https://cybertoolchain.io/tools/codezero New releases and features in Codezero, tracked by The Cyber Toolchain. en Sat, 31 Oct 2026 07:46:22 GMT https://codezero.io/changelog https://codezero.io/changelog Sat, 31 Oct 2026 07:46:22 GMT Codezero adds `cordon env --refresh-ca-bundle` to rebuild CA bundles after the eMudhra certificate authority compromise⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Rebuild a configuration's combined CA bundle from its installed public-CA source and existing local Cordon CA with `cordon env --refresh-ca-bundle`; the command preserves the CA certificate, private key, and configuration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Dependency audits now include development and optional dependencies and run daily on main, with release builds preserving locked dependency resolution. • The TLS verifier now explicitly distrusts the compromised eMudhra intermediate public keys, including cross-signed chains and installations with older system roots. Breaking changes: • The npm package now requires Node.js 22.23.4+, 24.22.1+, or 26.12.1+ within those major versions; Node.js 20 is no longer supported. • The Axios helper no longer accepts PAC or SOCKS proxy URLs; only HTTP and HTTPS proxy URLs are supported. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codezero https://docs.codezero.io/installation https://docs.codezero.io/installation Mon, 01 Jun 2026 00:00:00 GMT Cordon v0.3.1 adds `denylist_exceptions` for trusted local services and improves startup diagnostics. • Adds top-level `denylist_exceptions` config to forward traffic to specific `host:port` destinations bypassing the SSRF denylist • Improves service install/startup readiness waiting and logs exact command to diagnose failed starts • Improves startup secret validation to report keyring timeouts with affected service and account details Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codezero https://codezero.io/changelog https://codezero.io/changelog Mon, 01 Jun 2026 00:00:00 GMT Cordon v0.3.1 adds `denylist_exceptions` config to allow trusted SSRF bypasses. • Adds top-level denylist_exceptions in cordon.toml for specific host:port destinations exempt from the SSRF denylist, without injecting credentials. • `cordon doctor` now suggests commands for adding missing 1Password account selectors and warns about macOS Keychain approval requirements. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codezero https://docs.codezero.io/installation https://docs.codezero.io/installation Thu, 28 May 2026 00:00:00 GMT Cordon v0.3.0 adds `cordon doctor` checks for post-upgrade service state and tool network isolation • `cordon doctor` now warns when the running service is older than the installed binary after an upgrade, and shows the command to restart it. • `cordon doctor` now warns when a Go-based tool is missing the network-isolation setting it needs to route through Cordon. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codezero https://codezero.io/changelog https://codezero.io/changelog Thu, 28 May 2026 00:00:00 GMT Cordon v0.3.0 adds `cordon doctor` checks for post-upgrade service state and Go tool network isolation • `cordon doctor` now warns when the running service is older than the installed binary after an upgrade, and shows the command to restart it • `cordon doctor` now warns when a Go-based tool is missing the network-isolation setting it needs to route through Cordon Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codezero https://docs.codezero.io/installation https://docs.codezero.io/installation Tue, 26 May 2026 00:00:00 GMT Cordon v0.2.7 adds token management, self-upgrade, service logs, and audience-bound proxy tokens. • `cordon upgrade` command enables self-upgrade with interactive prompts • `cordon list`, `cordon rotate`, and `cordon revoke` subcommands manage local tokens • `cordon service log` provides direct access to CLI service logs • OpenClaw setup support configures proxying, CA trust, daemon restart, and agent skill installation • 1Password integration supports selecting a specific account in route secret configuration Breaking changes: • Tokenized proxy URL format changed from `cordon` username to `<audience>:<token>@127.0.0.1:<port>`; re-run setup or `cordon env` when refreshing Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codezero https://codezero.io/changelog https://codezero.io/changelog Tue, 26 May 2026 00:00:00 GMT Cordon v0.2.7 adds `cordon token`, `cordon upgrade`, `cordon service log` subcommands and OpenClaw integration. • Adds commands to list, rotate, and revoke local tokens. • Enables self-upgrades through a dedicated `cordon upgrade` command with interactive prompts • Exposes service logs directly from the CLI using the new `cordon service log` subcommand • Adds setup support for OpenClaw integration to configure proxying, CA trust, daemon restart, and agent skills Full history on Cyber Toolchain: https://cybertoolchain.io/tools/codezero