Summary

The release adds per-tool MCP output limits, package-style MCP server names and configurable shell-command timeouts beyond one hour. It also preserves approval context through compaction and rejects untrusted cloud-task URLs and redirects.

Why it matters

These changes target the reliability, security and operability problems that emerge when coding agents run long-lived, tool-heavy workflows.

Sources