Release 1.0.1

[!NOTE]

Mirrored from the original Codeberg release. The Debian assets are unchanged; SHA256SUMS was generated during migration. Original publication: 2026-06-14T15:15:01+02:00.

Original release notes

mooR Release 1.0.1

This is a patch/fix release that fixes some (mostly minor) differences in permissions handling for some builtins that were identified during an audit.

• Built-in object attribute assignment for .name, .r, .w, and .f, move(), chparent(),
  and recycle() now require owner-or-wizard authority instead of accepting public object write
  alone.
• add_verb() no longer requires the caller to have the programmer bit when the caller otherwise
  has object write permission and owner authority.
• verb_code() no longer requires the caller to have the programmer bit when the caller has read
  permission on the verb.
• delete_verb() is authorized by write permission on the object defining the verb, not ownership
  of or write permission on the verb itself.
• object_bytes() and connection_name() now check current task permissions rather than
  caller_perms().

Downloads

Debian Packages:

• Available in the release artifacts below

Docker Images:

• Backend: codeberg.org/timbran/moor:1.0.1-x86_64 and :1.0.1-aarch64
• Latest tags: :latest-x86_64 and :latest-aarch64

Frontend:

• The Meadow web client is now released separately.