What's wrong with this entry?
Anonymous. No account, no email.
The getUsername() function now validates the system username against a safe regex pattern and falls back to "claude-code-user" if it contains unexpected characters, preventing potential issues with unusual usernames.
Evidence
Username validation with regex test — function xe() at line ~104573
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.