nono Files

What's Changed

• feat(cli): support --extends on nono proxy by @Frankie-Xu in https://github.com/nolabs-ai/nono/pull/1686
• feat(cli): show resolved command_policies in profile show by @Frankie-Xu in https://github.com/nolabs-ai/nono/pull/1685
• team-q's in README by @lukehinds in https://github.com/nolabs-ai/nono/pull/1697
• Fix name README by @lukehinds in https://github.com/nolabs-ai/nono/pull/1698
• fix: broken quote formatting in README by @SequeI in https://github.com/nolabs-ai/nono/pull/1707
• fix(proxy): honor host:port deny entries under wildcard allow by @kipz in https://github.com/nolabs-ai/nono/pull/1709
• fix(proxy): decode Basic auth for basic_auth phantom validation by @Frankie-Xu in https://github.com/nolabs-ai/nono/pull/1683
• feat(examples): add initial set of tool sandbox examples by @lukehinds in https://github.com/nolabs-ai/nono/pull/1696
• fix(proxy): skip network audit buffer when --no-audit is set by @Frankie-Xu in https://github.com/nolabs-ai/nono/pull/1682
• fix(sandbox): grant Refer on command_policies outer exec gate by @SebTardif in https://github.com/nolabs-ai/nono/pull/1722
• chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 by @dependabot[bot] in https://github.com/nolabs-ai/nono/pull/1730
• chore(deps): bump similar from 3.1.1 to 3.2.0 by @dependabot[bot] in https://github.com/nolabs-ai/nono/pull/1729
• chore(deps): bump thiserror from 2.0.18 to 2.0.20 by @dependabot[bot] in https://github.com/nolabs-ai/nono/pull/1725
• chore(deps): bump base64 from 0.23.0 to 0.23.1 by @dependabot[bot] in https://github.com/nolabs-ai/nono/pull/1727
• chore(deps): bump tokio-tungstenite from 0.28.0 to 0.30.0 by @dependabot[bot] in https://github.com/nolabs-ai/nono/pull/1728
• chore(deps): bump aws-lc-rs from 1.17.3 to 1.18.0 by @dependabot[bot] in https://github.com/nolabs-ai/nono/pull/1726
• docs(security): security model clarification by @lukehinds in https://github.com/nolabs-ai/nono/pull/1734
• fix(cli): make profile promote work for existing profiles by @Frankie-Xu in https://github.com/nolabs-ai/nono/pull/1703
• fix(cli): warn when a draft profile cannot resolve its extends chain by @Frankie-Xu in https://github.com/nolabs-ai/nono/pull/1702
• feat(broker-path): sanitize PATH for host-side credential and URL brokers by @SequeI in https://github.com/nolabs-ai/nono/pull/1733
• fix(proxy): add redeem_phantoms for by-value nonce redemption by @kipz in https://github.com/nolabs-ai/nono/pull/1469
• fix(policy): make unmatched deny-glob warning platform-accurate by @SequeI in https://github.com/nolabs-ai/nono/pull/1738
• feat(profile,proxy): glob patterns for env var and hostname allow/deny lists by @SequeI in https://github.com/nolabs-ai/nono/pull/1692
• fix(credentials): configurable phantom format for prefix-sniffing clients by @kipz in https://github.com/nolabs-ai/nono/pull/1489
• Update SECURITY.md to clarify security model by @lukehinds in https://github.com/nolabs-ai/nono/pull/1747
• docs: add NEP process for design proposals by @SequeI in https://github.com/nolabs-ai/nono/pull/1743
• fix(cli): honor inline custom credential routes in --config manifests by @Frankie-Xu in https://github.com/nolabs-ai/nono/pull/1705
• fix(hooks): expand $WORKDIR/$HOME/etc. in session hook script paths by @SequeI in https://github.com/nolabs-ai/nono/pull/1749
• fix(cli): hint at CAP_SYS_PTRACE on pidfd_getfd EPERM, fix doubled error prefix by @SequeI in https://github.com/nolabs-ai/nono/pull/1750
• fix(why): evaluate network.deny_domain in nono why host queries by @SequeI in https://github.com/nolabs-ai/nono/pull/1751
• chore(deps): bump ureq from 3.3.0 to 3.4.0 by @dependabot[bot] in https://github.com/nolabs-ai/nono/pull/1754
• chore(deps): bump rcgen from 0.14.8 to 0.14.9 by @dependabot[bot] in https://github.com/nolabs-ai/nono/pull/1752
• chore(deps): bump which from 8.0.5 to 8.0.6 by @dependabot[bot] in https://github.com/nolabs-ai/nono/pull/1756
• chore(deps): bump hyper from 1.11.0 to 1.11.1 by @dependabot[bot] in https://github.com/nolabs-ai/nono/pull/1755
• chore(deps): bump globset from 0.4.19 to 0.4.20 by @dependabot[bot] in https://github.com/nolabs-ai/nono/pull/1753
• fix(sandbox): expand env vars anywhere in local-socket path, not just prefix by @YewFence in https://github.com/nolabs-ai/nono/pull/1762
• fix(sandbox): use capturing group in ** deny-glob Seatbelt regex by @SequeI in https://github.com/nolabs-ai/nono/pull/1764
• chore: release v0.75.0 by @SequeI in https://github.com/nolabs-ai/nono/pull/1765

New Contributors

• @Frankie-Xu made their first contribution in https://github.com/nolabs-ai/nono/pull/1686
• @SebTardif made their first contribution in https://github.com/nolabs-ai/nono/pull/1722

Full Changelog: https://github.com/nolabs-ai/nono/compare/v0.74.0...v0.75.0