v2026.10.0 v2026.9.18
jdx/miseOct 2, 2026 → Sep 30, 20260 days between releases
Generating AI comparison
Analyzing what changed between v2026.10.0 and v2026.9.18. This page updates automatically — usually within a minute.
The Two Releases
v2026.10.0: Stricter signer checks for cosign and GitHub attestations, trust for inline options in .tool-versions
Oct 2, 2026· 20 days ago
This release significantly tightens supply-chain security by enforcing stricter identity checks for cosign and GitHub attestations, while introducing new features like per-cask app directories and registry support for Cloudflare's CF CLI.
Full release notesv2026.9.18: Remote config includes, OCI task catalogs, and a trust fix for inline tool options
Sep 30, 2026· 21 days ago
This release introduces remote config includes from git or OCI registries, adds support for OCI task catalogs, and fixes a critical security vulnerability where inline tool options could leak tokens to unauthorized hosts.
Full release notes