Claude Code v2.1.223 ·
PR-approval stamp validation covers the create method word
A loophole in pull-request approval stamp checking is closed, so malformed stamps get rejected.
Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.223,
ImprovementsSection of the release
What
The anchored-PR stamp checker closes a hole where the create method word could be smuggled in under the wrong key.
Details
- a stamp input carrying the create method word under a non-method key is now rejected
- the catch-all failure message lists the create method word as a third permitted value, next to the PR's identifiers and the approve words
Evidence
it may only select the connector's create-and-submit operation
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
See this entry in the whole of v2.1.223 →
