chore: release v0.28.0

Author: lukehinds

CHANGELOG.md

@@ -1,5 +1,51 @@
 # Changelog
 
+## [0.28.0] - 2026-04-03
+
+### Bug Fixes
+
+- *(proxy)* Add tls_ca field to file:// credential test fixtures
+
+- *(proxy)* Simplify tls_ca to tilde expansion and doc clarification
+
+- *(proxy)* Expand and validate tls_ca paths at credential resolution
+
+
+### Features
+
+- *(policy)* Expand git config paths in credentials group
+
+- *(credential,proxy)* Add missing tls_ca and tls_connector fields
+
+- *(proxy)* Add custom CA certificate support for upstream TLS (closes #545)
+
+- *(policy)* Skip system temp grants when HOME is nested under TMPDIR
+
+- *(policy)* Split homebrew group into platform-specific variants
+
+
+### Refactoring
+
+- *(proxy)* Wrap CA file read in Zeroizing and improve error messages
+
+- *(proxy)* Reuse policy::expand_path for tls_ca expansion
+
+- *(capability_ext)* Extract locked test helpers for env isolation
+
+- *(test)* Extract environment variable guard into reusable utility
+
+
+### Testing
+
+- *(cli)* Remove proptest regression file for manifest roundtrip
+
+- *(profile,query)* Isolate environment variables and fix symlink test
+
+
+### Style
+
+- Fix rustfmt in tls_ca path expansion closure
+
 ## [0.27.0] - 2026-04-02
 
 ### Bug Fixes

Cargo.lock

@@ -15,7 +15,7 @@ name = "nono_ffi"
 crate-type = ["cdylib", "staticlib"]
 
 [dependencies]
-nono = { version = "0.27.0", path = "../../crates/nono" }
+nono = { version = "0.28.0", path = "../../crates/nono" }
 
 [build-dependencies]
 cbindgen.workspace = true

bindings/c/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "nono-cli"
-version = "0.27.0"
+version = "0.28.0"
 edition.workspace = true
 rust-version.workspace = true
 authors.workspace = true
@@ -36,8 +36,8 @@ default = []
 test-trust-overrides = []
 
 [dependencies]
-nono = { version = "0.27.0", path = "../nono" }
-nono-proxy = { version = "0.27.0", path = "../nono-proxy" }
+nono = { version = "0.28.0", path = "../nono" }
+nono-proxy = { version = "0.28.0", path = "../nono-proxy" }
 clap = { version = "4", features = ["derive", "env"] }
 colored = "3"
 similar = "2"

crates/nono-cli/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "nono-proxy"
-version = "0.27.0"
+version = "0.28.0"
 edition.workspace = true
 rust-version.workspace = true
 authors.workspace = true
@@ -12,7 +12,7 @@ keywords = ["sandbox", "security", "proxy", "network"]
 categories = ["network-programming", "web-programming"]
 
 [dependencies]
-nono = { version = "0.27.0", path = "../nono" }
+nono = { version = "0.28.0", path = "../nono" }
 tokio.workspace = true
 hyper.workspace = true
 hyper-util.workspace = true

crates/nono-proxy/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "nono"
-version = "0.27.0"
+version = "0.28.0"
 edition.workspace = true
 rust-version.workspace = true
 authors.workspace = true