-
6dd9aa55cc
Merge pull request #6919 from AksharP5/agent/resolve-dialog-pointer-focus

David Heinemeier HanssonandGitHub
2026-08-28 23:41:00 +02:00
-
-
5284be6582
Use Hermes native prompted sessions

Spencer BullandCodex XHigh
2026-08-28 16:32:19 -05:00
-
468b511249
Merge pull request #8397 from ErikMelton/unauthorized-http-get-requests-from-notifications

Ryan HughesandGitHub
2026-08-28 15:50:19 -04:00
-
-
4fc14173b7
[Security] Add Windows VM boundary race regressions
Afonso Oliveira
2026-08-28 19:37:04 +01:00
-
06e32d243d
Merge pull request #8198 from bastidotnet/harden-apple-brightness-device-cache

David Heinemeier HanssonandGitHub
2026-08-28 14:42:22 +02:00
-
-
64203cc208
Keep prompted Hermes sessions local

Spencer BullandCodex XHigh
2026-08-27 23:07:18 -05:00
-
36353296aa
Harden prompted Hermes session handoff

Spencer BullandCodex XHigh
2026-08-27 23:01:30 -05:00
-
288e387a22
Preserve Hermes session workspace metadata

Spencer BullandCodex XHigh
2026-08-27 22:50:21 -05:00
-
750dde5ed2
Resume prompted Hermes sessions literally

Spencer BullandCodex XHigh
2026-08-27 22:37:03 -05:00
-
b609ae2355
Keep prompted Hermes sessions interactive

Spencer BullandCodex XHigh
2026-08-27 21:31:17 -05:00
-
-
a165185a3f
[Security] Complete Windows VM mount hardening
Afonso Oliveira
2026-08-27 23:53:44 +01:00
-
d1845245d3
Unquote the new variables inside [[ ]]


2026-08-27 21:40:31 +02:00
-
9d8c0176d1
Make the cache tests fail when either check is removed


2026-08-27 21:40:31 +02:00
-
9382410026
Validate the web app URL before anything fetches it


2026-08-27 20:10:15 +02:00
-
b07374f03c
Reserve the cups-browsed account name at install


2026-08-27 19:55:36 +02:00
-
68fc0cf6e6
Match the CUPS directives being rewritten the way cupsd reads them


2026-08-27 19:55:36 +02:00
-
2b923cf5bd
Pin the theme name check to C, and read a colon before any slash as scp-style

David Heinemeier HanssonandCodex XHigh
2026-08-27 19:52:37 +02:00
-
521f1ae9ac
Resume cups-browsed on whether it is enabled, not on whether it was running


2026-08-27 19:45:27 +02:00
-
c2587dff08
Escape .desktop values with parameter expansion, not sed


2026-08-27 19:45:45 +02:00
-
83881e979b
Merge pull request #7984 from Chessing234/fix/webapp-name-slashes

OmarchybotandGitHub
2026-08-27 19:40:46 +02:00
-
-
9ece53cede
Prove the web app name guard, and reject before the icon is fetched


2026-08-27 17:04:25 +02:00
-
5c336885d2
Harden CUPS printer discovery

Mehmet InceandDaybreak Blue
2026-08-27 17:43:39 +01:00
-
-
-
946704f309
Merge pull request #8224 from kevinmcconnell/once-requires-sudo

David Heinemeier HanssonandGitHub
2026-08-27 17:36:31 +02:00
-
-
c5a5e14e99
Merge pull request #8072 from basecamp/require-omarchy-repo-signatures

Ryan HughesandGitHub
2026-08-27 11:29:12 -04:00
-
-
4be440b501
Close six ways the textFormat scan reported success without checking


2026-08-27 17:28:13 +02:00
-
7026ede90b
Strip image tags after the newline rewrite, not before it
David Heinemeier Hansson
2026-08-27 16:53:55 +02:00
-
9d02bb08f8
Merge pull request #8549 from basecamp/crash-notification-mute

David Heinemeier HanssonandGitHub
2026-08-27 13:19:46 +02:00
-
-
b68d4142d7
Cut the crash-mute section of the skill to what it instructs

OmarchybotandDavid Heinemeier Hansson
2026-08-27 12:22:54 +02:00
-
fdb3755c7d
Document Hermes in the manual

David Heinemeier HanssonandClaude Opus 5
2026-08-27 11:45:33 +02:00
-
f70c55d813
Give Hermes the mark that reads at menu size

David Heinemeier HanssonandClaude Opus 5
2026-08-27 11:45:33 +02:00
-
cda02f0a88
Ask the installer who owns the Hermes wrapper

David Heinemeier HanssonandClaude Opus 5
2026-08-27 11:45:23 +02:00
-
12646eb5a1
Run the app's Hermes before calling it ready


2026-08-27 11:45:15 +02:00
-
ba78e7df09
Leave a Hermes the app never installed alone


2026-08-27 11:44:39 +02:00
-
ea6ee9440a
Add omarchy-crash-mute to mute and unmute one program


2026-08-27 11:26:28 +02:00
-
2f918a75ad
Stop the Hermes interpreter pin following the agent into the user's projects


2026-08-27 10:48:06 +02:00
-
43d2fffaf0
Keep user setup running when Hermes cannot install

David Heinemeier HanssonandClaude Opus 5
2026-08-27 10:47:53 +02:00
-
eeb4206c7b
Say in the manual what the skill already says about quoting

OmarchybotandDavid Heinemeier Hansson
2026-08-27 10:38:18 +02:00
-
8d14869689
Let a crash diagnosis mute that program's notifications


2026-08-27 10:28:11 +02:00
-
-
7bbb119a68
Merge pull request #8539 from spencerbull/review/pr-7469-hermes-install

David Heinemeier HanssonandGitHub
2026-08-27 10:04:23 +02:00
-
-
eb7ecd13f3
Keep Ori interactive when launched with a prompt (#8455)

Luke ParkeandGitHub
2026-08-27 02:21:07 -05:00
-
5909210cb3
Address Hermes review feedback
Spencer Bull
2026-08-27 01:36:26 -05:00
-
d56c1ba972
Harden Hermes wrapper ownership
Spencer Bull
2026-08-27 01:09:45 -05:00
-
-
877f1e96ef
Keep web app launchers on http(s)
Taksh
2026-08-27 07:17:44 +05:30
-
-
-
3b0e899029
Let a theme name hold a plus or lead with an underscore, and document the set

Mehmet InceandClaude Opus 5
2026-08-26 23:37:44 +01:00
-
187c268d68
Escape webapp .desktop values per freedesktop spec
bastidotnet
2026-08-26 23:55:47 +02:00
-
-
-
a12a21c02f
Add Hermes as a desktop app and a coding agent


2026-08-26 18:04:41 +02:00
-
-
-
0260d2accb
Stop the textFormat test from passing when it has not checked


2026-08-26 17:10:30 +02:00
-
75e51f0b95
Refuse a theme name that is shell syntax, and quote the one the unlock picker returns

Mehmet InceandClaude Opus 5
2026-08-26 16:22:07 +01:00
-
e428dc2627
Strip image tags whose separator Qt skips but
\s does not

David Heinemeier HanssonandClaude Opus 5
2026-08-26 17:10:17 +02:00
-
6e962b4466
Address review comments: Enforce stricter tag handling and image sanitation in notifications.
Erik Melton
2026-08-26 16:36:12 +02:00
-
3af7675a10
Require
textFormat declaration for all Text elements.
Erik Melton
2026-08-26 16:14:51 +02:00
-
0ae1694830
Constrain the tzupdate sudoers rule to a single timezone argument (#8194)



2026-08-25 22:30:09 +02:00
-
77305ed3b9
Enable Dell XPS 13 sidecar speaker amplifiers (#7032)


2026-08-25 15:29:27 -05:00
-
-
-
45749c5b68
test: cover Python shim bypass
David Helmus
2026-08-25 21:09:45 +02:00
-
bafc9a1000
Write browser theme colour through a passwordless helper
acrogenesis
2026-08-25 13:01:01 -06:00
-
44a186afe4
Replace planted policy directory symlinks instead of following them
acrogenesis
2026-08-25 12:14:52 -06:00
-
bebe19bc70
Harden browser policy parent directories and validate theme RGB
acrogenesis
2026-08-25 12:10:08 -06:00
-
87dfa14c56
Keep a trusted Firefox policies.json when repairing the directory
acrogenesis
2026-08-24 10:58:33 -06:00
-
b0e6611c70
Require root-owned Firefox policies before skipping repair
acrogenesis
2026-08-24 02:01:24 -06:00
-
95b791af16
Stop world-writable browser policy directories
acrogenesis
2026-08-24 01:20:40 -06:00
-
-
-
c34d20ca14
[Security] Pin Windows VM mounts behind a root boundary
Afonso Oliveira
2026-08-25 18:39:00 +01:00
-
-
-
2c93e66b0c
Run ONCE with sudo when installing
Kevin McConnell
2026-08-25 16:05:39 +01:00
-
9301092404
Update Omarchy on Mac guide link to omarchy-mac repo (#8192)

Naeem MalikandGitHub
2026-08-25 15:04:13 +00:00
-
-
-
4cd8a081cb
Fix Codex usage collection on 0.149 (#7649)




2026-08-25 07:07:17 -07:00
-
b91180a808
Skip Chromium EULA on first run
Helmut Januschka
2026-08-25 14:48:44 +02:00
-
-
-
e53548fae2
Harden the test's temp-file handling against a symlink race
bastidotnet
2026-08-25 13:51:39 +02:00
-
fe56d68e90
Validate the cached Apple-display device path before use
bastidotnet
2026-08-25 13:24:00 +02:00
-
23dab9ec4d
[Security] Stop the FIDO2 setup staging its authfile at a predictable /tmp path (#7904)




2026-08-25 11:09:17 +01:00
-
-
-
9285b19d6a
[Security] Stop USB device names from being executed as Hyprland Lua (#8129)




2026-08-25 03:03:12 -06:00
-
-
-
4637735aa2
Pin trusted PATH in privileged DNS helper (#8172)




2026-08-25 08:37:55 +01:00
-
68ab12f77d
Share the git URL check, and refuse the transports Omarchy does not clone from (#8174)




2026-08-25 09:10:20 +02:00
-
12c350e404
Match the Windows VM title regardless of the launcher's shell quoting

David Heinemeier HanssonandClaude Opus 5
2026-08-25 08:45:50 +02:00
-
30471bf35a
Guard plugin-add against git transport-helper URLs (match theme-install) (#8067)

BastiandGitHub
2026-08-25 08:29:48 +02:00
-
8bee78bc63
Keep the Windows VM display fully opaque
Jason Wall
2026-08-24 22:11:16 -07:00
-
-
-
597f57a198
Allow Resolve Voiceover to release focus
Akshar Patel
2026-08-24 22:00:42 -04:00
-
b86d4505c1
Renumber the README manual TOC after Extra themes was dropped (#8089)

Sameer PokharelandGitHub
2026-08-25 01:44:17 +05:45
-
06a3dbca42
Offer to reboot when toggling sudoless Docker; show only the relevant menu entry (#8098)



2026-08-24 21:58:27 +02:00
-
5d3299fb94
Wait for the keypress ourselves instead of asking gum to (#8082)


2026-08-24 19:46:02 +02:00
-
1565919c87
Flag a reboot when the docker group changes (#8080)



2026-08-24 19:32:37 +02:00
-
b5ded31e2f
Don't put the user in the docker group; make it opt-in (#8056)




2026-08-24 18:56:00 +02:00
-
e66c27f1e7
Require signed packages from the Omarchy repository
Ryan Hughes
2026-08-24 12:37:46 -04:00
-
-
5afc9e1495
Revert "Require signed packages from the Omarchy repository"
Ryan Hughes
2026-08-24 12:53:14 -04:00
-
39cffb8f51
Require signed packages from the Omarchy repository
Ryan Hughes
2026-08-24 12:37:46 -04:00
-
4baae6bf2a
Draw text as ASCII art in the Omarchy logo font (#8037)



2026-08-24 17:58:52 +02:00
-
d99d4fc6de
Remove the sudo lockout reset command (#8046)




2026-08-24 15:49:17 +02:00
-
20400badda
Stop a psmouse quirk from failing every install (#7236)


2026-08-24 15:33:03 +02:00
-
535d8f3485
Regenerate mise wrappers that still print mise's output to stdout (#8041)


2026-08-24 14:36:09 +02:00
-
44b00a4e80
test: avoid mise shim recursion
David Helmus
2026-08-24 08:52:25 +02:00
-
-
-
7c896d3521
Keep a web app name out of the launcher's directory structure
Taksh
2026-08-24 07:16:53 +05:30
-
-
43bfe9b9d8
Merge pull request #7926 from basecamp/harden-notification-exec-argv

Ryan HughesandGitHub
2026-08-23 19:51:57 -04:00
-
-
3b0d9b5734
Merge remote-tracking branch 'origin/quattro' into harden-notification-exec-argv
Ryan Hughes
2026-08-23 18:31:42 -04:00
-
-
-
-
8f245e59dc
Restore notify-send option parity and prove legacy fail-closed
Ryan Hughes
2026-08-23 17:18:58 -04:00
-
e3729a385b
Send notifications via the Notify D-Bus method, never notify-send
Ryan Hughes
2026-08-23 17:02:29 -04:00
-
be63983d16
Describe parseExecArgv as a structural check, not intent
Ryan Hughes
2026-08-23 16:47:13 -04:00
-
7e469f962d
Let a received Taildrop file wait to be answered (#7953)




2026-08-23 22:12:07 +02:00
-
1b15120d27
Keep relayed text out of notify-send's option parser

Claude Opus 5 (1M context)andCodex XHigh
2026-08-23 21:44:06 +02:00
-
21cbbf8194
Recognize --exec only after the positionals
Ryan Hughes
2026-08-23 14:41:56 -04:00
-
bf2013e6f3
Make --exec take the command as rest-of-line words
Ryan Hughes
2026-08-23 14:26:25 -04:00
-
f4f3d4c71a
Add plan for finishing Sunshine/Moonlight into a remote desktop

David Heinemeier HanssonandClaude Opus 5
2026-08-23 19:51:32 +02:00
-
eb988b42e6
Remove --exec entirely; --exec-arg is the only click-command form
Ryan Hughes
2026-08-23 13:35:02 -04:00