Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Self-Hosted RunnersArea: what it touches
In DevelopmentKind: in v2.1.224,
In DevelopmentSection of the release
What
Arguments the server hands to a self-hosted runner session are now checked against a name pattern and a blocklist before becoming CLI flags. Rejected ones are skipped and logged as "malformed" or "blocked", and the count of arguments actually applied is logged.
Details
Values starting with - are passed as --name=value so they are not parsed as a separate flag.
Log lines are assembled from a template beginning "[runner:session] Skipping ".
Evidence
[runner:session] Skipping
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
