Summary
The release disables repository-local Git settings for all Git commands after crafted configuration could invoke executables through gpg.program, diff.external, textconv or core.fsmonitor. It also fixes a Windows .gitignore crash and several CLI output bugs.
Why it matters
Repository-inspection and context-packaging tools can process untrusted code, so Git configuration isolation is a direct boundary for coding-agent workflows.
Related coverage
- Docker Agent adds background-agent coordination and a shared WebAssembly runtime
- WordPress Studio adds persistent design context to its website-building agent
- NestJS repairs microservice connection and tracing edge cases