Changelog

• 706fce1 add docker attach terminal support to the edge agent
• 74e158c docker-compose=5.5.0-r5
• cdf530e feat(config): support TOKEN_FILE for Docker and Kubernetes secrets (#67)

Changelog

• a6b5e24 Remove dead exec tunnel implementation
• 274e16a Set a token in the standard-mode install config
• 59406fc build: align docker-compose pin with dockhand (5.1.4-r5 -> 5.5.0-r0)
• 668bc8f build: bump docker-compose to 5.5.0-r2 and add git to the runtime images
• 09a4ccf build: use ln -sf for the dev image compose-plugin symlink
• d0e8d62 feat(compose): emit output lines as they arrive and fall back to stderr
• 5654051 feat(edge): stream compose output lines when the caller asks for them
• 0a55c1c fix(compose): teeLines bufio.Reader avoids >1MB-line deadlock (review of #99)
• 9967fa8 fix(security): restrict /etc/hawser/config to 0600 (#82)
• 773ad7a fix: explain compose failures caused by our own timeout, not the compose run itself
• a07b6c7 fix: give compose operations their own timeout instead of RequestTimeout
• 79cb8f1 test(compose): cover build output landing on stdout (counter-test 0)
• 50659bb test(compose): cover teeLines' close() flushing the final unterminated line
• b8ff428 test(compose): gate the docker-dependent build test behind an env switch

• set TOKEN (recommended — and add it to the matching environment in Dockhand), or
• bind locally with BIND_ADDRESS=127.0.0.1, or
• set ALLOW_INSECURE_NO_AUTH=true to keep the previous behavior.

Edge-mode agents and agents that already use a token are unaffected.

Changelog

• 3e54965 Refuse to start standard mode on a public bind without a token

Changelog

• 82a86a1 feat: hash-verified file deletion sync and stack dir cleanup (#966, #1162)
• 0997f71 fix: log client disconnect in events stream at debug level
• f38f847 fix: stack removal deletes only files explicitly listed by dockhand
• 2c1675f fix: use ln -sf so newer docker-compose packages work

Changelog

• 3cbc419 fix: use clean env for compose subprocess to prevent inherited .env override (#1113)

Changelog

• Bump Go to 1.26 in go.mod, CI workflows, and Dockerfile.dev
• Bump docker-compose to 5.1.4-r0 in Dockerfile
• Expand token security documentation with generation examples (#60)
• Remove unused edge /info endpoint

Changelog

• 3d997fa fix: treat /wait as streaming to prevent 30s timeout on scans

Changelog

• a905406 feat: add --no-cache support for compose builds (#880)
• 00d0e96 fix: add buildx plugin and pin compose to 5.1.3 (#941)

Changelog

• 79f6dd9 fix: pass base .env file as --env-file for Hawser stack deployments

Changelog

• bbef6ac Create SECURITY.md
• 3287ae2 Update SECURITY.md
• 13ba15b feat: add --pull policy support to compose up command

Changelog

• b904544 Revert "fix: increase waitForWelcome timeout from 10s to 30s to prevent reconnect storms under load"
• 926346f fix: add reconnect jitter and configurable welcome timeout (#741)
• b28357b fix: increase waitForWelcome timeout from 10s to 30s to prevent reconnect storms under load

Changelog

• 6b520ab fix: close Docker socket when client disconnects from events stream
• b261042 fix: correct misleading CLI flags in help text and install script
• fa9ce5a security: use validated absolute paths in compose file operations