You'll notice
Useful3 Signal3
Plugin installs can now be blocked outright when a marketplace source can't be read.
What's wrong with this entry?
Anonymous. No account, no email.
What
Resolving which marketplace a plugin dependency comes from gained a fail-closed option. When the list of known marketplaces comes back empty, an unresolvable marketplace is treated as blocked rather than quietly allowed, which can turn an install that used to succeed into a policy block.
Details
- The option is
failClosedOnUnknownSource; the block is reported asmarketplace-blocked-by-policy. - It only applies when managed plugin policy sources are present. Without them the old permissive behaviour stands.
Evidence
failClosedOnUnknownSource
Strings lifted out of the shipped bundle, so the claim above can be checked against them.