v0.2.0

What's Changed

• chore(deps): update dependencies, clearing bytes integer-overflow advisory by @vietanhdev in #14
• security(sync): remove hardcoded OAuth secret, restrict token file to 0600 by @vietanhdev in #15
• security(performance): validate CPU governor before it reaches a root shell by @vietanhdev in #16
• security(mcp): reject wildcard bind, loopback only by @vietanhdev in #17
• test(fan): prove the fan control and privileged helper flows by @vietanhdev in #18
• Revise README.md installation instructions by @M4rk3h in #11
• docs: repair line continuations in dependency install commands by @vietanhdev in #19
• fix(battery): threshold write ordering (builds on #9 by @MatiM72737) by @vietanhdev in #20
• remove unused status indicator (from #5 by @neoapps-dev) by @vietanhdev in #21
• fix(fan): never leave the fan under manual control without a supervisor by @vietanhdev in #22
• fix(fan): detect missing fan_control=1 instead of blaming permissions by @vietanhdev in #23
• security(polkit): stop redefining the shared policykit.exec action by @vietanhdev in #24
• feat: environment-aware setup guidance, with real-distro CI coverage by @vietanhdev in #25
• test: launch-test real packages in containers + download page by @vietanhdev in #26
• security(mcp): migrate to rmcp 2 and enforce Host and Origin validation by @vietanhdev in #29
• security(deps): upgrade oauth2 to 5.0 and reqwest to 0.12 by @vietanhdev in #30
• security(apt): sign the published APT repository by @vietanhdev in #35
• fix(mcp): the serve path and bind failures were both invisible by @vietanhdev in #37
• fix(fan-curve): keep the firmware watchdog alive at a steady temperature by @vietanhdev in #36
• fix: three defects around offline CPUs and a blocked UI thread by @vietanhdev in #38
• docs(apt): say plainly what [trusted=yes] gives up by @vietanhdev in #39
• feat(packaging): publish workflows for AUR, COPR and the PPA by @vietanhdev in #33
• security(sync): Google OAuth as a public client with PKCE, no secret by @vietanhdev in #32
• fix(ui): the permission dialog's primary action was below the fold by @vietanhdev in #34
• docs(apt): signing key is configured; show the verified install path by @vietanhdev in #41
• refactor(ui) + security: view lifecycle, one implementation per control, and the pkexec/XSS fixes by @vietanhdev in #40
• fix(ci): main runs were being cancelled, recording nothing by @vietanhdev in #42
• feat(ci): build, test and package for aarch64 as well as x86_64 by @vietanhdev in #43
• fix(ci): piping into grep -q is broken under pipefail by @vietanhdev in #44

New Contributors

• @vietanhdev made their first contribution in #14
• @M4rk3h made their first contribution in #11

Full Changelog: v0.1.10...v0.2.0