Changelog

• 4fcb8b9 fix(release): remove the runner context from a job-level env (#500)

Features

• feat(sandbox): block host unix sockets and deny dangerous syscalls (#496)
• feat(analytics): emit pmg_malysis_query once per run on first successful analysis query (#494)
• feat(release): publish the Windows MSI through Chocolatey and winget (#489)
• feat(audit): report typed PMG session errors (#490)
• feat(release): ship a Windows MSI for the system install (#488)

Fixes

• fix(proxy): send CONNECT tunnels through the upstream proxy (#499)
• fix(sandbox): refuse network lockdown in sandbox exec with a clear error (#495)
• fix(doctor): find Python on Windows for the pip protection check (#493)
• fix: use host uid/gid in sandbox userns (#487)

Chores and docs

• chore(deps): update to Go 1.26, goproxy v1.9.1, and grpc v1.84.0 (#492)
• docs: correct unreadable managed config and Windows PATH claims (#486)

Changelog

• e554ac5 chore(deps): update to Go 1.26, goproxy v1.9.1, and grpc v1.84.0 (#492)
• 991074c feat(audit): report typed PMG session errors (#490)
• 78a8f2e fix: Use host uid gid in sandbox userns (#487)

Changelog

• fd8bf9c feat(release): ship a Windows MSI for the system install (#488)

Changelog

• 0d4f891 fix(release): write postflight_steps in the Homebrew cask (#482)

Changelog

• 67516f3 Add pmg sandbox exec for running programs in the sandbox (#445)
• ef526ac Expand package manager flag support and npm proxy override (#443)
• 7e2307f Trap path syscalls in seccomp to enforce deny list under broad writes (#444)
• bae3ab8 chore(goreleaser): drop deprecated homebrew cask url.verified (#447)
• 4df42bc chore: bump ptyx and carry CmdLine through internal/pty (#453)
• f6ecc7b ci(release): wait for the platform package before the smoke test (#441)
• e619f7f ci: run the PMG e2e suite on Windows, and document Windows support (#456)
• 952394a ci: run the full test suite on Windows (#449)
• 4ad319a docs(mdm): clarify Windows version and binary ownership requirements (#478)
• 5a10f0b docs(mdm): correct managed config and installer mode claims on Windows (#480)
• 70d3c7a docs(mdm): require explicit config for Windows cloud setup (#477)
• 3e57746 feat(mdm): add Windows deployment scripts (#467)
• f199cc0 feat(mdm): generate standalone Windows scripts (#471)
• f59230f feat(npm): add aube, aubr and aubx support (#442)
• 226ca73 feat: install .cmd shims and a user PATH entry on Windows (#452)
• a40a110 feat: one Windows launch contract for both execution modes (#455)
• fdd2292 feat: report Windows interception in doctor (#454)
• d29dbd2 feat: system install on Windows (#463)
• 15ba3b1 fix(deps): update ptyx for Windows cleanup (#481)
• 70bb1f5 fix(doctor): isolate pip protection checks on Windows (#484)
• 910b7fd fix(sandbox): fail closed when the Landlock supervisor cannot read memory (#448)
• f457251 fix(sandbox): let explain - read violations list --json output (#458)
• 409fe3f fix: Proxy handle PyPI registry url version components" (#461)
• ccabba6 fix: clean up the Windows setup and sandbox output (#469)
• 65005a1 fix: fold case in path comparison and match the PATH key on Windows (#450)
• 61ca0b9 fix: stop PMG hanging after an install in a Windows terminal (#459)
• 8b6d45f refactor: Set boundary for fsutil and winacl exports (#464)
• 0b89e86 refactor: move every per-OS directory into internal/platform (#465)
• 1ce024b refactor: one answer to "is this process privileged" in internal/platform (#466)
• c4676fe refactor: one shell-quote helper in platform (#473)
• 861178b refactor: one trust API in internal/platform, absorbing winacl (#468)
• a3fdbfb refactor: platform capabilities and remedies, delete runtime.GOOS from feature code (#474)
• 6745ce7 refactor: read the shell PATH from one place, move PATH scopes to platform (#472)
• e69f0d1 refactor: wake the Windows console read on cancel and join the reader on every platform (#460)

Changelog

• 4ad319a docs(mdm): clarify Windows version and binary ownership requirements (#478)
• 5a10f0b docs(mdm): correct managed config and installer mode claims on Windows (#480)
• 70d3c7a docs(mdm): require explicit config for Windows cloud setup (#477)
• 15ba3b1 fix(deps): update ptyx for Windows cleanup (#481)

Changelog

• a3fdbfb refactor: platform capabilities and remedies, delete runtime.GOOS from feature code (#474)

Features

• mdm: generate standalone Windows scripts (#471)
• mdm: add Windows deployment scripts (#467)

Fixes

• Clean up the Windows setup and sandbox output (#469)
• Proxy handles PyPI registry URL version components (#461)

Refactor

• One shell-quote helper in platform (#473)
• Read the shell PATH from one place, move PATH scopes to platform (#472)
• One trust API in internal/platform, absorbing winacl (#468)
• One answer to "is this process privileged" in internal/platform (#466)
• Move every per-OS directory into internal/platform (#465)
• Set boundary for fsutil and winacl exports (#464)

Changelog

• d29dbd2 feat: system install on Windows (#463)

Changelog

• 4df42bc chore: bump ptyx and carry CmdLine through internal/pty (#453)
• e619f7f ci: run the PMG e2e suite on Windows, and document Windows support (#456)
• 952394a ci: run the full test suite on Windows (#449)
• 226ca73 feat: install .cmd shims and a user PATH entry on Windows (#452)
• a40a110 feat: one Windows launch contract for both execution modes (#455)
• fdd2292 feat: report Windows interception in doctor (#454)
• f457251 fix(sandbox): let explain - read violations list --json output (#458)
• 65005a1 fix: fold case in path comparison and match the PATH key on Windows (#450)
• 61ca0b9 fix: stop PMG hanging after an install in a Windows terminal (#459)
• e69f0d1 refactor: wake the Windows console read on cancel and join the reader on every platform (#460)

Changelog

• 67516f3 Add pmg sandbox exec for running programs in the sandbox (#445)
• ef526ac Expand package manager flag support and npm proxy override (#443)
• 7e2307f Trap path syscalls in seccomp to enforce deny list under broad writes (#444)
• bae3ab8 chore(goreleaser): drop deprecated homebrew cask url.verified (#447)
• f6ecc7b ci(release): wait for the platform package before the smoke test (#441)
• f59230f feat(npm): add aube, aubr and aubx support (#442)
• 910b7fd fix(sandbox): fail closed when the Landlock supervisor cannot read memory (#448)

Changelog

• 8906875 ci(release): pin the goreleaser current tag to the triggering ref (#440)

Features

• feat(audit): deduplicate cloud host observations (#439)
• feat(sandbox): record env-var scrubs to the violation cache (#438)
• feat(audit): derive Kubernetes endpoint identity (#434)
• feat(mdm): add cloud sync mode to installers (#435)
• feat(mdm): add Linux support and split standalone generator (#428)

Fixes

• fix(cloud): log the check-in skip and success (#432)
• fix(acceptance): pin cloud endpoint id for hosted runners (#433)

Maintenance

• test(proxye2e): fix flaky Cargo byte-identical index test (#427)
• chore(ci): remove the need-analysis label step from issue triage (#430)
• Remove star history from readme (#431)

Changelog

• 8027714 feat(audit): deduplicate cloud host observations (#439)

Changelog

• 52117e2 Remove star history from readme (#431)
• 565f369 chore(ci): remove the need-analysis label step from issue triage (#430)
• 939c872 feat(audit): derive Kubernetes endpoint identity (#434)
• fdd2489 feat(mdm): add Linux support and split standalone generator (#428)
• bd97d32 feat(mdm): add cloud sync mode to installers (#435)
• c3769e0 feat(sandbox): record env-var scrubs to the violation cache (#438)
• 72a2ebf fix(acceptance): pin cloud endpoint id for hosted runners (#433)
• a85909d fix(cloud): log the check-in skip and success (#432)
• 9a5acc1 test(proxye2e): fix flaky Cargo byte-identical index test (#427)

Changelog

• e51f674 Post-merge hardening and cleanup for custom proxy registries (#408) (#422)
• 57671e1 Support fallback package managers in protection checks (#418)
• 92fd0ec ci: Add support for edge release (#420)
• 62e3ae5 docs(mdm): add JumpCloud deployment steps for macOS scripts (#413)
• 4563fc8 feat(acceptance): add real-binary acceptance suite with guarantee catalog and report (#423)
• e130296 feat(cloud): send endpoint check-in on empty sync (#412)
• b44cd62 feat(cooldown): explain install failures caused by withheld versions (#400)
• 4dff102 feat(mdm): add standalone macOS deployment scripts (#419)
• 0c7a8fc feat(proxy): support custom npm and PyPI registries (#408)
• 4c2f01f feat(sandbox): surface bubblewrap denials as sandbox violations (#397)
• 669e3f2 feat(setup): install shims and aliases under XDG directories (#406)
• 267e01a feat: add experimental Cargo/crates.io support (#421)
• cb27717 fix(mdm): trust safedep/tap pmg cask before brew operations (#425)
• e579637 fix: Avoid reading stale memory fd in seccomp notify handler (#404)
• 54f5d48 fix: Landlock sandbox enforcement order (#415)
• 26e5cd7 fix: Maintain parity between status info command (#414)
• b848f8b test(acceptance): expand malware-block coverage (incl. PyPI) and add protection controls (#424)
• 64d9f14 test(mdm): add E2E harness for multifile scripts and non-macOS guard (#426)

Changelog

• e51f674 Post-merge hardening and cleanup for custom proxy registries (#408) (#422)
• 57671e1 Support fallback package managers in protection checks (#418)
• 92fd0ec ci: Add support for edge release (#420)
• 62e3ae5 docs(mdm): add JumpCloud deployment steps for macOS scripts (#413)
• 4563fc8 feat(acceptance): add real-binary acceptance suite with guarantee catalog and report (#423)
• e130296 feat(cloud): send endpoint check-in on empty sync (#412)
• b44cd62 feat(cooldown): explain install failures caused by withheld versions (#400)
• 4dff102 feat(mdm): add standalone macOS deployment scripts (#419)
• 0c7a8fc feat(proxy): support custom npm and PyPI registries (#408)
• 4c2f01f feat(sandbox): surface bubblewrap denials as sandbox violations (#397)
• 669e3f2 feat(setup): install shims and aliases under XDG directories (#406)
• e579637 fix: Avoid reading stale memory fd in seccomp notify handler (#404)
• 54f5d48 fix: Landlock sandbox enforcement order (#415)
• 26e5cd7 fix: Maintain parity between status info command (#414)
• b848f8b test(acceptance): expand malware-block coverage (incl. PyPI) and add protection controls (#424)

Changelog

• e3d23f8 feat(cloud): derive default endpoint identity from CI context (#399)
• 75f5cca feat: Add Network Policy Enforcement for Linux Landlock (#401)
• be0a93f feat: Add machine-readable JSON output to setup info and doctor (#403)

Changelog

• 94781d6 Remove guard mode: proxy interception is now the only flow (#386)
• bafd3c0 Update README to include GHCR installation detail (#383)
• ee684a2 feat(sandbox): presets — additive workload allowance bundles (#387)
• 47dd859 feat(sandbox): report landlock seccomp denials via pmg sandbox violations (#389)
• 695a1d7 feat: Add support for sandbox edit command (#385)
• 3031665 fix(cloud): actionable errors when sync credentials are missing or rejected (#388)
• d9240ee fix(container): cut image vulnerabilities with x dep bumps and base image refresh (#394)

Changelog

• 6cd8851 fix(container): cross-compile per target platform so linux/arm64 ships an arm64 binary (#382)

Changelog

• d6709e2 feat(audit): record cloud events without credentials via EventEmitterClient (#381)

Changelog

• dc0e320 feat: Linux system-wide setup (pmg setup install --system) (#377)
• 46803f8 fix(doctor): stop npm protection passing when the real package manager is absent (#378)

Changelog

• e6b5157 ci: add macOS test job (#366)
• 5131c3f feat(sandbox): ExecutionContext plumbing and fail-closed lockdown contract (#371)
• 3ac83a4 feat(sandbox): Seatbelt lockdown translation — deny-all outbound, allow loopback proxy port (#372)
• ed61481 feat(sandbox): actionable violation message for lockdown network denials (#373)
• 22d6eab feat(sandbox): add network_via_proxy_only and allow_direct_dns policy fields (#370)
• d3e656e feat(sandbox): enable network_via_proxy_only for the Go ecosystem profile (#375)
• 2d938ea feat: advisory message appended to block output (#362)
• 2f1c348 fix(cloud): surface real backend errors from pmg cloud sync (#365)
• 31e51b1 refactor: move proxy block message rendering to presentation layer (#364)
• 5e06702 test(sandbox): darwin end-to-end lockdown enforcement test (#374)

Changelog

• c601e17 fix: Sandbox profile for Go ecosystem (#361)

Changelog

• b194739 Add experimental Go module proxy support (#358)
• 648adcb feat: add uvx (uv tool run) package executor (#357)
• 0296514 fix: fail fast when package manager is not installed (#360)

Changelog

• f9ca26d Add Trendshift badge to README (#355)
• 0fb6faa add runner hostname to CI invocation context (#356)
• 2a7ecdb ci: add E2E for pmg action server-mode (#354)