| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: nono-cli | Distribution: openSUSE Tumbleweed |
| Version: 0.80.0 | Vendor: openSUSE |
| Release: 1.1 | Build date: Fri Oct 16 16:37:51 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 32161949 | Source RPM: nono-cli-0.80.0-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/nolabs-ai/nono/ | |
| Summary: CLI for nono capability-based sandbox | |
nono-cli is a capability-based sandboxing system for running untrusted AI agents with OS-enforced isolation.
Apache-2.0 AND BSD-3-Clause AND CDLA-Permissive-2.0 AND ISC AND MIT AND MPL-2.0 AND Unicode-3.0 AND Zlib
* Fri Oct 16 2026 Martin Pluskal <mpluskal@suse.com>
- Update to version 0.80.0 (skips 0.79.0):
* Security advisory GHSA-q7m6-rr8w-vjff: filesystem denials
now apply to sockets as well as regular files
* Features: launch and attach to remote agent sessions;
standalone Snap runtime group; per-command aws_auth;
SHA-256 executable pinning; macOS command-level
keychain_access grant; diagnostics.redaction.extra_env_vars
* Fixes: isolate tool-sandbox network policy by effective
command scope; separate network-denial throttling from policy
enforcement; honour Linux open ports in proxy fallback;
serverAuth EKU on minted TLS intercept certificates; keep
Claude Code on its default Keychain service; accept
keyring:// credential URIs; allow man pages, font-config
and MIME reads on Linux
* Breaking: remove legacy Claude hook cleanup
- Regenerate vendor.tar.zst for the new sources
- Correct License: re-derived from the statically linked crates
(adds Zlib via foldhash, the default hasher) and update the
Legal-Review-Notice counts
* Sun Sep 27 2026 Dirk Müller <dmueller@suse.com>
- update to 0.78.0:
[#]## Security Advisories
* GHSA-6542-g6qc-gj95
* GHSA-7cwr-ghvv-24jf
* GHSA-222m-44fg-jx8g
* GHSA-8r33-hr9m-69wh
* GHSA-wjv5-93q3-xm73
* (tool-sandbox)* Fall back to the interpreter's directory for
RPATH-less ELF dependencies (#1650)
* Preserve query string on jwt-bearer token_url
* Pass through AF_UNIX traffic in proxy-only mode
* Tolerate volatile process-relative aliases in --self
reload
* Stop save-prompt failures from overriding the child
exit code
* Harden calculate_dir_size against silent errors and
symlink cycles
* Reject . and .. in pack namespace and name
* Fail closed when upstream DNS returns no addresses
* Fri Sep 18 2026 Robert Munteanu <rombert@apache.org>
- Drop workaround for upstream issue #1777, fixed in release 0.77.0
* Sun Sep 13 2026 Martin Pluskal <mpluskal@suse.com>
- Update to version 0.77.0:
* Drop legacy profile aliases and deprecation shims (v1.0.0 prep)
* Use CLONE_FILES bootstrap for network-notification sessions
* Always re-invoke the credential source for ambient captures
* Validate localhost port ranges for zero end and inverted ranges
* Fix denied-path review selector (unhandled keys, type-ahead)
* Keep legacy ~/.claude.json in sync with CLAUDE_CONFIG_DIR redirects
* Disable audit buffer for standalone proxy, fix chunked bodies
* Resolve multi-hop symlinks in filesystem grants
* Support Git fsmonitor socket via unix_socket_bind
* Add Nix flake support
* Allow fire-and-forget child processes
* Load declarative proxy credentials from profiles
* Route CLI tracing warnings to stderr, not stdout
- Regenerate vendor.tar.zst for the new sources
- Correct License: re-derived from the statically linked crates
(adds BSD-3-Clause, CDLA-Permissive-2.0, ISC, MIT, MPL-2.0 and
Unicode-3.0) and document it in a Legal-Review-Notice; the
generated shell completion subpackages stay Apache-2.0
* Thu Sep 03 2026 Robert Munteanu <rombert@apache.org>
- Added completion scripts
* Tue Sep 01 2026 Dirk Müller <dmueller@suse.com>
- Initial package (0.75.0)
/usr/bin/nono /usr/share/doc/packages/nono-cli /usr/share/doc/packages/nono-cli/README.md /usr/share/licenses/nono-cli /usr/share/licenses/nono-cli/LICENSE
Generated by rpm2html 1.8.1
Fabrice Bellet, Thu Oct 22 00:39:11 2026