v1.1.0

Changelog

• bafc95d ci: bump actions/checkout from 4.3.1 to 6.0.2 (#198)
• b640cb9 ci: bump actions/dependency-review-action from 4.7.1 to 4.9.0 (#196)
• 6207977 ci: bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#199)
• 748e86c ci: bump docker/setup-qemu-action from 3.7.0 to 4.0.0 (#200)
• 42bb8ba ci: bump github/codeql-action from 4.32.4 to 4.32.6 (#197)
• f13d590 feat: add discover command for MCP server protection scanning (#194)
• 76d701d feat: add parallel benchmarks, concurrent scaling test, and performance doc (#201)
• d40ea7b feat: split enterprise features into dedicated module under ELv2 (#202)

v1.0.0

Changelog

• 9e2bc5b feat: add per-agent identity, budgets, and config isolation (#186)
• 413f20f feat: add persistence detection for MCP tool policy and chain patterns (#187)
• 11c38f7 fix: TLS interception follow-up (shared transport, reload warnings, certgen coverage) (#185)

v0.3.6

Changelog

• 165a7e2 feat: add TLS interception for CONNECT tunnel scanning (#183)
• aa1f60a feat: add parameter schema scanning to MCP tool poisoning detection (#179)
• e78d08a feat: add pipelock report command for HTML/JSON audit reports (#180)
• ca1cfbe fix: skip well-known non-secret env vars in leak detection (#182)

v0.3.5

Changelog

• a18116c feat: IPv6 SSRF fixes + MCP confused deputy protection (#177)
• 0aad0db feat: add CONNECT tunnel SNI verification (#175)
• 70835ab feat: add Windows build support (#174)
• 8f4a5cf feat: add hostile-model preset and guardrail-removal detection (#170)
• 274d77f feat: add pipelock claude hook/setup/remove commands (#176)
• e7de1e4 feat: add request body DLP and header scanning (#171)
• 874cd9a feat: support env var override for kill switch API token (#173)

v0.3.4

Changelog

• 92e9e93 fix: cursor install writes correct v1 hooks.json format (#168)

v0.3.3

Changelog

• 23eb42b feat: add Cursor IDE hook integration and decide package (#163)
• bb8ec72 feat: add preflight repo scanner for dangerous IDE config (#166)
• e4aed6e feat: add verify-install command (#164)

v0.3.2

Changelog

• 61476d0 feat: Docker Compose quickstart with network isolation and verification (#159)
• 6a3e408 feat: add diagnose command, block hints, and prepare v0.3.2 release (#162)
• 84cc5f3 fix: WS scanner label split, mcporter field preservation, OpenClaw README link (#158)
• 8d433b6 fix: suppress goconst lint for test secret prefixes (#160)

v0.3.1

Changelog

• acf88ba ci: bump actions/attest-build-provenance from 3.2.0 to 4.1.0 (#156)
• 1cd9115 ci: bump actions/attest-sbom from 3.0.0 to 4.0.0 (#157)
• 5debba1 ci: bump actions/setup-go from 6.2.0 to 6.3.0 (#152)
• 13b6489 ci: bump actions/upload-artifact from 6.0.0 to 7.0.0 (#154)
• 769d646 feat: MITRE technique IDs, kill switch Prometheus gauges, Grafana dashboard (#147)
• 8dc453f feat: WebSocket MCP transport, generate mcporter, OpenClaw guide (#149)
• a3e4954 fix: close security gaps from v0.3.0 audit (#145)

v0.3.0

Changelog

• 796ff88 feat: DLP pattern tuning, include_defaults merge, suppression guide (#144)
• 2f5ee0e feat: add finding suppression, kill switch, MCP refactor, and chain detection (#142)
• e3528e3 feat: event emission, kill switch API, port isolation (#143)
• a7f258b fix: close WebSocket cross-message DLP bypass (#140)
• 2a73c0e fix: close header rotation evasion with IP-level domain tracking (#141)

v0.2.9

Changelog

• cff976d Prepare v0.2.9: changelog, version refs (#139)
• d95abbe feat: add WebSocket proxy with bidirectional frame scanning (#137)