hoist v1.9.2

fix(cache): namespace default CACHE_LOCATION per-user (/tmp/hoist-<uid>, 0700)
to avoid cross-user /tmp collisions where root-owned state files caused
'Permission denied' for later non-root runs.

v1.8.3 — Fix orphaned compose children pinning the per-project lock

v1.8.2 — fix flock run-lock surviving Ctrl+C

v1.8.1

feat(parallel): quiet docker compose pull under --parallel — suppress
interleaved compose-pull progress bars when PARALLEL > 1; hoist's own
per-container log lines still show activity. Serial runs unchanged.

v1.8.0

Security hardening + self-update caching release.

- self-update: cache the GitHub release check for 6h
- security: reject symlinked lock files and state files before opening
- security: harden self-update, unit files, authfile, and curl protocols
- core: split process_container into single-responsibility helpers
- core: add an exclusive run lock to prevent overlapping runs
- compose: serialize compose operations per project to fix parallel races
- cron: validate field grammar, honor --scope user, pin DOCKER_HOST
- labels: accept true/1/yes/on for boolean gates via _is_true
- semver: correct tilde, v-prefix, comma-range, pre-release handling
- test: add bats harness and lock the run-result token contract

v1.6.0 — auto-pin DOCKER_HOST for rootless-docker user-scope cron ins…

…talls