- Non-regular file reads (devices, FIFOs, sockets) now throw a proper
ERR_NOT_REGULAR_FILEerror code rather than silently failing or producing confusing output. Directory reads throwEISDIR. (search for"Not a regular file (device, FIFO, or socket)")
- gRPC keepalive connection teardown now uses
session.destroy()instead ofsession.close()for ping failures, timeouts, and send errors, preventing state corruption from half-closed connections.
- Windows file-deny glob expansion now correctly rejects directory targets with a clear error message instead of silently skipping them. (search for
"Windows fs deny requires explicit file paths;")
- The
mcp.jsonserver enablement check now correctly compares server names using the same matching logic as the session-approved list, reducing spurious "server not found" errors.
- Session transcript files orphaned by a crashed process are now renamed to
.orphaned-<timestamp>-<uuid>.jsonlrather than being left in place to confuse future sessions. (search for".orphaned-")
- The localhost detection used in proxy and network code now handles
host:portstrings correctly, avoiding false negatives when a port number is appended. (search for the newqmnfunction)
- PostToolUse and PostToolUseFailure hook failures are now reported with distinct log messages, making it easier to diagnose which hook phase failed. (search for
"PostToolUse hook dispatch failed"and"PostToolUseFailure hook dispatch failed")
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agree
Security: claude mcp list/get no longer spawn .mcp.json servers that a repo self-approved via a committed .claude/settings.json; untrusted…