What
Managed policy settings can block every marketplace repo under a GitHub owner with a single entry instead of listing each repo. Matching is case-insensitive and both segments are validated by a new identifier regex.
Details
- an entry of the form owner followed by slash and star matches all repos under that owner
- any other use of
*in an entry logs an error stating that only the owner wildcard is supported, and the entry falls back to literal string matching - the wildcard parser and its error message do not exist in the previous build
Usage
{ "blockedMarketplaces": ["some-owner/*"] }Evidence
Invalid owner-wildcard repo in policy settings blockedMarketplaces:
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Names in the bundleblockedMarketplacesowner/*
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agree
Added owner wildcard entries ("owner/*") to the strictKnownMarketplaces and blockedMarketplaces managed settings for allowing or blocking…