Bug Fixes

• answer a nil handler response; refresh site copy (#293) (4387300), closes #230
• bind OIDC codes; refuse archive symlink escapes (#300) (28ce516)
• bound outbound HTTP; drop a dead flag (#307) (13246a2), closes #243
• build: verify the Go toolchain for signed builds (#256) (3c16131)
• cartridge: keep detection honest; claim by file, not by spelling (#309) (658b08a)
• cartridge: never unlink an unconfirmed attachment (#296) (d15c326)
• ci: inline the triage workflow (#251) (586a36e)
• ci: promote guest images monotonically; repair the isolation guard (#310) (84558d2)
• ci: stop passing a flag that no longer exists (#267) (ae67e45)
• cli: correct the user-facing command surface (#245) (31454d8)
• close the last audit findings (#191) (8018c32)
• disk: take the bake digest only from stdout (#260) (a4ba093)
• imagebuild: load nbd before answering about it (#269) (836bb87)
• imagebuild: make the probe describe what runs (#253) (c4d5f98)
• imagebuild: validate a GPT before trusting it (#270) (d48b27c)
• image: never delete a caller-owned work directory (#254) (133cfef)
• image: streamline the Incus base image (#57, #45) (#125) (29d0a8c)
• keep saved state and its sidecar together (#292) (efb0357)
• lint: drop stale nolint directives; pin golangci (#149) (8e60abf)
• lint: resolve golangci-lint failures blocking main (#128) (477117d)
• make --instance actually select the instance (#183) (4124752)
• make br exec interruptible (#301) (defe286), closes #283
• make the cartridge smoke test pass end to end (#177) (a059ac7)
• provision: close agent-path OIDC relay gap (#130) (#145) (95403b0)
• provision: dedicated ssh user, no incus collision (#174) (f7f2548)
• provision: stop blocking first boot on a backend that comes later (#276) (bd3ef85)
• provision: stop reinstalling what the image already has (#277) (fbb6459)
• provision: tie the instance-id to the user-data (#257) (4e6af0c)
• publish JSON manifests atomically (#184) (2124101)
• publish the seed atomically; report skipped steps (#298) (11600c0)
• recover a wedged holder and stop the accept spin (#289) (c947f35)
• resolve instances by liveness, not ping (#308) (34feb7c), closes #290
• serialize the image cache, rename safely (#291) (3c30238), closes #280 #281
• site: advertise the product release, not a guest image (#295) (27539cd), closes #226
• ssh: derive the public key, publish atomically (#297) (9f42c46), closes #214
• stamp the binary from a product tag (#299) (3f009c4), closes #294
• test: make smoke cleanup interruption-safe (#302) (232f9d3), closes #228
• update: derive latest.json at build time (#303) (d2d6bda), closes #232 #286
• vmhost: publish startedAt under the lock (#238) (09d30b1)