Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
PermissionsArea: what it touches
Bug FixesKind: in v2.1.221,
Bug FixesSection of the release
What
The double-bracket regex scanner stops as soon as the parser desyncs rather than continuing and checking only the final depth.
Details
If paren depth ever goes negative mid-scan, the scanner returns a too-complex result with differential: !0.
Evidence
[[ ]] regex has unbalanced parentheses (parser desync)
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeFixed a Bash tool permission-check bypass where zsh could execute hidden commands in [[ ]] regex conditionals; affected commands now prompt…
