{"name":"manifestSha256","slug":"manifestsha256","family":"setting","title":"Settings keys","noun":"settings key","description":"Admin-allowed plugin marketplaces must be pinned to a fixed version to use an installation preference other than \"available\"","description_source":"entry","described_by":{"version":"2.1.281","anchor":"admin-marketplace-allowlist-installationpreference-is-clamp"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.295","builds":0,"mined_builds":138,"first_cited":{"version":"2.1.281","released_at":"2026-09-23 17:01:17","spans":2}},"aliases":[],"entries":[{"version":"2.1.281","anchor":"admin-marketplace-allowlist-installationpreference-is-clamp","heading":"Admin marketplace allowlist: installationPreference is clamped without a pin","line":"Admin-allowed plugin marketplaces must be pinned to a fixed version to use an installation preference other than \"available\"","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text"},{"version":"2.1.281","anchor":"cowork-admin-docs-missing-manifestsha256-downgrades-to-ava","heading":"Cowork admin docs: missing manifestSha256 downgrades to 'available'; unreadable allowlist counts as empty","line":"Cowork admin docs: a URL marketplace entry with no manifestSha256 is treated as available, and an unreadable allowlist counts as empty","released_at":"2026-09-23 17:01:17","reason":"named in this entry, found in this entry's text"},{"version":"2.1.281","anchor":"managed-marketplace-auto-installrequired-entries-without-a","heading":"Managed marketplace auto_install\/required entries without a pin are treated as available","line":"Managed `auto_install` or `required` marketplace entries without a pin are treated as `available` and flagged as a config warning","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text"},{"version":"2.1.281","anchor":"plugin-marketplace-schema-drops-shamanifest-hash-requiremen","heading":"Plugin marketplace schema drops SHA\/manifest hash requirements for auto_install\/required","line":"Marketplace plugins set to auto_install or required no longer need a full commit SHA or a manifestSha256 hash","released_at":"2026-09-23 17:01:17","reason":"found in this entry's text"}],"entries_total":4,"docs":[{"source":"claude-docs","path":"cowork\/changelog","title":"Changelog","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/configuration","title":"Configuration reference","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/configuration-changelog","title":"Configuration changelog","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/extensions","title":"MCP, plugins, skills, and hooks","documented":false}],"docs_total":4,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/manifestsha256","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}