Summary
The release changes malformed Authorization headers to return HTTP 401. The release notes list this authentication change as the sole bug fix in v2.137.5.
Why it matters
Predictable rejection of malformed credentials simplifies client handling and makes authentication failures clearer to monitoring and security controls.
Related coverage
- Docker Agent adds background-agent coordination and a shared WebAssembly runtime
- WordPress Studio adds persistent design context to its website-building agent
- Repomix disables repository-local Git configuration after command-execution flaw