v2.0.0

v2.0.0 (2026-10-24)

Bug Fixes

• Split CLI output on newline bytes so a split character never drops a line (dff0ccf)

• Stop shipping the maintainer's old dotfiles in the app and CLI (ecae76b)

Chores

• Add classify-tools.py to sort manifest tools into catalog or review (8dee9e7)

• Remove the maintainer's old dotfiles from the public repo (37adfa0)

Continuous Integration

• Delete Xcode on the end to end runner to free disk (44b355a)

• Let gitleaks skip the scanner's test fixtures (0fcfb36)

• Make the CI and e2e workflows read-only (8bcc68e)

• Pin the CI and e2e workflow actions to commit SHAs (eb84044)

• Push release commits with a deploy key instead of the Actions token (0b864b9)

• Run the end to end test on starter profiles, weekly and for releases (14f5b03)

• Sign release commits and tags with a CI-only GPG subkey (5f02b78)

Documentation

• Describe git profiles, review and trust (3fdc825)

• Describe opt-in dotfiles, backups, capture and the scanner (b33ea47)

• Describe profile export (ae9d75a)

• Describe profiles, starters and the neutral catalog (5496593)

• Describe signed CI releases and the release environment (a391928)

• Describe the app's profile flow and the new events (efc435a)

• Describe the end to end workflow (1a9f4c2)

• Describe the protocol fixture, data-driven categories and load errors (5331b84)

• List the catalog's new tools (003a45c)

• Say plainly what the Actions bypass on main skips (5f1391d)

Features

• Add DevOps CLIs, apps, Rust and editor extensions (684a859)

• Install the tools a profile picks from a neutral catalog (0c8a0fb)

• Profile screen, review before trust, first-run choice and per-file dotfiles in the app (bd69c14)

• Show the active profile's tools in the app (e1e8af2)

• Show why the manifest failed to load and keep tools in undefined categories (d04c97e)

• Use pnpm, CocoaPods, Watchman, kubectl, Helm and yq in the starters (fc3d609)

• cli: Add the JSON events the app needs for profiles and dotfiles (0463e5d)

• cli: Export an old all-in-one setup into a private profile folder (35c2d9e)

• cli: Load profiles from git and run them only after review and trust (cc0861e)

• cli: Make dotfiles opt-in per file, with a diff, backups and restore (b230639)

• cli: Scan dotfiles for secrets and personal data (fa9e455)

Refactoring

• Keep the e2e branch's personal tools out of the catalog (edc7066)

Testing

• Scan all of Resources for personal data now that no dotfiles ship (7b0a0c6)

• cli: Pin every JSON-line event with a golden fixture (9c690ec)

---

Detailed Changes: v1.3.0...v2.0.0

Install Notes

• The release commit and tag are GPG-signed (git tag -v <tag>).
• Releases are ad-hoc signed by default and switch to full Developer ID signing and notarization automatically when Apple signing secrets are configured in GitHub Actions.
• Ad-hoc signed builds are still not notarized, so Gatekeeper may block them after download.
• If macOS blocks the app as "damaged" or untrusted, move Setmac.app to /Applications and run xattr -cr /Applications/Setmac.app, or Control-click the app and choose Open.
• If Gatekeeper still blocks the app, download the newest release artifact.

v1.3.0

Bug Fixes

• Build AppIcon.icns at bundle time and fail when the icon is missing
  (73fc725)

• Seed the icon grain so draw-icon.swift is reproducible
  (31a1e87)

• cli: Reinstall a cask brew lists when its app is missing
  (5209f88)

• cli: Trust check.path for brew casks so an interrupted install is not reported installed
  (5d7a8bb)

Chores

• Add editorconfig matching the repo's indentation
  (d55340d)

• Check the app icon in release-verify, including inside the DMG
  (caff881)

• Ignore secrets, agent worktrees and generated icons
  (8b0c3d0)

Continuous Integration

• Scan for secrets with gitleaks, add lefthook hooks and dependabot
  (d3611ec)

Documentation

• Add security policy, contributing guide, code of conduct and GitHub templates
  (8a1c9d1)

• Describe the icon pipeline
  (b081726)

• Describe the skipped event, cask path check, dry run and validator
  (0955206)

• Drop stale tool counts and home path, fold .cursorrules into CLAUDE.md
  (d769c81)

Features

• Add the sprout app icon
  (a199224)

• Show the app icon in the Dock under swift run and in About
  (222033b)

• cli: Enforce requires_admin with an up-front password check and a needs_admin skip
  (0819045)

• cli: Validate manifests with structured problems
  (e5a2c97)

Verification

• The release commit and the v1.3.0 tag are GPG-signed by the maintainer (git tag -v v1.3.0).
• Setmac.app now ships with its icon.

Install Notes

• This release is ad-hoc signed and not notarized, so Gatekeeper may block it after download.
• If macOS blocks the app as "damaged" or untrusted, move Setmac.app to /Applications and run xattr -cr /Applications/Setmac.app, or Control-click the app and choose Open.

v1.2.0

v1.2.0 (2026-10-23)

Bug Fixes

• Capture configs outside the app bundle in packaged builds (35f97e3)

• Find dev resources from the source location (af06140)

• Install Command Line Tools without the GUI dialog (7687dcf)

• Install Pier from its release DMG (0769513)

• Let app installs run to completion and add Cancel (bf02b5f)

• Let brew pkg casks reach the admin password (127bf6f)

• Let canary and beta releases build (acef73d)

• Make CLI installs truthful, streamed and cancellable (b1e65ed)

• Put Homebrew on PATH in the bundled zshrc (104483e)

Chores

• Build Info.plist from Resources and drop PyInstaller strip (9f1d3bc)

Continuous Integration

• Add an end to end install test on a stripped macOS runner (b8937f6)

Documentation

• Add revival plan and update CLI protocol notes (0a9ae39)

• Describe phase 2 and 3 changes (718097b)

Features

• Add mise, mas and macOS settings install methods (e9d745a)

• Export the manifest as a Brewfile (c849fc5)

• Manage runtimes with mise and add App Store apps and macOS settings (a994846)

• Retry failed tools and list manual setup steps (ca29ed8)

Testing

• Add CLI tests and run them in CI (325000c)

• Run the askpass helper test only on macOS (7c79125)

---

Detailed Changes: v1.1.1...v1.2.0

Install Notes

• Releases are ad-hoc signed by default and switch to full Developer ID signing and notarization automatically when Apple signing secrets are configured in GitHub Actions.
• Ad-hoc signed builds are still not notarized, so Gatekeeper may block them after download.
• If macOS blocks the app as "damaged" or untrusted, move Setmac.app to /Applications and run xattr -cr /Applications/Setmac.app, or Control-click the app and choose Open.
• If Gatekeeper still blocks the app, download the newest release artifact.

v1.1.1

v1.1.1 (2026-03-18)

Bug Fixes

• Keep Homebrew installer running as user (101298e)

Documentation

• Clarify non-root Homebrew auth flow (d5898f5)

---

Detailed Changes: v1.1.0...v1.1.1

Install Notes

• Releases are ad-hoc signed by default and switch to full Developer ID signing and notarization automatically when Apple signing secrets are configured in GitHub Actions.
• Ad-hoc signed builds are still not notarized, so Gatekeeper may block them after download.
• If macOS blocks the app as "damaged" or untrusted, move Setmac.app to /Applications and run xattr -cr /Applications/Setmac.app, or Control-click the app and choose Open.
• If Gatekeeper still blocks the app, download the newest release artifact.

v1.1.0

v1.1.0 (2026-03-18)

Documentation

• Add AI maintainer playbook (2726731)

• Add project skill for release operations (53656a4)

• Document admin prompt and config visibility UX (b6fd54a)

• Persist release policy for AI agents (5bd984d)

Features

• Add admin password prompt, config visibility, and tooltips (f26ce5e)

---

Detailed Changes: v1.0.2...v1.1.0

Install Notes

• Releases are ad-hoc signed by default and switch to full Developer ID signing and notarization automatically when Apple signing secrets are configured in GitHub Actions.
• Ad-hoc signed builds are still not notarized, so Gatekeeper may block them after download.
• If macOS blocks the app as "damaged" or untrusted, move Setmac.app to /Applications and run xattr -cr /Applications/Setmac.app, or Control-click the app and choose Open.
• If Gatekeeper still blocks the app, download the newest release artifact.

v1.0.2

v1.0.2 (2026-03-18)

Bug Fixes

• Include packaged resources needed at app launch (d0cbfde)

---

Detailed Changes: v1.0.1...v1.0.2

Install Notes

• Releases are ad-hoc signed by default and switch to full Developer ID signing and notarization automatically when Apple signing secrets are configured in GitHub Actions.
• Ad-hoc signed builds are still not notarized, so Gatekeeper may block them after download.
• If macOS blocks the app as "damaged" or untrusted, move Setmac.app to /Applications and run xattr -cr /Applications/Setmac.app, or Control-click the app and choose Open.
• If Gatekeeper still blocks the app, download the newest release artifact.

v1.0.1

v1.0.1 (2026-03-18)

Bug Fixes

• Move Apple secret checks into workflow steps (9061281)

• Sign release artifacts and support notarization (8802d8d)

Chores

• Add local release dry-run and verification recipes (3be2ef1)

Continuous Integration

• Split releases into canary beta and stable workflows (04b8405)

Documentation

• Document prerelease policy and Gatekeeper workaround (e4cd175)

---

Detailed Changes: v1.0.0...v1.0.1

Install Notes

• Releases are ad-hoc signed by default and switch to full Developer ID signing and notarization automatically when Apple signing secrets are configured in GitHub Actions.
• Ad-hoc signed builds are still not notarized, so Gatekeeper may block them after download.
• If macOS blocks the app as "damaged" or untrusted, move Setmac.app to /Applications and run xattr -cr /Applications/Setmac.app, or Control-click the app and choose Open.
• If Gatekeeper still blocks the app, download the newest release artifact.

v1.0.0

v1.0.0 (2026-03-18)

• Initial Release

Important

• This release predates the updated signing pipeline.
• If macOS blocks the app as "damaged" or untrusted, move Setmac.app to /Applications and run xattr -cr /Applications/Setmac.app, or Control-click the app and choose Open.
• Prefer downloading the newer v1.0.1 release instead, which includes updated install notes and improved release signing behavior.