v0.0.74
Released Jul 16, 2026
All releases
Release Notes
Pick your rules and skim your results: audits gain include/exclude filters and a summary mode, local dev crawls get dramatically faster, and Windows self-updates stop dying mid-download. Plus a batch of sharp-edge fixes across auth warnings, settings handling, and cloud publishing.
Added
- Filter which rules run with
--rule-include/--rule-exclude.squirrel audit --rule-include ax,performanceruns only those categories;--rule-exclude imagesskips them. Bare names cover a whole category,category/ruletargets a single rule. The report is marked partial and the health score recomputes from what ran. Typos, contradictory filters, and--fail-ongates against excluded categories all error before crawling instead of wasting a run. --summaryfor a quick score check. Console output trims to the score, category breakdown, and issue counts with no per-issue detail: handy for CI logs and fast re-checks. Works onsquirrel auditandsquirrel report.- Localhost audits are much faster. Plain-HTTP loopback targets (your dev server) automatically skip the polite per-host crawl delay, and new
--concurrency/--per-hostflags control parallel fetches. Public sites keep the respectful defaults.
Fixed
- Windows self-updates no longer die mid-download. The background updater ran as a detached child that Windows kills the moment the parent command exits (Job Object semantics), so updates silently never landed. The update now runs in-process with a bounded grace period at exit, and downloads are atomic: a killed update just retries next run.
- A corrupt or unreadable session file now warns loudly in every command. Cloud-touching commands explain the session could not be loaded and how to check it, instead of silently running anonymous. When an environment token authenticates the run anyway, the warning is suppressed entirely: no more false "running anonymous" on authenticated CI runs.
- Settings lookup no longer mistakes permission errors for missing files. An unreadable parent directory now surfaces a clear error instead of silently skipping your local settings.
- Windows users get pointed at the right installer. Running install.sh from Git Bash or MSYS now prints the PowerShell one-liner instead of a dead end.
- Cloud publish reliability: oversized robots.txt content is clamped instead of rejecting the whole report, and a timing window where a just-published report's run could still be reaped and refunded is closed.
Update to this version
squirrelscan will auto-update, or run this command to update now:
$