[mo] weekly commit digest — 2026-W32

[github-actions]

89 commit(s) to tw93/Mole in the last 7 days (since 2026-07-27).

Engine churn between tagged releases. Most won't need action — scan for anything that touches a command Burrow wraps or an output format it parses.

• f1949f4 fix(install): keep a spinner up while release assets verify
• c327980 chore: update contributors [skip ci]
• d99e549 fix(uninstall): gate the partial re-check acceptance on an empty plan
• e36b29a test(uninstall): drop the tilde from the remove_mole whitelist fixture
• e18d388 fix(remove): move the config dir to Trash instead of deleting it
• 21cf0d5 fix(uninstall): treat a scan that ran out of budget as partial, not fatal
• e00aec0 Merge pull request #1350 from Yuxin-Qiao/fix/clean-skip-mail-downloads-1344
• 547fd67 test(clean): pin the #1344 assertions so they fail on regression
• 7a8daee test(clean): keep the #1344 e2e stub-heavy so it stays fast
• dc66696 fix(clean): read wrapped bundles in the installed-app scan
• 696aa45 fix(clean): skip a Mail Downloads dir whose sizing times out (#1344)
• c2007e9 chore: update contributors [skip ci]
• fd8222c Merge pull request #1347 from Yuxin-Qiao/fix/install-tmp-root-mktemp
• 8fd74fd fix(uninstall): read wrapped bundles and accept a missing bundle id (#1339)
• 1f16cb7 Merge pull request #1338 from r266-tech/fix/update-explicit-nightly-fallback
• 2f040f3 Merge pull request #1345 from Yuxin-Qiao/fix/clean-cancel-summary-1342
• 77822bc fix(uninstall): let an unreadable path narrow the plan, not end the run
• 16d4615 chore: update contributors [skip ci]
• 2d9f891 fix(install): keep install and update working where lockf never shipped
• 045dfb8 fix(install): derive source temp dir from TMPDIR so cleanup accepts it
• b509abf fix(clean): print final summary when a cleanup step times out (#1342)
• 9d5754a fix(install): name which ancestor check refused, not just that one did
• 26abc0f test(scripts): let CI enforce the function-duplication gate
• 31bf404 build(check): gate shell functions that share a body under different names
• 6ce307f refactor(clean): give the delete guards one process-state translator
• 25c951f refactor(clean): share one engine-absent defer shim and cap the fallbacks
• 83eb641 fix(update): limit git fallback to explicit updates
• 1075d0e chore: update contributors [skip ci]
• de6eae2 release: V1.49.1
• 64c3fa9 fix(install): recover a lapsed sudo session and name every lock refusal
• 6017401 test(update): give the nightly git-fallback stub a real install receipt
• 67974cc Merge pull request #1337 from r266-tech/r266/fix-nightly-hashless-reinstall
• 46f5ba7 fix(install): report why the installation lock refused
• bb202c6 release: V1.49.0
• 5269b65 fix: close cleanup and updater safety gaps
• a8fd1e8 fix(update): stop hashless nightly reinstall loops
• 15bfa7d test(lock): replace timing sleeps with readiness handshakes
• 0b205b0 test(update): harden version probe watchdog
• 60f437a fix(clean): remove unsafe broad temp sweeps
• 4214183 fix(clean): stop var/folders scans from timing out and show scan progress
• 2b8384e fix: harden in-place log truncation against races and guard bypass
• 26f4d47 fix: bound cleanup scans and harden removals
• 455e662 fix(status): stop reporting an active tunnel interface as a proxy
• a2465c8 fix(uninstall): compare sibling bundle ids case-insensitively
• 926c2ef fix: support group-writable install directories
• 3c03d64 refactor: tighten cleanup safety and reporting
• e202077 fix: harden installer and cleanup verification
• 62c6793 docs: record review invariants in agent guidance
• a448078 docs: require download-for-review diagnostics and refresh agent guidance
• 186ea7a docs: move optimize and uninstall notes out of sample fences
• 730b406 fix: protect macOS 26 system apps flagged by bundle drift audit
• 3f42ad3 fix(clean): consult delete guard in dry-run previews
• a33a0b5 fix(clean): keep app scan skip reachable under errexit, name unreadable bundle
• 9bf4d29 fix(update): verify nightly self-heal against the installed binary
• f6f9852 fix: harden cleanup and updater safety
• 71c6bed test: ignore binaries in muted text guard
• bbac1b5 fix(optimize): show repaired preference paths in debug
• 668fbe4 fix(analyze): include Parallels VM storage
• 04834ad docs: define discussion closeout rules
• 45cd3fa fix(clean): protect active power telemetry database
• 7acd8a0 fix(uninstall): handle root-owned app Trash moves (#1331)
• c349e3a docs: streamline agent context guidance
• 4416a2e fix(clean): distinguish active simulators from idle services (#1319)
• 4ae4da7 fix(clean): make stale login item hints actionable (#1320)
• bb2ddb1 fix: harden cleanup, uninstall, and optimize behavior
• 3ebe4f0 fix(clean): harden cleanup safety boundaries
• 626af17 fix: harden maintenance and uninstall workflows
• 5d9e3f3 chore: update contributors [skip ci]
• 1e0d23c feat(status): balance two-column layout without growing dashboard
• e666175 fix(clean): fail closed on app scan aggregation errors
• 17a5f03 fix(core): guard empty files_to_clean expansion in app_protection.sh (#1294)
• 737cb2c Merge pull request #1312 from QuakeWang/fix/battery-capacity
• 6614451 fix(installer): keep incomplete-cleanup summary reachable under errexit (#1303)
• ffb2e1f Track optimize task outcomes explicitly (#1293)
• bf30d0d fix(status): preserve published battery health
• fa19ba3 Merge pull request #1317 from r266-tech/fix/sudo-app-scan-temp-cleanup-1313
• 82fa38f Merge pull request #1322 from r266-tech/r266/fix-uninstall-sudo-local-diagnostic
• 01f9076 fix(clean): fail closed on app directory scan errors
• af8fd4c chore: update contributors [skip ci]
• 0357ff5 Merge pull request #1310 from tw93/dependabot/go_modules/golang.org/x/sys-0.47.0
• d7680c4 test(core): keep Touch ID fallback lint-clean
• 2f97789 Merge pull request #1318 from r266-tech/fix/chatgpt-codex-running-guard-1305
• 23e374b fix(clean): fail closed when app inventory scan fails
• 4dbc3e3 fix(core): fall back to legacy Touch ID config
• bfab41a fix(uninstall): honor sudo_local in removal diagnostics
• c090fbd fix(clean): recognize ChatGPT as Codex Desktop
• 7c72767 fix(clean): keep sudo app scans running
• 07c461c fix(status): prefer normalized ioreg battery capacity
• c5eaeff chore(deps): bump golang.org/x/sys from 0.41.0 to 0.47.0

_{Filed automatically by .github/workflows/upstream-watch.yml.}