Summary

The release applies fast mode to permitted cloud and self-hosted Remote sessions, adds per-command allowed domains in sandboxed auto mode and introduces hash-specific approval for plugin installation and updates. It also fixes MCP OAuth registration handling, session resumption, permission checks and background-command duplication.

Why it matters

The changes improve the security boundaries and operational reliability of enterprise coding agents running remotely or with plugins and MCP servers.

Sources