Socket v9.24.0

Socket v9.24.0

What changed

• Bumped the shared Socket version for the requested release.
• Refreshed Git-backed Socket marketplace consumers after the release was published.

Breaking changes

• None.

Migration/upgrade notes

• Run codex plugin marketplace upgrade socket to refresh a local Codex install.

Verification performed

• Ran uv run scripts/validate_socket_metadata.py.
• Ran scripts/release.sh release-ready 9.24.0.
• Passed the temporary CODEX_HOME Socket marketplace add/remove smoke test at commit 170f309f4135aa8f151027189ecb14f72bccea6c.
• Queried the GitHub Dependabot alerts API and found 0 open alert(s); severity counts: none.
• Captured release evidence at 2026-07-23T22:01:53Z.
• Verified the GitHub release object after creation.
• Verified branch accounting before the marketplace upgrade.

Subtree accounting

• No subtree push required; Socket owns the canonical plugin payloads for this release.

Socket v9.23.0

Socket v9.23.0

What changed

• Bumped the shared Socket version for the requested release.
• Added tvos-app-experience-workflow for remote-first focus, Large Text,
  hardware gates, and TVMLKit migration decisions.
• Added tvos-media-playback-workflow for AVKit-first player selection,
  remote-command ownership, Now Playing state, and playback validation.
• Exported both skills for Hermes and clarified their Claude/Cowork boundary.
• Refreshed Git-backed Socket marketplace consumers after the release was published.

Breaking changes

• None.

Migration/upgrade notes

• Run codex plugin marketplace upgrade socket to refresh a local Codex install.

Verification performed

• Ran uv run scripts/validate_socket_metadata.py.
• Ran scripts/release.sh release-ready 9.23.0.
• Passed the temporary CODEX_HOME Socket marketplace add/remove smoke test at commit f59604953ee10b17f39c41357be6405a3a7535db.
• Queried the GitHub Dependabot alerts API and found 0 open alert(s); severity counts: none.
• Captured release evidence at 2026-07-23T19:24:00Z.
• Verified the GitHub release object after creation.
• Verified branch accounting before the marketplace upgrade.

Subtree accounting

• No subtree push required; Socket owns the canonical plugin payloads for this release.

Socket v9.22.0

Socket v9.22.0

What changed

• Bumped the shared Socket version for the requested release.
• Added F# web-framework selection guidance plus focused Giraffe, Falco, and Oxpecker workflows.
• Routed Azure work to Microsoft's official Azure Skills plugin, preserving Socket's provider-neutral boundary instead of duplicating Azure MCP, CLI, or deployment setup.
• Exported the portable F# web and cloud-routing guidance through the Hermes skill tap.
• Refreshed Git-backed Socket marketplace consumers after the release was published.

Breaking changes

• None.

Migration/upgrade notes

• Run codex plugin marketplace upgrade socket to refresh a local Codex install.

Verification performed

• Ran uv run scripts/validate_socket_metadata.py.
• Ran scripts/release.sh release-ready 9.22.0.
• Passed the temporary CODEX_HOME Socket marketplace add/remove smoke test at commit 118784104d35993d3e7026314b8eda27fbdeaff8.
• Queried the GitHub Dependabot alerts API and found 0 open alert(s); severity counts: none.
• Captured release evidence at 2026-07-23T18:04:06Z.
• Verified the GitHub release object after creation.
• Verified branch accounting before the marketplace upgrade.

Subtree accounting

• No subtree push required; Socket owns the canonical plugin payloads for this release.

Socket v9.21.0

Socket v9.21.0

What changed

• Added Apple Dev workflows for diagnosing macOS privacy permissions, implementing sandboxed persistent file access, and tracing entitlements across project, profile, signed-code, and runtime authorization states.
• Added a Reverse Engineering workflow for exact-build research into macOS controls such as TCC, App Sandbox, Gatekeeper, XProtect, and system policy, with explicit public-contract, private-evidence, runtime-observation, and inference boundaries.
• Aligned Cybersecurity handoffs, existing Apple and reverse-engineering workflows, Hermes exports, Claude Code and Cowork metadata, architecture inventories, and user-facing discovery surfaces.
• Added forward-scenario and contract tests covering Automation, Accessibility, Developer Tools, bookmarks, nested entitlements, layered filesystem denials, XProtect evidence, and private TCC comparisons.
• Bumped the shared Socket version to 9.21.0.

Breaking changes

• None.

Migration/upgrade notes

• Run codex plugin marketplace upgrade socket to refresh a local Codex install.

Verification performed

• Ran uv run scripts/validate_socket_metadata.py.
• Ran scripts/release.sh release-ready 9.21.0.
• Passed the temporary CODEX_HOME Socket marketplace add/remove smoke test at commit 6bc315b6230ce826cba6423ef8912d542a289ef8.
• Queried the GitHub Dependabot alerts API and found 0 open alert(s); severity counts: none.
• Captured release evidence at 2026-07-19T19:38:03Z.
• Verified the GitHub release object after creation.
• Verified branch accounting before the marketplace upgrade.

Subtree accounting

• No subtree push required; Socket owns the canonical plugin payloads for this release.

v9.20.0

Socket v9.20.0

What changed

• Added safari-mcp-workflow for scoped Safari Technology Preview browser inspection, reversible interaction validation, privacy boundaries, and Safari-specific evidence reporting.
• Exported the workflow through the Hermes skill tap and Apple Dev Skills discovery surfaces.
• Bumped the shared Socket version for the requested release.
• Refreshed Git-backed Socket marketplace consumers after the release was published.

Breaking changes

• None.

Migration/upgrade notes

• Run codex plugin marketplace upgrade socket to refresh a local Codex install.

Verification performed

• Ran uv run scripts/validate_socket_metadata.py.
• Ran scripts/release.sh release-ready 9.20.0.
• Passed the temporary CODEX_HOME Socket marketplace add/remove smoke test at commit 478aac9fdca1e0889bbace5b7c4f577db955f49a.
• Queried the GitHub Dependabot alerts API and found 0 open alert(s); severity counts: none.
• Captured release evidence at 2026-07-19T18:28:11Z.
• Verified the GitHub release object after creation.
• Verified branch accounting before the marketplace upgrade.

Subtree accounting

• No subtree push required; Socket owns the canonical plugin payloads for this release.

Socket v9.19.0

What changed

• Added four Apple Dev workflows for choosing a macOS-hosted boundary, building Virtualization framework hosts, and operating persistent Linux or clean macOS development guests.
• Expanded Server-Side Swift guidance for Apple container CLI 1.x, persistent container machines, TOML migration, structured output, home-mount isolation, and nested-virtualization evidence.
• Added a disposable Cybersecurity analysis-lab workflow with explicit host-integration, network, baseline, evidence-export, reset, and teardown controls.
• Aligned guest-versus-host macOS security evidence, Hermes exports, Claude and Cowork compatibility, architecture inventory, plugin metadata, and documentation.
• Added ten scenario-level forward contracts covering container, Linux VM, macOS VM, saved-state, nested-virtualization, isolated-lab, and physical-Mac decisions.

Breaking changes

• None.

Migration and upgrade

• Run codex plugin marketplace upgrade socket to refresh the local marketplace after publication.
• Apple container 1.x guidance intentionally does not preserve removed container system property commands; use the documented TOML configuration path.

Verification

• 268 Apple Dev tests passed.
• 126 Socket tests passed with one intentional skip.
• Apple Dev and Cybersecurity child validators passed.
• Socket marketplace, Hermes, Claude/Cowork, and architecture validation passed.
• The release-ready gate and temporary marketplace add/remove smoke test passed on merged main commit 6dee4b45.
• GitHub reported zero open Dependabot alerts.
• No subtree push was required because Socket owns the canonical payloads in this release.

Socket v9.18.0

Socket v9.18.0

What changed

• Added the model-lab-skills plugin with 13 workflows for experiment design, dataset preparation, fine-tuning, evaluation, checkpoint comparison, representation research, steering, refusal ablation, authorized jailbreak evaluation, tool calling, Apple runtime selection, and runtime benchmarking.
• Added deterministic experiment-manifest, paired-evaluation, and model-provenance helpers with typed validation and destructive-output guards.
• Added dated Apple AI routing across Core AI, Core ML, MLX, MLX Swift, MLX LM, Foundation Models, ExecuTorch Core ML, and the experimental ExecuTorch MLX delegate, with explicit handoffs to Apple-owned Core AI skills.
• Exported the portable Model Lab inventory through the Hermes skill tap and added Claude Code and Cowork compatibility metadata.
• Bumped all maintained Socket version surfaces to 9.18.0.

Breaking changes

• None.

Migration/upgrade notes

• Run codex plugin marketplace upgrade socket to refresh a local Codex install.
• Install model-lab-skills from the Socket marketplace when model research, training, evaluation, or Apple runtime work is needed.

Verification performed

• Completed three isolated forward-test passes and a post-fix re-review; all findings were addressed.
• Ran uv run ruff check ., uv run mypy, and the full test suite: 111 passed and 1 skipped.
• Passed Socket metadata, Hermes, Claude Code/Cowork, and all 13 skill validators.
• Passed scripts/release.sh release-ready 9.18.0.
• Passed the temporary CODEX_HOME Socket marketplace add/remove smoke test at commit cc4355f04e7c9d27ef6688d73774057d2be50274.
• Queried the GitHub Dependabot alerts API and found 0 open alerts.

Subtree accounting

• No subtree push required; Socket owns the canonical plugin payloads for this release.

Socket v9.17.0

Socket v9.17.0

What changed

• Added five portable Swift language-tooling workflows for choosing tools, SwiftSyntax transformations, compiler inspection, SourceKit semantics and indexing, and SourceKit-LSP diagnosis.
• Added the Swift Package Extension workflow for build and command plugins, macros, package traits, generated sources, permissions, and Xcode handoffs.
• Made Swiftly and Xcode explicit, separately verified toolchain owners across the new Swift workflows.
• Exported the portable workflows through the Hermes skill tap and aligned Codex, Claude Code, and Cowork metadata.

Breaking changes

• None.

Migration/upgrade notes

• Run codex plugin marketplace upgrade socket to refresh a local Codex install.

Verification performed

• Ran uv run scripts/validate_socket_metadata.py.
• Ran the Socket root suite: 102 passed and 1 skipped.
• Ran the Apple Dev Skills suite: 263 passed.
• Ran Ruff, mypy, Apple Dev docs validation, Hermes validation, and Claude Code/Cowork validation.
• Ran scripts/release.sh release-ready 9.17.0.
• Passed the temporary CODEX_HOME Socket marketplace add/remove smoke test at commit c722b4ed35357abb3ebc40314b1e6b573a91b30d.
• Queried the GitHub Dependabot alerts API and found 0 open alert(s); severity counts: none.
• Captured release evidence at 2026-07-18T23:29:07Z.
• Verified the GitHub release object after creation.
• Verified branch accounting before the marketplace upgrade.

Subtree accounting

• No subtree push required; Socket owns the canonical plugin payloads for this release.

Socket v9.16.0

Socket v9.16.0

What changed

• Added the Socket Claude Code marketplace with 22 portable skill plugins.
• Added Cowork compatibility classification: skills-first, remote MCP only, with local Mac integrations kept Claude Code-only.
• Added Claude-native MCP adapters for Cardhop and Things, plus compatibility validation and maintainer guidance.

Breaking changes

• None.

Migration/upgrade notes

• Codex: run codex plugin marketplace upgrade socket.
• Claude Code: add gaelic-ghost/socket as a marketplace, then install the desired Socket plugins.

Verification performed

• Ran Ruff, mypy, and pytest (102 passed, 1 skipped).
• Ran Socket, Hermes, and Claude compatibility validators.
• Passed Claude marketplace validation and the temporary Socket marketplace add/remove smoke test.

Subtree accounting

• No subtree push required; Socket owns the canonical payloads included in this release.

Socket v9.15.0

Socket v9.15.0

What changed

• Added native Metal 3/4 renderer, GPTK 3/4 routing, MetalFX, GPU asset-streaming, and experimental neural-rendering workflows to game-dev-skills.
• Routed existing game-stack and profiling guidance to the new owners while keeping Apple’s GPTK 4 skill corpus upstream.
• Bumped the shared Socket version for this minor release.

Breaking changes

• None.

Migration/upgrade notes

• Run codex plugin marketplace upgrade socket to refresh a local Codex install.

Verification performed

• Ran uv run scripts/validate_socket_metadata.py.
• Ran scripts/release.sh release-ready 9.15.0.
• Passed the temporary CODEX_HOME Socket marketplace add/remove smoke test at commit 0431d1e25084d4a4af63e5d3c6b431ffd60c73c1.
• Queried the GitHub Dependabot alerts API and found 0 open alert(s); severity counts: none.
• Captured release evidence at 2026-07-15T21:45:03Z.
• Verified the GitHub release object after creation.
• Verified branch accounting before the marketplace upgrade.

Subtree accounting

• No subtree push required; Socket owns the canonical plugin payloads for this release.