v0.18.0

Changelog

• 9b4f024 chore(deps): bump go deps
• f3d74b8 ci(github-action)!: Update actions/setup-go action to v7.0.0 (#108)
• f30bf29 ci(github-action)!: Update actions/setup-go action to v7.0.0 (#115)
• 7dc2888 ci(github-action): update actions/checkout digest to 3d3c42e (#116)
• 85c5273 ci(github-action): update docker/build-push-action digest to 53b7df9 (#93)
• bcf3917 ci(github-action): update docker/login-action digest to af1e73f (#99)
• 6e597f9 ci(github-action): update docker/login-action digest to c99871d (#95)
• 143a7fe ci(github-action): update docker/metadata-action digest to dc80280 (#96)
• d339aad ci(github-action): update docker/setup-buildx-action digest to bb05f3f (#97)
• fde93bf ci(github-action): update docker/setup-qemu-action digest to 96fe6ef (#94)
• cc79e93 ci(github-action): update goreleaser/goreleaser-action digest to f06c13b (#92)
• f0109f1 ci(github-action): update jdx/mise-action digest to dad1bfd (#110)
• acfd814 ci(github-action): update jdx/mise-action digest to dad1bfd (#114)
• b681f79 docs/changelog: fix ordering
• 1090aa3 docs/changelog: make less verbose and restructure
• cb8ffdd docs/changelog: update
• 599d96e feat(deps): update goreleaser to 2.17.0 (#100)
• c7ae065 feat(deps): update module golang.org/x/sync to v0.22.0 (#105)
• 1d33b3d feat(deps): update module golang.org/x/term to v0.45.0 (#107)
• cf6b896 feat(deps): update module google.golang.org/grpc to v1.82.0 (#103)
• e17e5e4 feat(deps): update passt to 2026_07_16.090d739 (#109)
• 744d498 feat(deps): update task to 3.52.0 (#98)
• 1a6330d feat(egress): make the proxy a real boundary on bwrap, fail-closed
• 36b5290 feat(herdr): capture and restore agent sessions from inside the sandbox
• 88314fd feat(isolator/bwrap): add resource limits for memory, CPU, and process count
• 772b678 feat(sandboxing): add support of krun isolation backend (#112)
• c4e15dc feat(tools): add herdr tool (#113)
• 80f8905 feat(tools): add rtk tool
• 255303b feat(tools/shellwrapper): add wrappers for copilot and opencode
• dc1afbd feat(tools/shelwrapper): rework activation of shell wrappers
• c9af103 feat: add krun doctor probes for system pasta and rootless id mapping
• 08bc942 feat: fail fast on non-Apple-Silicon macOS in krun preflight
• ef6f98f fix(config): drop obsolete keys from config init template
• a649baf fix(deps): update go to 1.26.5 (#104)
• 221f601 fix(deps): update neovim to 0.12.4 (#101)
• d12958a fix(deps): update pipx:zensical to 0.0.47 (#102)
• c6e3a81 fix(deps): update pipx:zensical to 0.0.50 (#106)
• f00d372 fix(deps): update pipx:zensical to 0.0.51 (#111)
• e7f1db6 fix(deps): update pre-commit to 4.6.1 (#117)
• 00b21a3 fix(docker/krun): properly use ro bind instead of tmpoverlay with docker on linux
• 7df5f6d fix(herdrproxy): accept the shell-quoted script path from the launcher
• bdd6906 fix: address code review findings
• c19eb50 fix: address second-round review findings
• 909f7db fix: change location for host-side overlays file to avoid overwriting it unexpectedly
• f304ead fix: correct doctor log-error verdict and hidden-directory remediation
• a05eee3 fix: correct hidden-mode docs and scope the filesystem boundary claim
• c2aa650 fix: correct stale krun mise comment and firewall wording in docs and comments
• 1ae97a8 fix: distinguish advisory hints from failures in doctor output
• f308b08 fix: pin goproxy to v1.8.4 to avoid MITM header-buffering regression
• 955fe8b fix: store separate socket proxies for socket based tooling
• b0b8a03 refactor: address code smell review findings