Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
Build MetadataArea: what it touches
Internal ChangesKind: in v2.1.220,
Internal ChangesSection of the release
What
Several unrelated areas were reflowed or had their module-init closures renamed, with no semantic difference found in any of them.
Details
Method-chain reflows in JWT verification, PEM fingerprinting via createHash("sha1") and createHash("sha256"), MCP server-config mapping, the SDK set_model control request, QR-code rendering and several string-splitting sites.
Renamed module-init closures for the test and typecheck command regexes and for the git worktree path constants /worktrees/ and config.worktree.lock.
Evidence
failed to validate JWT signature
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
