Changelog

Newest first. Versions follow semantic versioning; a breaking change never ships in a patch release.

2.8.1 6 days ago

Fix: lockfile ordering was unstable on case-insensitive filesystems, producing spurious diffs.
Fix: offline mode no longer attempts a registry reachability probe.

2.8.0 27 days ago

Resolution is roughly 40 percent faster on repositories with more than 200 pinned artefacts.
New: dry-run output can be emitted as JSON for consumption by CI tooling.
Deprecated: the implicit shell variable passthrough. It will be removed in 3.0.

2.7.3 63 days ago

Fix: checksum verification was skipped for artefacts served with a chunked transfer encoding.
Documentation: expanded the private registry section after repeated support questions.

2.7.0 118 days ago

New: hermetic environments are now the default. Set the compatibility flag to restore the old behaviour.
New: cache directory is configurable per project.

Older releases are listed in the repository. Security-relevant fixes are additionally announced on the mailing list before the release is tagged.