Changelog
Every release, as it shipped.
57 releases since 29 September 2026, newest first.
October 2026
The first run asks, optionally, for a work email and name
0.13.1
0.13.0
0.12.0
0.11.2
0.11.1
0.11.0
0.10.1
0.10.0
0.9.1
0.9.0
0.8.5
0.8.4
Taint checks catch more of how data leaves
Told first that it can't be undone
Pick your agents, a warning before what can't be undone, the real logo
Hold what can't be read; agents can't switch it off
One line, and the computer is set up
Installs that work on the laptops people really have
Windows install keeps its window open
What it caught, and teams past week one
Change control, record first
MCP by URL from your dashboard
Any agent, not only local coding tools
Background service (opt-in) and squidbrake explain
Usage stats switched on (only after a yes)
One question on first run, so we can see what Squidbrake catches
Fixes from the chain benchmark
Cursor measures deletes in the open project
Pilot insights show what was caught
Asking again goes back to a person
Security fix for Cursor on Windows
Doctor reads Cursor's own log
Squidbrake doctor
Easier install, clearer status
The Docker image starts again
Discord approvals
See what a database or cloud delete takes with it
Talk to us
See what it changes, and undo it
Change control for teams
Opt-in usage counts
Coding agents work without approval fatigue
Windows disk wipes caught by name
A clear message when the dashboard is gone
Know when Codex isn't running the hook
Guard any MCP server with one command
One command connects every agent
More secrets redacted, more commands read
Every coding agent
Hosted pilots
Pilot programme, JSONL export
Record failed tool calls
Pip install squidbrake, and a Claude Code plugin
September 2026
Secret files are never auto-allowed
Reads commands, catches prompt injection, proves it
Release