v0.0.24

What's Changed

• Update actions/setup-go action to v7 by @renovate[bot] in #226
• Update module github.com/stacklok/toolhive-core to v0.0.30 by @renovate[bot] in #225
• Update module github.com/stacklok/toolhive-core to v0.0.37 by @renovate[bot] in #227
• Update module github.com/google/go-containerregistry to v0.21.8 by @renovate[bot] in #229
• Update dependency NousResearch/hermes-agent to v2026.7.30 by @renovate[bot] in #228
• Update module github.com/stacklok/toolhive to v0.41.0 by @JAORMX in #230
• Update module github.com/stacklok/go-microvm to v0.0.39 by @renovate[bot] in #231

Full Changelog: v0.0.23...v0.0.24

v0.0.23

What's Changed

• Let Renovate manage pinned Dockerfile tool versions by @JAORMX in #171
• Update module github.com/stacklok/toolhive-core to v0.0.23 by @renovate[bot] in #170
• Update module github.com/cedar-policy/cedar-go to v1.7.0 by @renovate[bot] in #169
• Update opentelemetry-go monorepo to v1.44.0 by @renovate[bot] in #168
• Update dependency NousResearch/hermes-agent to v2026.5.29 by @renovate[bot] in #174
• Update dependency golangci/golangci-lint to v2.12.2 by @renovate[bot] in #173
• Update dependency go-task/task to v3.51.1 by @renovate[bot] in #172
• chore: add needs-triage caller workflow by @dussab in #176
• Update dependency NousResearch/hermes-agent to v2026.6.5 by @renovate[bot] in #179
• Update module github.com/cedar-policy/cedar-go to v1.8.0 by @renovate[bot] in #177
• Update module golang.org/x/sync to v0.21.0 by @renovate[bot] in #180
• Update module github.com/stacklok/toolhive to v0.29.1 by @renovate[bot] in #178
• Update module golang.org/x/sys to v0.46.0 by @renovate[bot] in #181
• Update module golang.org/x/crypto to v0.53.0 by @renovate[bot] in #182
• Update module golang.org/x/term to v0.44.0 by @renovate[bot] in #183
• Update module github.com/stacklok/toolhive-core to v0.0.24 by @renovate[bot] in #184
• Update module github.com/stacklok/toolhive to v0.29.3 by @renovate[bot] in #185
• Update dependency NousResearch/hermes-agent to v2026.6.19 by @renovate[bot] in #193
• Update module github.com/pelletier/go-toml/v2 to v2.4.1 by @renovate[bot] in #189
• Update actions/checkout action to v7 by @renovate[bot] in #192
• Update module charm.land/glamour/v2 to v2.0.1 by @renovate[bot] in #186
• Update module github.com/stacklok/toolhive to v0.30.0 by @renovate[bot] in #188
• Update module github.com/google/go-containerregistry to v0.21.7 by @renovate[bot] in #190
• Guard bbox-init embed behind bbox_full build tag by @JAORMX in #197
• Update module github.com/pelletier/go-toml/v2 to v2.4.2 by @renovate[bot] in #196
• Update module github.com/stacklok/toolhive-core to v0.0.26 by @renovate[bot] in #194
• Clean up orphaned VM data dirs from crashed VMs by @JAORMX in #198
• Prune stale firmware cache versions after download by @JAORMX in #199
• Add declarative bring-your-own agent support (#191 Phase 1) by @JAORMX in #200
• Add bbox run-image ephemeral one-shot command by @JAORMX in #207
• Update module github.com/stacklok/go-microvm to v0.0.37 by @renovate[bot] in #208
• Update dependency NousResearch/hermes-agent to v2026.7.1 by @renovate[bot] in #209
• Add bbox agents add/init scaffolding (#201) by @JAORMX in #210
• Add generic mcp.mode:config declarative MCP injection (#202) by @JAORMX in #212
• Update module charm.land/lipgloss/v2 to v2.0.5 by @renovate[bot] in #214
• Update dependency go-task/task to v3.52.0 by @renovate[bot] in #213
• Add bbox agents import/export manifest files (#203) by @JAORMX in #215
• Update module github.com/pelletier/go-toml/v2 to v2.4.3 by @renovate[bot] in #217
• Update module github.com/stacklok/toolhive-core to v0.0.27 by @renovate[bot] in #218
• Update dependency NousResearch/hermes-agent to v2026.7.7 by @renovate[bot] in #219
• Add bbox agents import IMAGE (BYO agents Phase 5) by @JAORMX in #216
• Update module golang.org/x/sync to v0.22.0 by @renovate[bot] in #220
• Update module golang.org/x/crypto to v0.54.0 by @renovate[bot] in #223
• Update module github.com/stacklok/go-microvm to v0.0.38 by @renovate[bot] in #224

New Contributors

• @dussab made their first contribution in #176

Full Changelog: v0.0.22...v0.0.23

v0.0.22

What's Changed

• Add jq to base guest image by @JAORMX in #166
• Extract built-in clients into per-client packages by @JAORMX in #167

Full Changelog: v0.0.21...v0.0.22

v0.0.21

What's Changed

• Fix host-injected content ownership on macOS guests by @glageju in #156
• Update module github.com/stacklok/go-microvm to v0.0.34 by @renovate[bot] in #157
• Update module github.com/google/go-containerregistry to v0.21.6 - autoclosed by @renovate[bot] in #155
• Update module github.com/stacklok/toolhive to v0.28.0 by @renovate[bot] in #158
• Update module github.com/stacklok/toolhive to v0.28.1 by @renovate[bot] in #159
• Expose host vMCP session TTL with 12h default by @JAORMX in #164
• add --port flag by @kantord in #153
• Update module github.com/stacklok/toolhive to v0.28.3 by @renovate[bot] in #160
• Update module github.com/cedar-policy/cedar-go to v1.6.2 - autoclosed by @renovate[bot] in #161
• Update module golang.org/x/crypto to v0.52.0 - autoclosed by @renovate[bot] in #162
• Update module golang.org/x/sys to v0.45.0 - autoclosed by @renovate[bot] in #163
• Update module github.com/stacklok/toolhive-core to v0.0.22 by @renovate[bot] in #152
• Update module github.com/stacklok/go-microvm to v0.0.36 by @renovate[bot] in #165

New Contributors

• @glageju made their first contribution in #156
• @kantord made their first contribution in #153

Full Changelog: v0.0.20...v0.0.21

v0.0.20

What's Changed

• Update module github.com/cedar-policy/cedar-go to v1.6.1 by @renovate[bot] in #150
• Update module github.com/stacklok/toolhive to v0.27.2 by @renovate[bot] in #145
• Update module golang.org/x/term to v0.43.0 by @renovate[bot] in #149
• Update module golang.org/x/crypto to v0.51.0 by @renovate[bot] in #147
• Update module github.com/pelletier/go-toml/v2 to v2.3.1 by @renovate[bot] in #143
• Update module go.uber.org/zap to v1.28.0 by @renovate[bot] in #146
• Update module github.com/stacklok/toolhive-core to v0.0.19 by @renovate[bot] in #144
• Fix: prevent recursive snapshot self-copy when cache dir falls within workspace by @allen-munsch in #151

New Contributors

• @allen-munsch made their first contribution in #151

Full Changelog: v0.0.19...v0.0.20

v0.0.19

What's Changed

• Fix opencode settings filter to inject custom provider by @Kensan in #142

Full Changelog: v0.0.18...v0.0.19

v0.0.18

What's Changed

• Package Gemini CLI as a built-in agent by @JAORMX in #140
• Bump go-microvm to v0.0.33 by @JAORMX in #141

Full Changelog: v0.0.17...v0.0.18

v0.0.17

What's Changed

• Fix handling of read-only source file cloning by @Kensan in #139

New Contributors

• @Kensan made their first contribution in #139

Full Changelog: v0.0.16...v0.0.17

v0.0.16

What's Changed

• go.mod: bump go-microvm to v0.0.32 by @JAORMX in #126
• Strip exec-class keys from sanitized git config by @JAORMX in #128
• Block .git/modules/, warn on git-attribute/rebase paths, hint on submodule add by @JAORMX in #129
• Reject bare wildcard env-forward patterns at load time by @JAORMX in #130
• Harden config file loading: size cap, strict fields, symlink reject by @JAORMX in #131
• Use O_NOFOLLOW on file writes: flusher, credential, settings by @JAORMX in #132
• Include exe-path fingerprint in VM log sentinels by @JAORMX in #133
• Classify dev-env auto-exec paths as sensitive and broaden .envrc by @JAORMX in #134
• Inject GOMEMLIMIT into guest VM to prevent Go tool OOM kills by @JAORMX in #124
• Update module github.com/stacklok/toolhive to v0.21.0 by @renovate[bot] in #125
• Update module github.com/stacklok/toolhive to v0.23.1 by @renovate[bot] in #135
• Add --workspace-mode=direct to skip snapshot isolation by @JAORMX in #137
• Update module github.com/stacklok/toolhive to v0.24.0 by @renovate[bot] in #138
• Package Hermes Agent as a built-in guest by @JAORMX in #136

Full Changelog: v0.0.15...v0.0.16

v0.0.15

What's Changed

• Update module github.com/stacklok/go-microvm to v0.0.31 by @renovate[bot] in #112
• Update module golang.org/x/sys to v0.43.0 by @renovate[bot] in #113
• Set OverrideUID on virtiofs mounts for macOS ownership by @jhrozek in #111
• Fix git worktree object database in VM snapshots by @jhrozek in #94
• Update module github.com/stacklok/toolhive to v0.16.0 by @renovate[bot] in #102
• Update module golang.org/x/term to v0.42.0 by @renovate[bot] in #114
• Update module golang.org/x/crypto to v0.50.0 by @renovate[bot] in #116
• Update module github.com/stacklok/toolhive-core to v0.0.15 by @renovate[bot] in #117
• Surface config parse errors to stderr by @JAORMX in #115
• Update module github.com/stacklok/toolhive to v0.17.0 by @renovate[bot] in #118
• Update module charm.land/lipgloss/v2 to v2.0.3 by @renovate[bot] in #120
• Update module github.com/stacklok/toolhive to v0.19.0 by @renovate[bot] in #119
• Update module github.com/stacklok/toolhive-core to v0.0.16 by @renovate[bot] in #121
• Update module github.com/stacklok/toolhive to v0.20.0 by @renovate[bot] in #122
• Add --pull flag to control image pull policy by @JAORMX in #123

Full Changelog: v0.0.14...v0.0.15