Skip to content

Releases: strongdm/leash

v1.1.7

11 Mar 23:47

Choose a tag to compare

Changelog

  • 5bf1c64 network: fall back to blanket port block when cgroup isolation unavailable

v1.1.6

12 Feb 20:29

Choose a tag to compare

Changelog

  • 0f4aa83 runner: simplify relabel mode check
  • 224b737 runner: relabel internal mounts on SELinux hosts
  • 61c46b2 fix(security): block target container from reaching leashd control plane API
  • 7e6f334 chore(.gitignore): add test files to ignore list

v1.1.5

12 Jan 17:41

Choose a tag to compare

Changelog

  • 56b8930 Add open env default and dev verbosity toggles
  • 9fcefb5 Normalize TERM for bubbletea wizard
  • ad22cf6 Stabilize opencode host dir test env
  • b19c001 Fix opencode host dir resolution
  • 8562f00 Update Docker registry refs to AWS ECR 🚚
  • 5f02c9e Add missing base image to Dockerfile example 🧱
  • 6e9a562 Fix custom Docker image documentation 📚
  • be8f554 feat(opencode): mount XDG config and data directories
  • 1a733f4 Add ripgrep to coder image

v1.1.4

17 Dec 05:11

Choose a tag to compare

Changelog

  • 0562c25 Stabilize opencode host dir test env
  • 6960ea1 Fix opencode host dir resolution
  • be8f554 feat(opencode): mount XDG config and data directories
  • 1a733f4 Add ripgrep to coder image

v1.1.3

05 Dec 23:39

Choose a tag to compare

Changelog

  • f1a7e8a fix(runner): serialize mounts_test with mount_state_test
  • e8214de fix(rocky-test): add `--allowerasing' to dnf install in Dockerfile
  • 8e95458 test(e2e): update file path in baseline policy tests
  • 3b5743e build(dockerfile): install Node.js 20 for Next.js 16 compatibility
  • d74969e build(web): update config for Next.js and React 19.2
  • d5af439 sec(CVE-2025-66478): upgrade deps Next.js and React to latest versions
  • d55c802 refactor(makefile): improve help target output formatting

v1.1.2

25 Nov 19:10

Choose a tag to compare

Changelog

  • 0533921 Handle case-insensitive 'no such object' errors from docker

v1.1.1

21 Nov 20:40

Choose a tag to compare

Changelog

  • 4f4390a feat(tui): improve project path display in wizard
  • 50975ab ci(coder-cli-releases-watchdog): watchdog artifact download bugfix
  • 3199254 ci(coder-cli-releases-watchdog): build and publish multi-arch coder docker images
  • da44da5 ci(coder-cli-releases-watchdog): simplify timestamp comparison script
  • 4a772ca ci(coder-cli-releases-watchdog): fix artifact download error handling
  • 9b6fda0 ci(coder-cli-releases-watchdog): simplify timestamp comparison logic
  • 20bd2d7 feat(ci): add GitHub Actions workflow for coder CLI releases auto-build
  • 2e24cc7 test(flakes): ensure runtime env cleanup removes base dir
  • 1326ada docs: consolidate npm release management documentation
  • f751229 build(consistency): Add and wire-in "test-ui" alias for test-web
  • ae1c6ac build: Makefile cleanup - precommit/fmt dependency was backwards
  • 6804cd3 feat: zsh CLI prompt support
  • 368fd77 docs(boot): clarify bootstrap orchestration process
  • 3d26d63 fix(prompt): export bash prompt function compatibly
  • ca3ede0 build: Improve default target (build-ui already falls back to docker when npm is absent)
  • 5fb76fe fix(websocket): prevent hub panic on closed client send
  • b4019de test(fix-flakes): use temporary directory for test logs
  • 454abe4 feat(security): separate CA cert and key into public/private mounts

v1.1.0

27 Oct 19:43

Choose a tag to compare

Changelog

  • 3ea6576 build(mac-leash): bump version to 1.1.0
  • 0f27861 build(docker): add configurable base image support for builds
  • 4d2b7bc ci: migrate release workflow from GHCR to AWS ECR Public
  • e077d32 Add hashed workspace and session IDs to telemetry
  • 91439b9 style: update branding color scheme across UI and CLI
  • e0185fa build: refactor UI build process and add clean targets
  • 2bb6553 feat(network): IPv6 interception and nftables support
  • 090999d build: restore lightweight test variants in Dockerfile for e2e integration tests
  • dfaa646 Cedar: enforce canonical Action:: heads + Host/File/Dir resources\n\n- Server API: generate Action::"FileOpen"/"FileOpenReadWrite"/"ProcessExec"/"NetworkConnect" (no Proc/Fs/Net) and Host::/File::/Dir:: resources.\n- Transpiler: accept only Action:: heads; drop legacy Fs::/Proc::/Net:: and Http::ApplyRewrite fallback.\n- Linter: error on non-canonical action heads (unsupported_action_syntax).\n- Suggestions: emit Host:: and Action::"HttpRewrite" consistently.\n- Tests/docs: update all examples and assertions to canonical forms.\n\nAll packages tested: go test ./... passes locally.
  • cb938bf feat(ports): adopt docker-ish -p/--publish and -P with auto-bump; move policy to long-only
  • 5066912 refactor(test): remove t.Parallel() from environment-sensitive tests
  • 82d28d4 build: introduce base images for faster builds
  • feabf5e feat(ui): implement Cedar policy autocomplete in Monaco editor
  • e71d301 fix: .gitignore dev artifact correction.
  • fc540c4 feat(runner): auto-detect dev docker images
  • ee40608 Add Statsig telemetry client
  • e1f0fae docs: update macOS notes in README

v1.0.0

23 Oct 02:53

Choose a tag to compare

Changelog

  • a9950c0 build: publish docker images to ECR public
  • 558bcec feat(release): add npm package build and publish workflow
  • e9cba14 chore(mac-leash): set build number to YYYYMMDD.N
  • 45b2acd chore(mac-leash): bump version to 1.0.0
  • 2fd482f test(flake): fix flakey test by relocating mutex unlocks to t.Cleanup fn
  • 17c2d84 docs(readme): add note about quarantining macOS release
  • f867db7 Update CEDAR.md with enforcement mechanism warning
  • 858d352 feat(darwin): add websocket health probe
  • 9eef058 refactor(proxy): simplify logHTTPRequest parameters
  • f98c8c5 fix(mcp): show decision=denied when MCP tool calls are blocked by policy