Release notes

HOL Guard v3.48.0

Stable

Published Original GitHub release for v3.48.0

Documented changes

40 typed entries

Verified contributors

Credits being verified. Attribution coverage is unknown.

Attribution coverage

attribution not yet verified; history inventory partial.

Install

Current installation guide

Scope

Guard v3.48.0 is a stable release published 2026-10-17. Upstream documents: Guard 3.48.0 is a stable release cut from 3864097. 31 commits • 30 merged pull requests • 8 contributors since Guard 3.47.0. Attribution for this release is being verified.

Changes

Added

8

Fixed

22
  • guard: Keep the output of a toolchain package read under a hidden home directory (#5019) Evidence for this change
  • PostToolUse review of an Oh My Pi read of a file below one hidden directory of the home directory (for example a Node toolchain's installed package.json) returned no_output_to_review and blocked the result, even… Evidence for this change
  • The source-reference path now applies the same credential screen PreToolUse uses to a hidden component below the home directory. That screen moves from guard-command to guard-secure-fs so both paths read one list. Evidence for this change
  • Credential stores, file names a token is normally written under, a tool's own configuration slot, program directories, nested hidden directories and links that resolve outside the home directory keep refusing. The file… Evidence for this change
  • daemon: Retry the Windows daemon-state replace while a reader holds the file (#5021) Evidence for this change
  • guard: Read a file named in a neighbouring repository without review (#5009) Evidence for this change
  • guard: Let a literal pattern bound an fd search below a dot-directory (#5015) Evidence for this change
  • guard: Read a migration named for the table it defines (#5007) Evidence for this change
  • guard: Let a name pattern bound what a deeper find prints (#5013) Evidence for this change
  • guard: Prove a recursive search for what it actually reads (#5012) Evidence for this change
  • guard: List a home dot-directory through the host's own listing tools (#5003) Evidence for this change
  • guard: End the extension policy conflict dead-end (#5000) Evidence for this change
  • guard: Screen hidden home reads for credentials, not for being hidden (#4992) Evidence for this change
  • guard: Bind one-time ssh push approvals on hosts with XQuartz (#4999) Evidence for this change
  • mcp: Drop omarchy-mcp contribution pointing pipx at an unrelated package (#4996) Evidence for this change
  • Removes contributions/mcp-servers/mcp.omarchy-mcp.json and its trust binding contracts/extensions/trust/command.mcp-omarchy-mcp.v1.json. Evidence for this change
  • The contribution (merged via #2973) declares launch: {"kind": "package-launcher", "command": "pipx", "package": "omarchy-mcp"}, but omarchy-mcp on PyPI is published by ServiceStack… Evidence for this change
  • guard: Sandbox script smoke tests that reuse a fresh mktemp directory (#4995) Evidence for this change
  • The pre-tool rejudge now reads a later $tmp expansion of a fresh mktemp -d directory as $TMPDIR, matching the sandbox launcher. Before, it wrote the stand-in literal into each program argument. The stand-in then… Evidence for this change
  • The bun --cwd lockfile test calls the unix-only package context builder. It and its helper are now gated to unix, so the Windows test build compiles again. Evidence for this change
  • reviewed, launches_as_judged and launcher_shape move to chain_literals_launch.rs, which keeps chain_literals.rs under the size limit. Their behavior is unchanged. Evidence for this change
  • release: Raise x86_64 wheel download budgets so 3.47 can publish (#4993) Evidence for this change

Other changes

10

Upgrade and compatibility

None documented.

Compare with the previous release

Predecessor on the same channel: v3.47.0

Verified contributors

Credits derive from public pull-request authorship, verified commit authorship, or verified co-authorship — never from thanks text or release metadata. Each distinct contributor is listed once; the evidence ledger paginates every published credit record.

Evidence ledger0 credits

No credits are published for this release yet.