What's Changed

• fix(gazed): prevent verification hangs during model retries by @pranavgundu in #836
• fix(gazed): use daemon runtime for config update workers by @pranavgundu in #837
• fix(config): clean up temp files after failed atomic replace by @pranavgundu in #838
• fix(packaging): avoid inserting pam_gaze before custom auth gates by @pranavgundu in #839
• fix(pam): guard SIGUSR1 restore by @pranavgundu in #840
• fix(installer): preserve authselect backend by @pranavgundu in #842
• fix(deps): lock file maintenance by @renovate[bot] in #841
• fix(gui): bound enrollment task lifetime by @pranavgundu in #843
• fix(gui): delegate authorization to daemon by @pranavgundu in #845
• fix(storage): sync persistence boundaries by @pranavgundu in #847
• fix(gui): acquire claims at capture start by @pranavgundu in #844
• fix(nix): enforce biometric account checks by @pranavgundu in #849
• fix(pam): count omarchy face rejections by @pranavgundu in #848
• fix(gui): annotate enrollment task capture by @pranavgundu in #850
• fix(deps): lock file maintenance by @renovate[bot] in #855
• fix(deps): update rust crate zip to 9.1.1 by @renovate[bot] in #854
• fix(kcm): allow configure to reopen settings by @pranavgundu in #857
• fix(gazed): preserve conflicting TPM key files during upgrades by @pranavgundu in #858
• fix(deps): lock file maintenance by @renovate[bot] in #856
• release: v0.4.1 by @pranavgundu in #861
• fix(deps): update rust crate zip to 9.1.2 by @renovate[bot] in #859
• fix(deps): lock file maintenance by @renovate[bot] in #860

Full Changelog: v0.4.0...v0.4.1

What's Changed

• fix(deps): lock file maintenance by @renovate[bot] in #768
• chore(deps): update dependency @viteplus/versions to v2.3.0 by @renovate[bot] in #767
• fix(deps): update rust crate zip to 9.0.2 by @renovate[bot] in #766
• fix(deps): lock file maintenance by @renovate[bot] in #769
• fix(deps): lock file maintenance by @renovate[bot] in #770
• fix(pam): run gaze before fprintd by @pranavgundu in #771
• fix(gazed): tag templates by recognizer by @pranavgundu in #772
• fix(gazed): decrypt templates on startup by @pranavgundu in #774
• fix(gazed): apply config only on success by @pranavgundu in #775
• fix(gazed): harden claims and config by @pranavgundu in #776
• fix(deps): lock file maintenance by @renovate[bot] in #773
• fix(pam): harden face auth boundaries by @pranavgundu in #777
• chore: enroll in oss-scanner by @pranavgundu in #779
• fix(deps): lock file maintenance by @renovate[bot] in #778
• fix(deps): update rust crate sha2 to 0.11.1 by @renovate[bot] in #780
• chore(deps): update dependency goreleaser/nfpm to v2.48.0 by @renovate[bot] in #781
• fix(runtime): find the system ONNX Runtime when no vendor runtime is registered by @onuralpszr in #783
• fix(kde): keep the face slot when fprintd has no reader by @onuralpszr in #782
• fix(deps): update rust non-major dependencies by @renovate[bot] in #784
• feat: hold face auth across suspend by @pranavgundu in #787
• feat(kde): add a native Plasma System Settings page for Gaze by @onuralpszr in #785
• chore(deps): update dependency casey/just to v1.59.0 by @renovate[bot] in #791
• chore(deps): update dependency node to v24.22.0 by @renovate[bot] in #790
• ops: harden release signing and pins by @pranavgundu in #792
• test: add cinnamon extension harness by @pranavgundu in #793
• feat: verify installs and add --no-pam by @pranavgundu in #795
• fix(gui): daemon state, delete confirm by @pranavgundu in #799
• fix(deps): update rust non-major dependencies by @renovate[bot] in #796
• fix(deps): lock file maintenance by @renovate[bot] in #798
• feat(cli): config get/set, doctor report by @pranavgundu in #800
• fix(deps): update rust crate zbus to v6 by @renovate[bot] in #797
• fix(storage): harden template persistence and owner binding by @pranavgundu in #801
• fix(gazed): harden suspend recovery and camera lifecycle by @pranavgundu in #802
• fix(gazed): apply config updates consistently and off-runtime by @pranavgundu in #803
• fix(gazed): harden model loading and inference by @pranavgundu in #804
• fix(pam): harden daemon trust and authentication fallback by @pranavgundu in #805
• chore(deps): update ubuntu:26.04 docker digest to c098726 by @renovate[bot] in #807
• fix(deps): update rust crate libc to 0.2.191 by @renovate[bot] in #808
• fix(gazed): fall back to RGB without IR by @pranavgundu in #806
• refactor: tidy repo by @pranavgundu in #810
• fix(deps): update rust crate zip to 9.0.5 by @renovate[bot] in #812
• fix(deps): lock file maintenance by @renovate[bot] in #813
• fix(deps): update rust non-major dependencies by @renovate[bot] in #814
• fix(deps): lock file maintenance by @renovate[bot] in #815
• fix(deps): lock file maintenance by @renovate[bot] in #816
• fix(deps): lock file maintenance by @renovate[bot] in #817
• chore(deps): update swatinem/rust-cache action to v2.9.3 by @renovate[bot] in #818
• chore(deps): update github actions by @renovate[bot] in #819
• fix(deps): update rust non-major dependencies by @renovate[bot] in #820
• fix: rgb hybrid warmup by @pranavgundu in #823
• chore(deps): update cachix/install-nix-action action to v31.11.3 by @renovate[bot] in #822
• fix(vision): resolve runtime symlinks before probing by @Tunahanyrd in #824
• chore(deps): update taiki-e/install-action action to v2.87.31 by @renovate[bot] in #827
• fix(deps): update rust non-major dependencies by @renovate[bot] in #828
• refactor: colocate tests, rename modules by @pranavgundu in #831
• feat: upright frames in tablet mode by @pranavgundu in #830
• feat(liveness): add IR anti-spoof model by @pranavgundu in #826
• docs: restore facial auth wording by @pranavgundu in #832
• fix(gazed): migrate templates on upgrade by @pranavgundu in #833
• release: v0.4.0 by @pranavgundu in #834
• fix(ci): install openmp on arch by @pranavgundu in #835

New Contributors

• @onuralpszr made their first contribution in #783
• @Tunahanyrd made their first contribution in #824

Full Changelog: v0.3.10...v0.4.0

What's Changed

• fix(deps): update rust crate toml_edit to 0.25.16 by @renovate[bot] in #749
• feat: add ir-only camera mode by @pranavgundu in #751
• fix(deps): update rust non-major dependencies by @renovate[bot] in #752
• chore(deps): update dependency microsoft/onnxruntime to v1.31.0 by @renovate[bot] in #753
• ops: formalize openvino inference check by @pranavgundu in #754
• fix(camera): add libcamera fallback by @pranavgundu in #758
• fix(deps): update rust crate uuid to 1.28.0 by @renovate[bot] in #755
• fix(deb): don't ship config as conffile by @pranavgundu in #761
• fix(deps): update rust crate zip to v9 by @renovate[bot] in #759
• fix(pam): skip confirm on kde greeters by @pranavgundu in #763
• fix(gdm): add debian-gdm dconf profile by @pranavgundu in #764
• release: v0.3.10 by @pranavgundu in #765

Full Changelog: v0.3.9...v0.3.10

What's Changed

• fix(deps): update rust crate zeroize to 1.9.1 by @renovate[bot] in #742
• chore(deps): update dependency @viteplus/versions to v2.2.0 by @renovate[bot] in #743
• fix(doctor): report keyring from gazed by @pranavgundu in #746
• fix: prime gdm-face stack and gdm hook by @pranavgundu in #747
• release: v0.3.9 by @pranavgundu in #748

Full Changelog: v0.3.8...v0.3.9

What's Changed

• chore: polish wording by @pranavgundu in #725
• fix(deps): lock file maintenance by @renovate[bot] in #728
• fix(gnome): unlock without hint delay by @pranavgundu in #730
• fix(deps): lock file maintenance by @renovate[bot] in #729
• fix(doctor): read gazed config first by @pranavgundu in #732
• fix: harden camera, duress and claims by @pranavgundu in #735
• ops: verify tool downloads and audits by @pranavgundu in #737
• fix(deps): lock file maintenance by @renovate[bot] in #736
• feat: add IR camera resolution configuration overrides by @qwmhq in #734
• fix(deps): lock file maintenance by @renovate[bot] in #738
• fix(pam): skip network services by @pranavgundu in #740
• release: v0.3.8 by @pranavgundu in #741

New Contributors

• @qwmhq made their first contribution in #734

Full Changelog: v0.3.7...v0.3.8

What's Changed

• feat: add gnome 51 and ubuntu 26.10 by @pranavgundu in #707
• chore(deps): update actions/setup-node action to v7 by @renovate[bot] in #708
• test: add kde pam compatibility harness by @pranavgundu in #709
• chore(deps): update actions/setup-node action to v7 by @renovate[bot] in #710
• docs: simplify wording by @EJainDev in #711
• feat(packaging): add Fedora 45 support by @pranavgundu in #712
• feat: add intel and amd npu acceleration by @pranavgundu in #713
• perf: avoid frame copies in detection by @pranavgundu in #714
• perf: reload only changed models by @pranavgundu in #720
• fix(deps): lock file maintenance by @renovate[bot] in #718
• chore(deps): update dependency node to v24.21.0 by @renovate[bot] in #717
• fix(deps): update rust crate tokio to v1.53.2 by @renovate[bot] in #716
• chore(deps): update dependency @viteplus/versions to v2.1.1 by @renovate[bot] in #715
• fix(gui): release the camera before enrollment capture by @takitani in #719
• chore(deps): update ubuntu:26.04 docker digest to f144425 by @renovate[bot] in #721
• test: cover pure logic across crates by @pranavgundu in #722
• release: v0.3.7 by @pranavgundu in #723
• fix: resolve clippy lint failures by @pranavgundu in #724

New Contributors

• @EJainDev made their first contribution in #711
• @takitani made their first contribution in #719

Full Changelog: v0.3.6...v0.3.7

What's Changed

• docs: correct Fedora COPR repository command by @pranavgundu in #694
• chore(deps): update dependency @viteplus/versions to v2.1.0 by @renovate[bot] in #688
• chore(deps): pin dependency typescript to 7.0.2 by @renovate[bot] in #695
• feat: unlock GNOME Keyring on greetd face logins by @csaladenes in #699
• chore(deps): update ubuntu:26.04 docker digest to 3595d7f by @renovate[bot] in #700
• feat: omarchy by @pranavgundu in #697
• feat: add duress detection by @pranavgundu in #701
• fix(deps): update rust non-major dependencies by @renovate[bot] in #702
• refactor: restructure workspace layout by @pranavgundu in #703
• fix(ui): clarify labels and naming by @pranavgundu in #704
• release: v0.3.6 by @pranavgundu in #705

New Contributors

• @csaladenes made their first contribution in #699

Full Changelog: v0.3.5...v0.3.6

What's Changed

• fix(camera): resolve deduped IR targets by @pranavgundu in #692
• feat: v0.3.5 by @pranavgundu in #693

Full Changelog: v0.3.4...v0.3.5

What's Changed

• feat: kde keyring by @pranavgundu in #644
• fix(arch): stop re-adding pam to sudo by @pranavgundu in #652
• fix(auth): capture V4L2 directly by @pranavgundu in #653
• fix(auth): detect ssh via logind remote by @pranavgundu in #654
• fix(auth): gate pam_internal setters by @pranavgundu in #656
• fix(pam): gate pam_gaze behind faillock by @pranavgundu in #657
• fix(nix): include module used by core tests by @jacobmichels in #655
• fix(deps): lock file maintenance by @renovate[bot] in #660
• fix(deps): lock file maintenance by @renovate[bot] in #662
• fix(doctor): gate root-only checks by @pranavgundu in #663
• fix(deps): update rust non-major dependencies to 0.25.4 by @renovate[bot] in #665
• fix: close pam bypasses by @pranavgundu in #667
• fix(pam): flush tty before confirmation by @pranavgundu in #668
• fix(config): stop migrating on pam load by @pranavgundu in #669
• fix(daemon): enforce seat camera check by @pranavgundu in #670
• fix(pam): gate prompt retire on tty svcs by @pranavgundu in #671
• fix(daemon): key pam_internal by uid by @pranavgundu in #672
• style: fmt by @pranavgundu in #673
• fix: unlock keyring under selinux gdm by @pranavgundu in #676
• feat(doctor): warn on sudo targetpw by @pranavgundu in #677
• fix: enrollment bumps by @pranavgundu in #678
• style: fmt by @pranavgundu in #679
• style(gui): collapse nested if by @pranavgundu in #680
• fix(deps): update rust crate opencv to 0.101.0 by @renovate[bot] in #682
• feat(ir): support profile-driven I2C emitters by @stephen-zeng in #681
• fix(camera): abandon hung pipeline stop by @pranavgundu in #685
• docs: clarify OpenVINO device support by @pranavgundu in #686
• fix(deps): lock file maintenance by @renovate[bot] in #687
• feat(nix): add opt-in KWallet unlock by @pranavgundu in #664
• feat: v0.3.4 by @pranavgundu in #689
• fix(deps): restore termina lock version by @pranavgundu in #690

New Contributors

• @jacobmichels made their first contribution in #655
• @stephen-zeng made their first contribution in #681

Full Changelog: v0.3.3...v0.3.4

What's Changed

• fix(cinnamon): repair settings schema by @pranavgundu in #622
• fix(docs): render version switcher client-only by @pranavgundu in #623
• fix(deps): update rust crate ureq to 3.4.2 by @renovate[bot] in #624
• fix(deps): lock file maintenance by @renovate[bot] in #625
• feat(pam): retry face after bad password by @pranavgundu in #627
• fix(deps): update rustls to 0.23.45 by @pranavgundu in #628
• fix(deps): lock file maintenance by @renovate[bot] in #629
• fix(deps): lock file maintenance by @renovate[bot] in #630
• fix(pam): warn when sudo misses gaze by @pranavgundu in #632
• fix(deps): update rust non-major dependencies by @renovate[bot] in #633
• fix(deps): update rust crate clap_complete to 4.6.11 by @renovate[bot] in #634
• chore(deps): update ubuntu:26.04 docker digest to cd21a4f by @renovate[bot] in #635
• chore(deps): update ubuntu:26.04 docker digest to da6fc2b by @renovate[bot] in #636
• feat: tpm gnome keyring unlock by @Twest2 in #597
• docs: fix outdated guides and comparison by @pranavgundu in #638
• build: sync gaze-security to 0.3.2 by @pranavgundu in #639
• fix(deps): pin rust crate tempfile to =3.27.0 by @renovate[bot] in #637
• style: standardize code comments by @pranavgundu in #640
• style: standardize repo conventions by @pranavgundu in #641
• fix(deps): update rust crate zeroize to 1.9.0 by @renovate[bot] in #642
• docs: clarify non-obvious vision and authentication assumptions by @pranavgundu in #643
• fix(doctor): read full gdm dconf chain by @pranavgundu in #645
• fix(cpu): stop gazed loop on non-avx2 by @pranavgundu in #648
• fix(deps): update rust non-major dependencies by @renovate[bot] in #647
• feat: v0.3.3 by @pranavgundu in #649

New Contributors

• @Twest2 made their first contribution in #597

Full Changelog: v0.3.2...v0.3.3