Gregory Schier and Claude Opus 5.5
4fc95d264c
Clear Yaak Proxy traffic at launch and follow the real system proxy
...
Captured traffic is now cleared as the app launches by default, with a
"Keep between launches" choice that brings the size limit with it. An
install that had a size limit set keeps its traffic. The Proxy settings
tab is regrouped into Proxy, Decryption, Traffic and Terminal, and the
per-body limit row is gone.
The app now watches macOS proxy settings and follows them: when another
app or the user points the system proxy elsewhere, the override shows as
off and the settings saved for restoring are dropped, so quitting puts
back nothing the app didn't set.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-11-09 12:26:38 -07:00
Gregory Schier and Claude Fable 5.1
77226dbedb
Put Yaak Proxy's search on the shared query engine ( #826 )
...
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com >
2026-11-08 09:07:04 -07:00
Gregory Schier and Claude Opus 5.5
7453869ac6
Move Yaak's sidebar filter onto a shared Rust query engine ( #825 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-11-07 23:30:56 -07:00
Gregory Schier
91696c2d1f
Encrypt Yaak Proxy's databases at rest with SQLCipher ( #823 )
2026-11-06 21:07:38 -07:00
Gregory Schier
c09ee5cc53
Skip Private Relay for the proxy engine's plain-HTTP upstream on macOS ( #818 )
2026-11-06 12:52:30 -07:00
Gregory Schier and Claude Opus 5.5
1129f7aa93
Capture WebSocket, SSE and gRPC ( #814 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-11-06 09:53:56 -07:00
Gregory Schier and Claude Opus 5.5
4ad0533901
Body viewer and decode fixes ( #812 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-11-04 21:21:05 -07:00
Gregory Schier and Claude Opus 5.5
c9ad753672
Bump zip from 7 to 9.0.5 ( #802 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-11-01 20:07:04 -07:00
60ff38cbdc
chore(deps): bump nanoid from 0.4.0 to 0.5.0 ( #771 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gregory Schier <gschier1990@gmail.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-11-01 17:57:17 -08:00
dependabot[bot]
405b8b2567
chore(deps): bump md5 from 0.7.0 to 0.8.0 ( #770 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-01 17:44:11 -08:00
11cbb96746
chore(deps): bump fancy-regex from 0.17.0 to 0.19.2 ( #773 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gregory Schier <gschier1990@gmail.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-11-01 17:16:13 -08:00
dependabot[bot]
4bfb1a106a
chore(deps): bump the cargo group across 1 directory with 15 updates ( #805 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-01 16:57:32 -08:00
0489b67f6c
chore(deps): bump rand from 0.8.7 to 0.10.2 ( #772 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gregory Schier <gschier1990@gmail.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-11-01 16:30:49 -08:00
dependabot[bot]
143acdbd7e
chore(deps): bump rustls from 0.23.45 to 0.23.46 ( #790 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-01 16:30:28 -08:00
Gregory Schier and Claude Opus 5.5
cd431186b6
Patch the Brotli decoder CVE in bundled Node and yaak-http
...
CVE-2026-111497 is an out-of-bounds write in the Brotli decoder. It
reaches Yaak through the bundled Node (`yaaknode`, used by plugins) and
through the pure-Rust `brotli-decompressor` that yaak-http uses to decode
`br` responses.
- Bump the plugin runtime Node from 24.11.1 to 24.22.2 and update the
vendoring script's SHA256 pins from the signed SHASUMS256.txt.
- Move yaak-http from `brotli = "8"` to `brotli = "9"`, locking brotli
9.1.1 and brotli-decompressor 6.2.0.
Tauri's pinned git rev still pulls brotli 8.0.1 and brotli-decompressor
5.0.0 for its embedded-asset compression; that needs a Tauri bump.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-31 00:01:25 -07:00
Gregory Schier and Claude Opus 5.5
f7aea62c07
Privileged helper for system proxy ( #796 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-30 00:41:00 -07:00
Gregory Schier and Claude Opus 5.5
e82ffc53ad
Proxy GUI pass ( #793 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 22:27:18 -07:00
Gregory Schier and Claude Opus 5.5
9bbd28ce4a
PR 2: proxy services ( #787 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-27 15:19:50 -07:00
Gregory Schier and Claude Opus 5.5
686294939b
Rescue the proxy GUI slice ( #785 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-26 06:38:34 -07:00
dependabot[bot]
98cf213b9e
chore(deps): bump the cargo group across 1 directory with 6 updates ( #758 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-15 08:13:22 -07:00
dependabot[bot]
ae354c3261
chore(deps): bump zstd from 0.13.3 to 0.14.0 ( #749 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-15 08:12:27 -07:00
dependabot[bot]
26cbd45f76
chore(deps): bump tower-http from 0.6.10 to 0.7.1 ( #748 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-15 08:12:21 -07:00
dependabot[bot]
c81e8ffd5c
chore(deps): bump yasna from 0.5.2 to 0.6.0 ( #747 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-15 08:12:13 -07:00
dependabot[bot]
29d54cda0d
chore(deps): bump csscolorparser from 0.7.2 to 0.9.0 ( #746 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-15 08:12:06 -07:00
Gregory Schier
9b3715024d
Move response filters into Rust ( #755 )
2026-10-15 06:22:23 -07:00
Gregory Schier
72b43f7110
Move the MCP server into Rust, hosted by the app and yaak mcp ( #752 )
2026-10-14 21:51:40 -07:00
Gregory Schier
b5508e6bb1
Proxy storage: flows table, bodies in blobs.sqlite, settings ( #751 )
2026-10-14 13:50:26 -07:00
Gregory Schier
694c0272cd
Proxy engine: persistent CA, capped capture, upgrade tunnel ( #750 )
2026-10-14 13:10:51 -07:00
dependabot[bot]
c29a62ba6f
chore(deps): bump rustls-platform-verifier from 0.6.2 to 0.7.1 ( #719 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-10 10:45:30 -07:00
dependabot[bot]
f8b1785866
chore(deps): bump dirs from 6.0.0 to 7.0.0 ( #720 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-10 10:45:16 -07:00
dependabot[bot]
d2f14c65b3
chore(deps): bump base64 from 0.22.1 to 0.23.1 ( #721 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-10 10:45:03 -07:00
dependabot[bot]
f467e22f3f
chore(deps): bump dark-light from 2.0.0 to 3.0.0 ( #722 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-10 10:44:53 -07:00
dependabot[bot]
0ca5fc1e2d
chore(deps): bump xxhash-rust from 0.8.15 to 0.8.19 ( #737 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-10 10:44:44 -07:00
dependabot[bot]
9bda8cea1e
chore(deps): bump the cargo group across 1 directory with 10 updates ( #738 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-10 10:44:30 -07:00
Zhizhen He
919e58fc9d
Prevent sync data loss from incomplete tracked files ( #725 )
...
Co-authored-by: Zhizhen He <hezhizhen.yi@gmail.com >
2026-10-06 21:45:26 -07:00
dependabot[bot] and Gregory Schier
b03c41b767
chore(deps): bump git2 from 0.20.4 to 0.21.0 ( #703 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gregory Schier <gschier1990@gmail.com >
2026-09-24 22:09:33 -07:00
dependabot[bot]
1249d15f2c
chore(deps): bump cocoa from 0.26.1 to 0.27.0 ( #702 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-24 21:42:30 -07:00
dependabot[bot]
1707c387ea
chore(deps): bump tokio-tungstenite from 0.26.2 to 0.30.0 ( #701 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-24 21:42:23 -07:00
dependabot[bot]
a497d9f018
chore(deps): bump brotli from 7.0.0 to 8.0.1 ( #700 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-24 21:42:16 -07:00
dependabot[bot]
c13e26656b
chore(deps): bump the cargo group with 4 updates ( #699 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-24 21:42:08 -07:00
Gregory Schier
85904566e7
chore(plugins): replace deprecated zip-extract with zip
2026-09-15 14:24:13 -07:00
dependabot[bot]
12e6e8a977
chore(deps): bump sha1 from 0.10.6 to 0.11.0 ( #674 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-15 14:07:04 -07:00
Gregory Schier
cef569ee15
Add the yaak.run playground API ( #681 )
2026-09-15 13:55:36 -07:00
Gregory Schier and Claude Opus 5
3d6c31440c
Work through the open Dependabot PRs ( #663 )
...
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-09-15 13:18:54 -07:00
Gregory Schier
8c8be31aa2
Expose the web server as an embeddable Axum router
2026-09-14 22:21:43 -07:00
Gregory Schier
fd95b4cba3
Fix responses with more than 100 headers failing on HTTP/1 ( #658 )
2026-09-14 21:04:47 -07:00
dependabot[bot]
1103d05915
Bump zip from 4.0.0 to 7.0.0 ( #637 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-11 08:17:15 -07:00
Gregory Schier and Claude Opus 5
7f8b7bf567
feat(import): remember the user's import selection ( #619 )
...
Co-authored-by: Claude Opus 5 <noreply@anthropic.com >
2026-09-10 15:26:43 -07:00
Gregory Schier
d2d4b80a09
feat(import): merge re-imports from a linked source instead of duplicating ( #618 )
2026-09-01 11:12:07 -07:00
Gregory Schier
f18f93d613
Stage imports before committing ( #571 )
2026-08-31 10:20:44 -07:00
Gregory SchierandClaude Opus 5.5
Zhizhen He