Added

• New separate API for ambient (GetAmbient, SetAmbient, ResetAmbient) and bound (GetBound, DropBound) capabilities, modelled after libcap. (#176)

Fixed

• Apply now returns an error if called for non-zero pid. Before this change, it could silently change some capabilities of the current process, instead of the one identified by the pid. (#168, #174)
• Fixed tests that change capabilities to be run in a separate process. (#173)
• Other improvements in tests. (#169, #170)

Changed

• Use raw syscalls (which are slightly faster). (#176)
• Most tests are now limited to testing the public API of the package. (#162)
• Simplify parsing /proc/pid/status, add a test case. (#162)
• Optimize the number of syscall to set ambient capabilities in Apply by clearing them first; add a test case. (#163, #164)
• Better documentation for Apply, NewFile, NewFile2, NewPid, NewPid2. (#175)

Removed

• .golangci.yml and .codespellrc are no longer part of the package. (#158)

For the complete list of changes, see capability/CHANGELOG.md.

---

Thanks to all of the contributors who made this release possible:

• Kir Kolyshkin (@kolyshkin)
• lifubang (@lifubang)
• Sebastiaan van Stijn (@thaJeztah)
• Tianon Gravi (@tianon)