Fixes
- Secret scanning respects request locations. Valid requests with percent or Unicode escapes in their bodies no longer fail because of an allowed header placeholder. The fix covers HTTP/1 and HTTP/2 and retains checks for forbidden placeholders. Secrets are not substituted into trailers.
- macOS hard links remain writable. Removing one filename no longer prevents writes through surviving hard links. Open handles retain permitted access after the final link is removed, with host permission checks preserved.
- Ruby standalone builds use the correct dependency pin. Refreshed the standalone Cargo lockfile and added a registry-pin check.
- Rust publication respects development dependencies. Versioned development dependencies are published before crates that require them.
SDK changes
Clearer placeholder permissions. Preferallow_placeholder_for in Rust and Python, allowPlaceholderFor in TypeScript, and AllowPlaceholderFor in Go. The previous passthrough-named APIs remain as deprecated aliases. Policy behavior, CLI options, and stored fields are unchanged.
Typed Ruby errors. Core failures now raise specific subclasses of Microsandbox::Error, with stable code values. Existing rescue Microsandbox::Error handlers continue to work. Argument validation still raises ArgumentError or TypeError.