What probably matters to youSection of the release
What
A marketplace entry can now point at a zip file over HTTPS instead of a git repo or npm package, with an optional sha256 digest that is checked on every download. When no version is declared, that digest is what identifies the version. If the zip contains a single wrapping directory, it is stripped so the plugin lands at the top level.
Details
The URL is checked against a new guard that rejects loopback, link-local, IPv4-mapped IPv6, unique-local and cloud-metadata hosts, so a marketplace entry cannot make Claude Code fetch from inside your network.
Authentication headers are inherited from the enclosing url-sourced marketplace only when the origins match.
The error message for marketplaces configured in settings now lists this type alongside github, git-subdir, npm and url.
Evidence
Archive URLs must use https:// and must not point at a loopback, link-local, or cloud-metadata host
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
