v2.1.289
Explanation
This update resolves critical stability and security issues, including terminal freezes from complex shell syntax, symlink bypasses in read deny rules, and sandbox auto-allow loopholes. It also fixes plugin rendering bugs and authentication regressions, ensuring reliable operation for managed enterprise environments.
Official highlights
- Fixed a deny or ask rule on a nested part of a compound shell command not holding over a user-installed mod's approval on managed machines
- Fixed the terminal freezing on short code blocks with many unclosed `<script>` tags or deeply nested `${` substitutions
- Fixed `Read` deny rules not applying to files @-mentioned, changed, or selected in the IDE through a symlink
- [VSCode] Reverted a 2.1.288 change to `claude auth status` that may have made sign-outs more frequent