Summary
APM 0.30.0 adds checksum verification before Unix archive extraction, owner-aware unprivileged installation and a Homebrew-first macOS onboarding path. It also fixes cache-pruning correctness, improves release lookup recovery and runs CodeQL on merge-queue commits.
Why it matters
Agent package managers are becoming part of the software supply chain, so safer installation and cleanup paths directly reduce developer-environment risk.
Related coverage
- Remotion 4.0.522 expands timeline editing in its React video studio
- Gemini CLI publishes a new 0.60 nightly build
- Qwen Code 0.23.1-preview.2 makes multi-agent sessions and workflow runs inspectable