Week of July 20, 2026

cua-driver

Releases: 0.9.1, 0.10.0, 0.11.0, 0.12.2, 0.12.3, 0.12.4, 0.12.5, 0.12.6.

Features

• Add protected permission modes and consent grants — #2383.
• Track update funnel telemetry — #2392.
• Add persistent macOS interactive input sessions — #2339.
• Replace language MCP clients with Rust SDKs — #2341. Breaking change.
• Add Rust-owned embedded host for SDK and MCP — #2427.
• Capture inactive tabs and retain modal controls — #2426.

Fixes

• Harden exact-profile browser attachment across Chrome and Edge — #2367.
• Fail closed for unsupported browser and Wayland routes — #2367.
• Restore focus after bounded browser setup — #2367.
• Register bundle in LaunchServices before tccutil reset — #2376.
• Bound tool telemetry volume — #2382.
• Separate local and release identities — #2404.
• Make macOS permission consent explicit and durable — #2407.
• Classify health_report as read-only diagnostics — #2408.
• Request macOS permissions from running daemon — #2414.
• Trust native macOS sentinel focus — #2481.
• Prevent silent ad-hoc local signing — #2495.
• Verify desktop input effects and release modifiers — #2492.
• Show active-tab browser cursors on macOS — #2493.
• Diagnose stale local MCP registrations — #2498.
• Honor Cargo target dir in local installs — #2486.
• Wait for generic type_text completion — #2463.
• Deliver foreground pixel hotkeys through HID — #2464.
• Expose skill install failure details — #2510.
• Support Windows ARM64 browser sessions — #2507.
• Show Windows browser action cursors — #2532.
• Refuse dropped ConsoleHost typing on Windows ARM64 — #2547.
• Enforce authorization in embedded SDK — #2542.
• Isolate Wayland portal connections — #2552.

Thanks to @HsiangNianian, @Mat-Po, @camaleonidas, @hermesagentme-web, @z-x-yang for contributing.

lume

Releases: 0.4.0.

Features

• Automate Driver and Lume attribution — #2267.
• Add schema-v3 product telemetry — #2456.
• Add additional virtio-blk data disks — #2057.

Thanks to @cbrauchli, @cursoragent for contributing.