Skip to content

v2.0.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Oct 04:41
v2.0.0
This tag was signed with the committer’s verified signature.
v0id-user فهد
GPG key ID: 6E0AE3B3A5DE1421
Verified
Learn about vigilant mode.
e7f2ba7
This commit was signed with the committer’s verified signature.
v0id-user فهد
GPG key ID: 6E0AE3B3A5DE1421
Verified
Learn about vigilant mode.

v2.0.0 (2026-10-24)

Bug Fixes

  • Split CLI output on newline bytes so a split character never drops a line (dff0ccf)

  • Stop shipping the maintainer's old dotfiles in the app and CLI (ecae76b)

Chores

  • Add classify-tools.py to sort manifest tools into catalog or review (8dee9e7)

  • Remove the maintainer's old dotfiles from the public repo (37adfa0)

Continuous Integration

  • Delete Xcode on the end to end runner to free disk (44b355a)

  • Let gitleaks skip the scanner's test fixtures (0fcfb36)

  • Make the CI and e2e workflows read-only (8bcc68e)

  • Pin the CI and e2e workflow actions to commit SHAs (eb84044)

  • Push release commits with a deploy key instead of the Actions token (0b864b9)

  • Run the end to end test on starter profiles, weekly and for releases (14f5b03)

  • Sign release commits and tags with a CI-only GPG subkey (5f02b78)

Documentation

  • Describe git profiles, review and trust (3fdc825)

  • Describe opt-in dotfiles, backups, capture and the scanner (b33ea47)

  • Describe profile export (ae9d75a)

  • Describe profiles, starters and the neutral catalog (5496593)

  • Describe signed CI releases and the release environment (a391928)

  • Describe the app's profile flow and the new events (efc435a)

  • Describe the end to end workflow (1a9f4c2)

  • Describe the protocol fixture, data-driven categories and load errors (5331b84)

  • List the catalog's new tools (003a45c)

  • Say plainly what the Actions bypass on main skips (5f1391d)

Features

  • Add DevOps CLIs, apps, Rust and editor extensions (684a859)

  • Install the tools a profile picks from a neutral catalog (0c8a0fb)

  • Profile screen, review before trust, first-run choice and per-file dotfiles in the app (bd69c14)

  • Show the active profile's tools in the app (e1e8af2)

  • Show why the manifest failed to load and keep tools in undefined categories (d04c97e)

  • Use pnpm, CocoaPods, Watchman, kubectl, Helm and yq in the starters (fc3d609)

  • cli: Add the JSON events the app needs for profiles and dotfiles (0463e5d)

  • cli: Export an old all-in-one setup into a private profile folder (35c2d9e)

  • cli: Load profiles from git and run them only after review and trust (cc0861e)

  • cli: Make dotfiles opt-in per file, with a diff, backups and restore (b230639)

  • cli: Scan dotfiles for secrets and personal data (fa9e455)

Refactoring

  • Keep the e2e branch's personal tools out of the catalog (edc7066)

Testing

  • Scan all of Resources for personal data now that no dotfiles ship (7b0a0c6)

  • cli: Pin every JSON-line event with a golden fixture (9c690ec)

Detailed Changes: v1.3.0...v2.0.0

Install Notes

  • The release commit and tag are GPG-signed (git tag -v <tag>).
  • Releases are ad-hoc signed by default and switch to full Developer ID signing and notarization automatically when Apple signing secrets are configured in GitHub Actions.
  • Ad-hoc signed builds are still not notarized, so Gatekeeper may block them after download.
  • If macOS blocks the app as "damaged" or untrusted, move Setmac.app to /Applications and run xattr -cr /Applications/Setmac.app, or Control-click the app and choose Open.
  • If Gatekeeper still blocks the app, download the newest release artifact.
Assets 4
Loading