Week of July 27, 2026

cua-driver

Releases: 0.13.1, 0.14.0, 0.14.1, 0.14.2, 0.16.0, 0.17.0.

Features

• Make SDK-owned runtime the default — #2545.
• Implement SDK-owned runtime RFC — #2561.
• Support multiple direct runtimes per process — #2575.
• Make permission adapter inventory mode-aware — #2576.
• Centralize protected resource grants per runtime — #2577.
• Expose trusted protected-consent hosts — #2578.
• Enforce private observation grants — #2579.
• Enforce desktop input grants — #2580.
• Enforce exact file transfer grants — #2581.
• Enforce consequential and privileged actions — #2585.
• Ship semantic cursor themes — #2591. Breaking change.
• Add local consent UI and complete Wayland certification — #2597.
• Ship vector semantic cursor themes — #2603.
• Simplify permissions and add session identity — #2616. Breaking change.
• Browser_type can replace a field's content, not only append — #2624.
• Move cursor context into session badges — #2677. Breaking change.
• Add verified semantic window framing — #2772.
• Make native desktop actions snapshot-safe — #2783. Breaking change.
• Make native selection and editing foreground-safe — #2789.

Fixes

• Accept letter keys on Windows — #2551.
• Reject browser-origin MCP HTTP requests — #2378.
• Restore v0.12.5 and v0.12.6 installs — #2598.
• Restore macOS background pixel clicks — #2609.
• Recover invalid Windows bounds — #2601.
• Prefer foreground delivery in refusal guidance — #2623.
• Declare WinRects support for GNOME Shell 49 and 50 — #2565.
• Keep press_key modifiers on native Wayland — #2573.
• Verify set_value writes with an AXValue read-back — #2621.
• Pick the AT-SPI action by name, not by position — #2574.
• Carry full 32-bit snapshot generation in element tokens — #2608.
• Avoid leaking XInput masters without uinput — #2631.
• Clarify foreground escalation guidance — #2632.
• Preserve Windows autostart path quoting — #2634.
• Activate Chromium checkboxes safely on Linux — #2633.
• Redial Chrome after native consent — #2635.
• Refuse disabled macOS AX actions — #2637.
• Refuse background window-move drags on Windows — #2559.
• Gate Windows overlay compositing to real pixel changes — #2558.
• Harden GNOME 50 Shell capture — #2226.
• Bind macOS state and actions to requested windows — #2645.
• Distrust web keystroke AX read-back — #2595.
• Refine session cursor feedback — #2665.
• Avoid starting Orca on COSMIC — #2666.
• Keep cursor badges and drags in sync — #2676.
• Declare browser chrome capture coverage — #2599.
• Fall back to the releases API when the baked version has no assets — #2683.
• Advance installers only after release publication — #2685.
• Preserve Screen Sharing keyboard input — #2698.
• Reconcile macOS launch readiness — #2697.
• Prefer semantic routes before GUI fallback — #2776.
• Focus exact target for native menus — #2788.

Thanks to @HsiangNianian, @ai-ag2026, @bluelikeness, @coder-zkl1988, @cresslank, @eyeinthesky6, @goldenfish123321, @hqhq1025, @ipa2800, @maelguimet, @ngnichtel, @rsyuzyov for contributing.

lume

Releases: 0.5.0, 0.5.1.

Features

• Add native macOS VM display — #2641.
• Add live display attach and guest power commands — #2642.
• Support detached VM runs — #2647.
• Open native display by default — #2652.
• Add native file drag and drop — #2653.

Fixes

• Distinguish running VMs from resize recovery — #2636.
• Prevent SSH promise lifecycle crash — #2640.
• Refresh live folder shares — #2649.
• Make native clipboard actions reliable — #2656.
• Run macos installer on vm queue — #2708.

Thanks to @madhavajay for contributing.