Build info

This release was built with .NET SDK 10.0.301 on Microsoft Windows Server 2025 Datacenter, using cimian-pkg v2026.07.21.1102, via a GitHub Actions workflow here: https://github.com/windowsadmins/cimian/actions/runs/29859513896. It is provided unsigned — see signing instructions at the bottom.

Full Changelog: v0.1.6...v0.1.7

Signing for enterprise deployment

Sign the binaries and MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

# Sign all binaries (run after extracting the MSI/nupkg payload)
Get-ChildItem -Recurse -Include *.exe,*.dll | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

# Sign the MSI installers (run separately, after binaries are signed and repackaged)
Get-ChildItem -Filter "Cimian-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Built from commit fd730458a62fdc69d1171c83b4de61fe63422748.

Build info

This release was built with .NET SDK 10.0.301 on Microsoft Windows Server 2025 Datacenter, using cimian-pkg c53833e, via a GitHub Actions workflow here: https://github.com/windowsadmins/cimian/actions/runs/29780896825. It is provided unsigned — see signing instructions at the bottom.

What's Changed

• ApplyPolicyOverrides: never override per-device ClientIdentifier/SoftwareRepoURL (orphan guardrail) in #73
• Revert #73: keep policy-override capability for ClientIdentifier/SoftwareRepoURL in #74
• recurring loop-exempt field for idempotent maintenance items in #71

Full Changelog: v0.1.4...v0.1.6

Signing for enterprise deployment

Sign the binaries and MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

# Sign all binaries (run after extracting the MSI/nupkg payload)
Get-ChildItem -Recurse -Include *.exe,*.dll | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

# Sign the MSI installers (run separately, after binaries are signed and repackaged)
Get-ChildItem -Filter "Cimian-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Built from commit 223917d96b3adf8a9b57f9138648840908337318.

Build info

This release was built with .NET SDK 10.0.301 on Microsoft Windows Server 2025 Datacenter, using cimian-pkg c53833e, via a GitHub Actions workflow here: https://github.com/windowsadmins/cimian/actions/runs/29721945877. It is provided unsigned — see signing instructions at the bottom.

What's Changed

• LoopGuard: finite backoff cap (LoopMaxTime) instead of permanent suppression in #72

Full Changelog: v0.1.3...v0.1.4

Signing for enterprise deployment

Sign the binaries and MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

# Sign all binaries (run after extracting the MSI/nupkg payload)
Get-ChildItem -Recurse -Include *.exe,*.dll | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

# Sign the MSI installers (run separately, after binaries are signed and repackaged)
Get-ChildItem -Filter "Cimian-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Built from commit c4b7dc593b1a07c57a767ca69e612eb77391e014.

Build info

This release was built with .NET SDK 10.0.301 on Microsoft Windows Server 2025 Datacenter, using cimian-pkg c53833e, via a GitHub Actions workflow here: https://github.com/windowsadmins/cimian/actions/runs/29666464688. It is provided unsigned — see signing instructions at the bottom.

What's Changed

• managedsoftwareupdate: install SbinInstaller MSI via msiexec to avoid self-replacement lock in #69
• managedsoftwareupdate: merge MDM policy overrides from HKLM\SOFTWARE\Policies\Cimian in #70

Full Changelog: v0.1.2...v0.1.3

Signing for enterprise deployment

Sign the binaries and MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

# Sign all binaries (run after extracting the MSI/nupkg payload)
Get-ChildItem -Recurse -Include *.exe,*.dll | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

# Sign the MSI installers (run separately, after binaries are signed and repackaged)
Get-ChildItem -Filter "Cimian-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Built from commit 7cb7b14424c6c6e9c9b128a174616a56e99dd472.

Build info

This release was built with .NET SDK 10.0.301 on Microsoft Windows Server 2025 Datacenter, using cimian-pkg c53833e, via a GitHub Actions workflow here: https://github.com/windowsadmins/cimian/actions/runs/28076954397. It is provided unsigned — see signing instructions at the bottom.

What's Changed

• import: don't emit hidden-wrapper ProductCode for installer-type MSIs in #64

Full Changelog: v0.1.1...v0.1.2

Signing for enterprise deployment

Sign the binaries and MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

# Sign all binaries (run after extracting the MSI/nupkg payload)
Get-ChildItem -Recurse -Include *.exe,*.dll | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

# Sign the MSI installers (run separately, after binaries are signed and repackaged)
Get-ChildItem -Filter "Cimian-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Built from commit 5b1d5f2b2ca59af237ec2cb32501d7cdc8f49a1f.

Build info

This release was built with .NET SDK 10.0.301 on Microsoft Windows Server 2025 Datacenter, using cimian-pkg c53833e, via a GitHub Actions workflow here: https://github.com/windowsadmins/cimian/actions/runs/28027776642. It is provided unsigned — see signing instructions at the bottom.

Full Changelog: v0.1.0...v0.1.1

Signing for enterprise deployment

Sign the binaries and MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

# Sign all binaries (run after extracting the MSI/nupkg payload)
Get-ChildItem -Recurse -Include *.exe,*.dll | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

# Sign the MSI installers (run separately, after binaries are signed and repackaged)
Get-ChildItem -Filter "Cimian-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Built from commit eb31df877c0eaac78f2be846547b29eff7080416.

Build info

This release was built with .NET SDK 10.0.301 on Microsoft Windows Server 2025 Datacenter, using cimian-pkg 63150e6, via a GitHub Actions workflow here: https://github.com/windowsadmins/cimian/actions/runs/27855174612. It is provided unsigned — see signing instructions at the bottom.

What's Changed

• osversion: match Windows 11 marketing version in OS eligibility gate in #63
• MSC improvements: per-row stages, removal UX, failure surfacing (WIP) in #57

Full Changelog: v0.0.9...v0.1.0

Signing for enterprise deployment

Sign the binaries and MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

# Sign all binaries (run after extracting the MSI/nupkg payload)
Get-ChildItem -Recurse -Include *.exe,*.dll | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

# Sign the MSI installers (run separately, after binaries are signed and repackaged)
Get-ChildItem -Filter "Cimian-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Built from commit 9ce1d77f06a431ec42100352558b4b84b7274768.

Build info

This release was built with .NET SDK 10.0.301 on Microsoft Windows Server 2025 Datacenter, using cimian-pkg 63150e6, via a GitHub Actions workflow here: https://github.com/windowsadmins/cimian/actions/runs/27852148533. It is provided unsigned — see signing instructions at the bottom.

What's Changed

• Drain git pull pipes and bound the wait in cimiimport in #53
• cimiimport --emit-installs and wrapper-MSI display_name fallback in #55
• Address review feedback on emit-installs wrapper-MSI handling in #56
• stale-usage: intent-based scoping and default-on in #54
• managedsoftwareupdate: honour OnDemand items in #60
• submodule: bump cli/cimipkg to 63150e6 (msi supersede + reinstall) in #62
• cimiimport: stamp _metadata (created_by/creation_date) at import time in #61
• loopguard: global LoopGuardEnabled config to disable suppression fleet-wide in #59
• managedsoftwareupdate: 404 fallback chain for primary manifest in #58

Full Changelog: v0.0.8...v0.0.9

Signing for enterprise deployment

Sign the binaries and MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

# Sign all binaries (run after extracting the MSI/nupkg payload)
Get-ChildItem -Recurse -Include *.exe,*.dll | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

# Sign the MSI installers (run separately, after binaries are signed and repackaged)
Get-ChildItem -Filter "Cimian-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Built from commit 43c7543ebe1a8eb6649f82992f9a324c55a0a8ab.

Build info

This release was built with .NET SDK 10.0.300 on Microsoft Windows Server 2025 Datacenter, using cimian-pkg 17694a0, via a GitHub Actions workflow here: https://github.com/windowsadmins/cimian/actions/runs/27332890096. It is provided unsigned — see signing instructions at the bottom.

What's Changed

• loopguard: skip counters when postinstall self-reports via CIMIAN-WARNING in #49
• schema: stale-usage removal fields + IUsageDataSource abstraction in #50
• usage: ReportMateUsageDataSource reading usagetracker per-user JSON in #51
• engine: stale-usage removal pass behind UsageStaleUninstallEnabled in #52

Full Changelog: v0.0.7...v0.0.8

Signing for enterprise deployment

Sign the binaries and MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

# Sign all binaries (run after extracting the MSI/nupkg payload)
Get-ChildItem -Recurse -Include *.exe,*.dll | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

# Sign the MSI installers (run separately, after binaries are signed and repackaged)
Get-ChildItem -Filter "Cimian-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Built from commit 7539fe8f9c3cdb71ab2c31b7a978f96c2b008607.

Build info

This release was built with .NET SDK 10.0.300 on Microsoft Windows Server 2025 Datacenter, using cimian-pkg 17694a0, via a GitHub Actions workflow here: https://github.com/windowsadmins/cimian/actions/runs/27247412874. It is provided unsigned — see signing instructions at the bottom.

What's Changed

• build: brace $Architecture in payload-size log to avoid PS scope parse [hotfix] by @rodchristiansen in #47
• script-runner: CIMIAN-WARNING: marker convention for postinstall scripts by @rodchristiansen in #48

Full Changelog: v0.0.6...v0.0.7

Signing for enterprise deployment

Sign the binaries and MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

# Sign all binaries (run after extracting the MSI/nupkg payload)
Get-ChildItem -Recurse -Include *.exe,*.dll | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

# Sign the MSI installers (run separately, after binaries are signed and repackaged)
Get-ChildItem -Filter "Cimian-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Built from commit d6a0c3021b48d35aa341c282e41b43ebfb21e50a.