1.11.3 (2026-09-10)

Bug Fixes

• auth: classify every reading of an encoded request path (#320) (665e594)
• aws: authorize a tied REST classification on the union of its candidates (#317) (25582fb)
• aws: rank REST classifier candidates by Smithy path specificity (#319) (f09f807)

Dependencies

• bump github.com/valyala/fasthttp from 1.73.0 to 1.74.0 (a653e70)

1.11.2 (2026-09-09)

Dependencies

• bump github.com/goreleaser/fileglob from 1.4.0 to 1.4.1 (a94ecb6)
• bump github.com/goreleaser/goreleaser/v2 from 2.18.0 to 2.18.1 (a94ecb6)

1.11.1 (2026-09-09)

Dependencies

• bump dev.gaijin.team/go/exhaustruct/v5 from 5.0.3 to 5.2.0 (724e29a)
• bump github.com/aws/aws-sdk-go-v2 from 1.45.1 to 1.46.0 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/config from 1.33.2 to 1.33.3 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/credentials from 1.20.2 to 1.20.3 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.19.1 to 1.19.2 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.23.2 to 1.23.3 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.4.2 to 0.4.3 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/internal/configsources from 1.5.1 to 1.5.2 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 from 2.8.1 to 2.8.2 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/internal/v4a from 1.5.1 to 1.5.2 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.63.0 to 1.64.0 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/service/ecrpublic from 1.45.0 to 1.46.0 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/service/eks from 1.97.0 to 1.98.0 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/service/iam from 1.62.0 to 1.63.0 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/service/internal/checksum from 1.11.1 to 1.11.2 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/service/internal/presigned-url from 1.14.1 to 1.14.2 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/service/internal/s3shared from 1.20.1 to 1.20.2 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/service/kms from 1.58.0 to 1.59.0 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.110.0 to 1.111.0 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/service/signin from 1.8.0 to 1.9.0 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/service/sso from 1.36.0 to 1.37.0 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/service/ssooidc from 1.41.0 to 1.42.0 (724e29a)
• bump github.com/aws/aws-sdk-go-v2/service/sts from 1.48.0 to 1.49.0 (724e29a)
• bump github.com/dlclark/regexp2/v2 from 2.7.1 to 2.7.2 (724e29a)
• bump github.com/go-openapi/swag from 0.29.1 to 0.29.2 (724e29a)
• bump github.com/go-openapi/swag/conv from 0.29.1 to 0.29.2 (724e29a)
• bump github.com/go-openapi/swag/fileutils from 0.29.1 to 0.29.2 (724e29a)
• bump github.com/go-openapi/swag/jsonutils from 0.29.1 to 0.29.2 (724e29a)
• bump github.com/go-openapi/swag/loading from 0.29.1 to 0.29.2 (724e29a)
• bump github.com/go-openapi/swag/mangling from 0.29.1 to 0.29.2 (724e29a)
• bump github.com/go-openapi/swag/pools from 0.29.1 to 0.29.2 (724e29a)
• bump github.com/go-openapi/swag/stringutils from 0.29.1 to 0.29.2 (724e29a)
• bump github.com/go-openapi/swag/typeutils from 0.29.1 to 0.29.2 (724e29a)
• bump github.com/go-openapi/swag/yamlutils from 0.29.1 to 0.29.2 (724e29a)
• bump golang.org/x/arch from 0.30.0 to 0.31.0 (724e29a)
• bump golang.org/x/mod from 0.40.0 to 0.41.0 (724e29a)
• bump golang.org/x/oauth2 from 0.36.0 to 0.37.0 (724e29a)
• bump golang.org/x/sync from 0.22.0 to 0.23.0 (724e29a)
• bump golang.org/x/sys from 0.47.0 to 0.48.0 (724e29a)
• bump golang.org/x/time from 0.15.0 to 0.16.0 (724e29a)

1.10.2 (2026-09-01)

Dependencies

• bump cloud.google.com/go/storage from 1.65.0 to 1.66.0 (8f4bd00)
• bump github.com/alecthomas/go-check-sumtype from 0.3.1 to 0.4.0 (585805f)
• bump github.com/alecthomas/go-check-sumtype from 0.4.0 to 0.5.0 (8f4bd00)
• bump github.com/andybalholm/brotli from 1.2.2 to 1.2.3 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2 from 1.43.7 to 1.45.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.7.18 to 1.7.20 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/config from 1.32.38 to 1.33.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.37 to 1.20.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.18.38 to 1.19.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.44 to 1.23.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.3.15 to 0.4.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/internal/configsources from 1.4.38 to 1.5.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 from 2.7.38 to 2.8.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/internal/v4a from 1.4.39 to 1.5.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.60.7 to 1.62.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/ecrpublic from 1.41.7 to 1.43.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/eks from 1.92.1 to 1.95.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/iam from 1.59.2 to 1.61.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding from 1.13.17 to 1.13.19 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/internal/checksum from 1.9.31 to 1.11.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/internal/presigned-url from 1.13.38 to 1.14.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/internal/s3shared from 1.19.39 to 1.20.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/kms from 1.55.7 to 1.57.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.3 to 1.109.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/signin from 1.5.7 to 1.7.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/sso from 1.33.7 to 1.35.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/ssooidc from 1.38.7 to 1.40.1 (8f4bd00)
• bump github.com/aws/aws-sdk-go-v2/service/sts from 1.45.7 to 1.47.1 (8f4bd00)
• bump github.com/aws/smithy-go from 1.27.10 to 1.28.1 (8f4bd00)
• bump github.com/aws/smithy-go from 1.27.9 to 1.27.10 (585805f)
• bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.0 to 1.23.1 (8f4bd00)
• bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.14.0 to 1.14.1 (8f4bd00)
• bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v9 from 9.4.0 to 9.5.0 (8f4bd00)
• bump github.com/docker/docker-credential-helpers from 0.9.8 to 0.9.9 (8f4bd00)
• bump github.com/ghostiam/protogetter from 0.3.21 to 1.0.0 (585805f)
• bump github.com/go-openapi/analysis from 0.26.0 to 0.26.1 (585805f)
• bump github.com/go-openapi/analysis from 0.26.1 to 0.26.2 (8f4bd00)
• bump github.com/go-openapi/jsonreference from 1.0.0 to 1.0.1 (585805f)
• bump github.com/go-openapi/loads from 0.25.1 to 0.25.2 (8f4bd00)
• bump github.com/go-openapi/spec from 0.22.10 to 0.22.11 (8f4bd00)
• bump github.com/go-openapi/spec from 0.22.9 to 0.22.10 (585805f)
• bump github.com/go-openapi/validate from 0.26.3 to 0.26.4 (585805f)
• bump github.com/go-openapi/validate from 0.26.4 to 0.26.5 (8f4bd00)
• bump github.com/gofrs/flock from 0.13.0 to 0.13.1 (8f4bd00)
• bump github.com/golangci/golangci-lint/v2 from 2.13.1 to 2.13.2 (8f4bd00)
• bump github.com/maximhq/bifrost/core from 1.7.13 to 1.8.4 (8f4bd00)
• bump github.com/prometheus/procfs from 0.21.1 to 0.22.0 (8f4bd00)
• bump github.com/raeperd/recvcheck from 0.3.0 to 0.3.1 (8f4bd00)
• bump github.com/securego/gosec/v2 from 2.28.0 to 2.29.0 (585805f)
• bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 (8f4bd00)
• bump github.com/skeema/knownhosts from 1.3.2 to 1.3.3 (8f4bd00)
• bump github.com/timonwong/loggercheck from 0.11.0 to 0.12.0 (8f4bd00)
• bump github/codeql-action/analyze from 4.37.8 to 4.37.9 (8f4bd00)
• bump github/codeql-action/init from 4.37.8 to 4.37.9 (8f4bd00)
• bump go.opentelemetry.io/contrib/detectors/gcp from 1.45.0 to 1.46.0 (8f4bd00)
• bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.70.0 to 0.71.0 (8f4bd00)
• bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.70.0 to 0.71.0 (8f4bd00)
• bump go.opentelemetry.io/otel from 1.45.0 to 1.46.0 (8f4bd00)
• bump go.opentelemetry.io/otel/metric from 1.45.0 to 1.46.0 (8f4bd00)
• bump go.opentelemetry.io/otel/sdk from 1....

1.10.1 (2026-08-27)

Dependencies

• bump github.com/bytedance/sonic from 1.15.2 to 1.15.3 (ea3329d)
• bump github.com/google/go-containerregistry from 0.21.9 to 0.22.0 (1e635bd)
• bump github.com/goreleaser/goreleaser/v2 from 2.17.1 to 2.18.0 (ea3329d)
• bump github.com/uudashr/iface from 1.5.0 to 1.5.1 (1e635bd)

1.10.0 (2026-08-25)

Features

• surface the model stop reason so the loop can tell truncation from a blank turn (#276) (22ae3e1)

Bug Fixes

• accept a parser-proven no-answer canary attempt instead of retrying (#288) (fa7f354)
• exit 2 when a scripted run produces no answer (#285) (4cf9e1b)
• rebuild the sandbox runtime after a Run leaves it unusable (#282) (d0384e8)
• recover from empty model turns instead of ending the run (#272) (b39a37f)
• refuse to dispatch tool calls from a turn truncated at the output limit (#283) (24579f3)

Dependencies

• bump cloud.google.com/go/auth from 0.23.1 to 0.23.2 (5222518)
• bump cloud.google.com/go/storage from 1.64.0 to 1.65.0 (5222518)
• bump github.com/aws/aws-sdk-go-v2 from 1.43.6 to 1.43.7 (5222518)
• bump github.com/aws/aws-sdk-go-v2/config from 1.32.37 to 1.32.38 (5222518)
• bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.36 to 1.19.37 (5222518)
• bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.18.37 to 1.18.38 (5222518)
• bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.43 to 1.22.44 (5222518)
• bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.3.13 to 0.3.15 (5222518)
• bump github.com/aws/aws-sdk-go-v2/internal/configsources from 1.4.37 to 1.4.38 (5222518)
• bump github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 from 2.7.37 to 2.7.38 (5222518)
• bump github.com/aws/aws-sdk-go-v2/internal/v4a from 1.4.38 to 1.4.39 (5222518)
• bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.60.6 to 1.60.7 (5222518)
• bump github.com/aws/aws-sdk-go-v2/service/ecrpublic from 1.41.6 to 1.41.7 (5222518)
• bump github.com/aws/aws-sdk-go-v2/service/eks from 1.91.1 to 1.92.1 (5222518)
• bump github.com/aws/aws-sdk-go-v2/service/iam from 1.59.1 to 1.59.2 (5222518)
• bump github.com/aws/aws-sdk-go-v2/service/internal/checksum from 1.9.30 to 1.9.31 (5222518)
• bump github.com/aws/aws-sdk-go-v2/service/internal/presigned-url from 1.13.37 to 1.13.38 (5222518)
• bump github.com/aws/aws-sdk-go-v2/service/internal/s3shared from 1.19.38 to 1.19.39 (5222518)
• bump github.com/aws/aws-sdk-go-v2/service/kms from 1.55.6 to 1.55.7 (5222518)
• bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.2 to 1.107.3 (5222518)
• bump github.com/aws/aws-sdk-go-v2/service/signin from 1.5.6 to 1.5.7 (5222518)
• bump github.com/aws/aws-sdk-go-v2/service/sso from 1.33.6 to 1.33.7 (5222518)
• bump github.com/aws/aws-sdk-go-v2/service/ssooidc from 1.38.6 to 1.38.7 (5222518)
• bump github.com/aws/aws-sdk-go-v2/service/sts from 1.45.6 to 1.45.7 (5222518)
• bump github.com/aws/smithy-go from 1.27.8 to 1.27.9 (287fbd6)
• bump github.com/AzureAD/microsoft-authentication-library-for-go from 1.8.0 to 1.9.0 (5222518)
• bump github.com/bombsimon/wsl/v5 from 5.8.0 to 5.9.0 (5222518)
• bump github.com/go-openapi/runtime from 0.33.0 to 0.33.1 (287fbd6)
• bump github.com/go-openapi/runtime/server-middleware from 0.33.0 to 0.33.1 (287fbd6)
• bump github.com/go-openapi/swag from 0.28.0 to 0.29.0 (5222518)
• bump github.com/go-openapi/swag from 0.29.0 to 0.29.1 (287fbd6)
• bump github.com/go-openapi/swag/cmdutils from 0.28.0 to 0.29.0 (5222518)
• bump github.com/go-openapi/swag/conv from 0.28.0 to 0.29.0 (5222518)
• bump github.com/go-openapi/swag/conv from 0.29.0 to 0.29.1 (287fbd6)
• bump github.com/go-openapi/swag/fileutils from 0.28.0 to 0.29.0 (5222518)
• bump github.com/go-openapi/swag/fileutils from 0.29.0 to 0.29.1 (287fbd6)
• bump github.com/go-openapi/swag/jsonutils from 0.28.0 to 0.29.0 (5222518)
• bump github.com/go-openapi/swag/jsonutils from 0.29.0 to 0.29.1 (287fbd6)
• bump github.com/go-openapi/swag/loading from 0.28.0 to 0.29.0 (5222518)
• bump github.com/go-openapi/swag/loading from 0.29.0 to 0.29.1 (287fbd6)
• bump github.com/go-openapi/swag/mangling from 0.28.0 to 0.29.0 (5222518)
• bump github.com/go-openapi/swag/mangling from 0.29.0 to 0.29.1 (287fbd6)
• bump github.com/go-openapi/swag/netutils from 0.28.0 to 0.29.0 (5222518)
• bump github.com/go-openapi/swag/pools from 0.28.0 to 0.29.0 (5222518)
• bump github.com/go-openapi/swag/pools from 0.29.0 to 0.29.1 (287fbd6)
• bump github.com/go-openapi/swag/stringutils from 0.28.0 to 0.29.0 (5222518)
• bump github.com/go-openapi/swag/stringutils from 0.29.0 to 0.29.1 (287fbd6)
• bump github.com/go-openapi/swag/typeutils from 0.28.0 to 0.29.0 (5222518)
• bump github.com/go-openapi/swag/typeutils from 0.29.0 to 0.29.1 (287fbd6)
• bump github.com/go-openapi/swag/yamlutils from 0.28.0 to 0.29.0 (5222518)
• bump github.com/go-openapi/swag/yamlutils from 0.29.0 to 0.29.1 (287fbd6)
• bump github.com/golangci/golang...

1.9.4 (2026-08-18)

Dependencies

• bump charm.land/lipgloss/v2 from 2.0.5 to 2.0.6 (914e787)
• bump charm.land/lipgloss/v2 from 2.0.5 to 2.0.6 (67f3e43)
• bump cloud.google.com/go/auth from 0.23.0 to 0.23.1 (914e787)
• bump cloud.google.com/go/auth from 0.23.0 to 0.23.1 (67f3e43)
• bump github.com/aws/aws-sdk-go-v2 from 1.43.5 to 1.43.6 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.7.17 to 1.7.18 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/config from 1.32.36 to 1.32.37 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.35 to 1.19.36 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.18.36 to 1.18.37 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.42 to 1.22.43 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.3.12 to 0.3.13 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/internal/configsources from 1.4.36 to 1.4.37 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 from 2.7.36 to 2.7.37 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/internal/v4a from 1.4.37 to 1.4.38 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.60.5 to 1.60.6 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/ecrpublic from 1.41.5 to 1.41.6 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/eks from 1.90.5 to 1.91.0 (914e787)
• bump github.com/aws/aws-sdk-go-v2/service/eks from 1.90.5 to 1.91.0 (67f3e43)
• bump github.com/aws/aws-sdk-go-v2/service/eks from 1.91.0 to 1.91.1 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/iam from 1.58.2 to 1.59.0 (914e787)
• bump github.com/aws/aws-sdk-go-v2/service/iam from 1.58.2 to 1.59.0 (67f3e43)
• bump github.com/aws/aws-sdk-go-v2/service/iam from 1.59.0 to 1.59.1 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding from 1.13.16 to 1.13.17 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/internal/checksum from 1.9.29 to 1.9.30 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/internal/presigned-url from 1.13.36 to 1.13.37 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/internal/s3shared from 1.19.37 to 1.19.38 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/kms from 1.55.5 to 1.55.6 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.1 to 1.107.2 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/signin from 1.5.5 to 1.5.6 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/sso from 1.33.5 to 1.33.6 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/ssooidc from 1.38.5 to 1.38.6 (feb5093)
• bump github.com/aws/aws-sdk-go-v2/service/sts from 1.45.5 to 1.45.6 (feb5093)
• bump github.com/aws/smithy-go from 1.27.7 to 1.27.8 (914e787)
• bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.22.0 to 1.23.0 (914e787)
• bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.22.0 to 1.23.0 (67f3e43)
• bump github.com/charmbracelet/ultraviolet from 0.0.0-20260330092749-0f94982c930b to 0.0.0-20260811164956-006e29f97886 (914e787)
• bump github.com/charmbracelet/ultraviolet from 0.0.0-20260330092749-0f94982c930b to 0.0.0-20260811164956-006e29f97886 (67f3e43)
• bump github.com/charmbracelet/x/ansi from 0.11.7 to 0.11.8 (914e787)
• bump github.com/charmbracelet/x/ansi from 0.11.7 to 0.11.8 (67f3e43)
• bump github.com/dlclark/regexp2/v2 from 2.6.0 to 2.7.1 (feb5093)
• bump github.com/envoyproxy/go-control-plane/envoy from 1.37.0 to 1.39.0 (914e787)
• bump github.com/go-openapi/loads from 0.25.0 to 0.25.1 (914e787)
• bump github.com/go-openapi/loads from 0.25.0 to 0.25.1 (67f3e43)
• bump github.com/googleapis/enterprise-certificate-proxy from 0.3.20 to 0.3.21 (914e787)
• bump github.com/googleapis/enterprise-certificate-proxy from 0.3.20 to 0.3.21 (67f3e43)
• bump github.com/maximhq/bifrost/core from 1.7.8 to 1.7.11 (914e787)
• bump github.com/maximhq/bifrost/core from 1.7.8 to 1.7.11 (67f3e43)
• bump github.com/sirupsen/logrus from 1.9.4 to 1.10.0 (914e787)
• bump github.com/sirupsen/logrus from 1.9.4 to 1.10.0 (67f3e43)
• bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (914e787)
• bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (67f3e43)
• bump github/codeql-action/analyze from 4.37.6 to 4.37.7 (67f3e43)
• bump github/codeql-action/init from 4.37.6 to 4.37.7 (67f3e43)
• bump golang.org/x/crypto from 0.54.0 to 0.55.0 (914e787)
• bump golang.org/x/crypto from 0.54.0 to 0.55.0 (67f3e43)
• bump golang.org/x/mod from 0.39.0 to 0.40.0 (914e787)
• bump golang.org/x/mod from 0.39.0 to 0.40.0 (67f3e43)
• bump golang.org/x/net from 0.57.0 to 0.58.0 (914e787)
• bump golang.org/x/net from 0.57.0 to 0.58.0 (67f3e43)
• bump golang.org/x/text from 0.40.0 to 0.41.0 ([914e787](https://github.com/cynative/cynative...

1.9.3 (2026-08-14)

Dependencies

• bump cel.dev/expr from 0.25.2 to 0.25.3 (1029860)
• bump cloud.google.com/go/auth from 0.22.0 to 0.23.0 (1029860)
• bump cloud.google.com/go/iam from 1.12.0 to 1.13.0 (1029860)
• bump github.com/aws/aws-sdk-go-v2 from 1.43.4 to 1.43.5 (1029860)
• bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.7.16 to 1.7.17 (1029860)
• bump github.com/aws/aws-sdk-go-v2/config from 1.32.35 to 1.32.36 (1029860)
• bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.34 to 1.19.35 (1029860)
• bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.18.35 to 1.18.36 (1029860)
• bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.41 to 1.22.42 (1029860)
• bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.3.11 to 0.3.12 (1029860)
• bump github.com/aws/aws-sdk-go-v2/internal/configsources from 1.4.35 to 1.4.36 (1029860)
• bump github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 from 2.7.35 to 2.7.36 (1029860)
• bump github.com/aws/aws-sdk-go-v2/internal/v4a from 1.4.36 to 1.4.37 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.60.4 to 1.60.5 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/ecrpublic from 1.41.4 to 1.41.5 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/eks from 1.90.4 to 1.90.5 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/iam from 1.58.1 to 1.58.2 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding from 1.13.15 to 1.13.16 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/internal/checksum from 1.9.28 to 1.9.29 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/internal/presigned-url from 1.13.35 to 1.13.36 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/internal/s3shared from 1.19.36 to 1.19.37 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/kms from 1.55.4 to 1.55.5 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.107.0 to 1.107.1 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/signin from 1.5.4 to 1.5.5 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/sso from 1.33.4 to 1.33.5 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/ssooidc from 1.38.4 to 1.38.5 (1029860)
• bump github.com/aws/aws-sdk-go-v2/service/sts from 1.45.4 to 1.45.5 (1029860)
• bump github.com/aws/smithy-go from 1.27.6 to 1.27.7 (1029860)
• bump github.com/dlclark/regexp2/v2 from 2.5.2 to 2.6.0 (1029860)
• bump github.com/go-openapi/analysis from 0.25.5 to 0.26.0 (1029860)
• bump github.com/go-openapi/validate from 0.26.1 to 0.26.3 (1029860)
• bump github.com/mark3labs/mcp-go from 0.57.0 to 0.58.0 (1029860)
• bump github.com/maximhq/bifrost/core from 1.7.6 to 1.7.8 (1029860)
• bump github.com/xo/terminfo from 0.0.0-20220910002029-abceb7e1c41e to 1.0.0 (1029860)
• bump golang.org/x/mod from 0.38.0 to 0.39.0 (1029860)
• bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12 (1029860)

1.9.2 (2026-08-14)

Bug Fixes

• keep the Homebrew version stanza, skip the audit rule instead (#259) (93478d6)

1.8.0 (2026-07-28)

Features

• add optional --live-llm probe to cynative doctor (#210) (7b9d055)
• publish a cosign signature alongside the release archives (#224) (ff43b4a)

Dependencies

• bump github.com/aws/smithy-go from 1.27.4 to 1.27.5 (9af52d1)
• bump github.com/AzureAD/microsoft-authentication-library-for-go from 1.7.2 to 1.8.0 (9af52d1)
• bump github.com/buger/jsonparser from 1.2.0 to 1.5.0 (9af52d1)
• bump github.com/docker/go-connections from 0.7.0 to 0.8.0 (b304e27)
• bump github.com/docker/go-connections from 0.8.0 to 0.8.1 (9af52d1)
• bump github.com/go-openapi/runtime from 0.32.6 to 0.33.0 (b304e27)
• bump github.com/go-openapi/runtime/server-middleware from 0.32.6 to 0.33.0 (b304e27)
• bump github.com/go-openapi/swag from 0.27.3 to 0.28.0 (9af52d1)
• bump github.com/go-openapi/swag/cmdutils from 0.27.3 to 0.28.0 (9af52d1)
• bump github.com/go-openapi/swag/conv from 0.27.3 to 0.28.0 (9af52d1)
• bump github.com/go-openapi/swag/fileutils from 0.27.3 to 0.28.0 (9af52d1)
• bump github.com/go-openapi/swag/jsonutils from 0.27.3 to 0.28.0 (9af52d1)
• bump github.com/go-openapi/swag/loading from 0.27.3 to 0.28.0 (9af52d1)
• bump github.com/go-openapi/swag/mangling from 0.27.3 to 0.28.0 (9af52d1)
• bump github.com/go-openapi/swag/netutils from 0.27.3 to 0.28.0 (9af52d1)
• bump github.com/go-openapi/swag/pools from 0.27.3 to 0.28.0 (9af52d1)
• bump github.com/go-openapi/swag/stringutils from 0.27.3 to 0.28.0 (9af52d1)
• bump github.com/go-openapi/swag/typeutils from 0.27.3 to 0.28.0 (9af52d1)
• bump github.com/go-openapi/swag/yamlutils from 0.27.3 to 0.28.0 (9af52d1)
• bump github.com/goreleaser/goreleaser/v2 from 2.17.0 to 2.17.1 (b304e27)
• bump github.com/maximhq/bifrost/core from 1.7.3 to 1.7.4 (b304e27)
• bump github.com/moby/moby/client from 0.5.0 to 0.5.1 (9af52d1)
• bump github.com/valyala/fasthttp from 1.72.0 to 1.73.0 (b304e27)
• bump github.com/yuin/goldmark from 1.8.4 to 1.8.5 (9af52d1)
• bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 (b304e27)
• bump mvdan.cc/gofumpt from 0.10.0 to 0.11.0 (b304e27)