You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
Bug FixesKind: in v2.1.232,
What probably matters to youSection of the release
What
Deciding whether you have already accepted the trust prompt for a directory used to search every parent folder up to the filesystem root, so trusting something like your home directory silently trusted everything beneath it. The search is now bounded to the enclosing repository root and returns "not trusted" as soon as it would step above it.
Details
The bound is a prefix check against the resolved repository root, so an accepted ancestor outside that root is rejected.
The old skipCanonicalKeyProbe option is renamed advisoryNoFsProbe and still performs the unbounded walk, without touching the filesystem.
