v0.1.14

What's Changed

• fetch: expose final URL after redirects by @yearth in #34

Full Changelog: v0.1.13...v0.1.14

v0.1.13

What's Changed

• ci: validate the flake with real nix after each release bump by @yusukebe in #32
• parse: support authenticated page extraction by @yearth in #33

Full Changelog: v0.1.12...v0.1.13

v0.1.12

What's Changed

• fetch: -o enforces --max-bytes and fails cleanly when the output path is unwritable by @kiakiraki in #28
• feat: add Nix flake wrapping the prebuilt release binary by @levonk in #27
• fix: reset global regex state between rows by @yearth in #29
• fix: preserve binary HTTP body data by @ShiroKSH in #30
• release: zero-touch flake bump from release CI + nix on the site by @yusukebe in #31

New Contributors

• @levonk made their first contribution in #27
• @yearth made their first contribution in #29
• @ShiroKSH made their first contribution in #30

Full Changelog: v0.1.11...v0.1.12

v0.1.11

What's Changed

• fetch: -f with -o exits 22 and never saves the error document by @kiakiraki in #22
• chore: bun 1.4.0 — windows-1251 canary fired, expectation flipped by @yusukebe in #24
• fetch: -o downloads via temp file + atomic rename (truncation bug) by @yusukebe in #23
• ci: revert bun pin to 1.3.14 (1.4.0 assets 404) — runtime-adaptive charset test by @yusukebe in #25

Full Changelog: v0.1.10...v0.1.11

v0.1.10

What's Changed

• fetch: -d @file reads the file, curl-style, instead of sending the literal string by @kiakiraki in #21

Full Changelog: v0.1.9...v0.1.10

v0.1.9

What's Changed

• io: decode responses by their declared charset instead of always UTF-8 by @kiakiraki in #20

Full Changelog: v0.1.8...v0.1.9

v0.1.8

What's Changed

• readme: drop toolkit-era trivia from Built with by @yusukebe in #18
• parse: bad selector — one-line error instead of a stack trace by @kiakiraki in #19

Full Changelog: v0.1.7...v0.1.8

v0.1.7

What's Changed

• fetch: -f exits 22 on HTTP errors (curl parity), report still printed by @yusukebe in #14
• fetch: --body — body-only stdout for classic Unix pipes by @yusukebe in #17
• docs: fetch mode never caches — clarify cache scope and --fresh vs --no-cache by @yusukebe in #16

Full Changelog: v0.1.6...v0.1.7

v0.1.6

What's Changed

• fix(md): href stripped — links rendered as plain text instead of text by @kiakiraki in #3
• security: stream response bodies with size cap and read deadline by @yusukebe in #4
• security: installer verifies SHA-256 against the pinned release by @yusukebe in #6
• security: untrusted-content rules for agents (SKILL.md + agent-context) by @yusukebe in #7
• security: strip terminal escape sequences from extracted output by @yusukebe in #8
• security: pin GitHub Actions to commit SHAs, least-privilege workflow permissions by @yusukebe in #9
• security: harden the fetch cache (0700/0600, atomic writes, --no-cache, no-store) by @yusukebe in #5
• security: website CSP (hash-based, no unsafe-inline) + standard security headers by @yusukebe in #10
• chore: SECURITY.md + drop unused js-yaml dependency by @yusukebe in #11
• site: PNG favicon + apple-touch-icon (Safari fallback) by @yusukebe in #13

New Contributors

• @kiakiraki made their first contribution in #3
• @yusukebe made their first contribution in #4

Full Changelog: v0.1.5...v0.1.6

v0.1.5

Full Changelog: v0.1.4...v0.1.5