[mo] weekly commit digest — 2026-W28

[github-actions]

43 commit(s) to tw93/Mole in the last 7 days (since 2026-06-29).

Engine churn between tagged releases. Most won't need action — scan for anything that touches a command Burrow wraps or an output format it parses.

• 4635442 docs: align release-notes template with the shipped release format
• 804e4eb fix(clean): preserve errexit around sudo batch scans
• ce059d2 fix(clean): clarify dry-run cleanup summaries
• 0172d1a docs: single-source release notes format and codify the sibling guard rule
• 2f8a570 fix(status): clarify header memory and disk specs
• 794fed8 chore(cli): point the brand banner at mole.fit
• 8646f26 chore(release): prepare V1.45.0
• 7b80d80 fix(lint): move the OSC 8 string terminator out of the printf format
• 1d9e0ff fix(safety): classify lapsed-sudo batches and skip Apple labels in bootout
• ccd146f feat(clean): quiet defaults for advisory rows and free space summary
• 7f6f3bc perf(optimize): bound the Spotlight speed probe and show progress
• 8c2b938 feat(ui): quieter clean output with clickable paths and live progress
• 42f8aff perf(optimize): lint preference plists in batches under a time budget
• ea2850b fix(uninstall): boot out login item helpers and drop the sfltool prompt
• 4d3c62c perf(clean): batch privileged file sweeps into one xargs rm
• d9181b5 ci: scan unsafe rm in entrypoints
• 04f4b6c fix(safety): reject Homebrew root deletion targets
• 4ad9e35 test: cover safe_remove_symlink, a previously untested safety helper
• cafa5b1 fix(clean): stop Edge/Brave version cleanup from deleting staged updates
• e72c027 ci: add job timeouts and concurrency, pin floating actions
• 1b12778 test: fix three vacuous assertions that could never fail
• 751756f fix(ui): restore the caller's traps when a menu exits
• 2f222a5 fix(clean): keep files when a probe errors instead of treating it as empty
• 7ad7b60 fix(clean): enforce the user whitelist in safe_remove
• 9753d5e ci: widen unsafe-rm scan and fix bundle-drift exit propagation
• 78930c9 fix(sudo): escape app names in the GUI password prompt
• b7b000d fix(safety): reject bare top-level roots in the deletion validator
• c49123e chore: update contributors [skip ci]
• 957e1e2 docs: add batch.sh hotspot entry and two shell pitfalls
• a8fc92b fix(uninstall): unload path-referenced launch agents under the sibling guard
• 8621ba7 Merge pull request #1187 from hhh2210/fix/uninstall-shared-bundle-id
• ec1cd64 fix(uninstall): harden sibling guard against inverse-name and shared-identity paths
• 00ec74b feat(clean): cover LM Studio cache leftover, Chrome model stores, stale JetBrains dirs
• 50c4dfd feat(clean): prune stale Handoff shared-pasteboard staging items
• 2eaf70e fix(clean): do not treat root-only-readable daemon binaries as orphaned
• 77c7800 fix(uninstall): extend sibling guard to cask zap, colliding names, and toolchain heuristics
• d44f9c4 docs(uninstall): explain why /Volumes siblings count in the shared bundle-id guard
• 7b6f148 fix(uninstall): keep side-by-side installs that share a bundle id (#1186)
• b6f05ed chore: update contributors [skip ci]
• 24c86ae test(uninstall): assert Karabiner main bundle id is uninstallable
• 678c17d chore(deps): bump actions/cache from 5.0.5 to 6.1.0 (#1173)
• 2f2c68f chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 (#1172)
• d9d1345 fix(uninstall): allow Karabiner-Elements to be uninstalled (#1171)

_{Filed automatically by .github/workflows/upstream-watch.yml.}