Issues

• cut-release-branch.yml trusts a caller-supplied version with no staleness check — it published v0.40.0 from a 0.40.2 main

  bug
  DIG-Network/dig-updater#97 · Filter by author MichaelTaylor3d opened on Sep 6, 2026

• fix(release): v0.40.0 published with a stale version label -- correction prepared on release/0.40, awaiting dispatch

  kind:businesspriority:1-high
  DIG-Network/dig-updater#96 · Filter by author MichaelTaylor3d opened on Sep 6, 2026

• The beacon has no scheduled task on this Windows host, so nothing auto-updates and there is no unprivileged fallback

  bugkind:business
  DIG-Network/dig-updater#85 · Filter by author MichaelTaylor3d opened on Aug 30, 2026
  2

• Activation::Active is unearned when the MSI/.deb installs the binary outside pc.dest

  kind:maintenance
  DIG-Network/dig-updater#83 · Filter by author MichaelTaylor3d opened on Aug 29, 2026

• Mark security updates in the signed manifest, so a deferral window can respect them

  DIG-Network/dig-updater#82 · Filter by author MichaelTaylor3d opened on Aug 29, 2026

• drop the dig-dns linux/arm64 exemption once v0.16.0 ships — the exemption is now false and will red overbroad_exemptions

  kind:maintenance
  DIG-Network/dig-updater#74 · Filter by author MichaelTaylor3d opened on Aug 22, 2026
  2

• status: trust_state reports all zeros on a pass that verified

  DIG-Network/dig-updater#70 · Filter by author MichaelTaylor3d opened on Aug 19, 2026