You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
Bug FixesKind: in v2.1.238,
Bug FixesSection of the release
What
Commands using zsh's =(CMD) process substitution are now classified as too complex to analyse, so they fall out of the fast permission path and are handled conservatively instead of being misread.
Details
Applies to text starting with =( inside [[ ]] tests, and to regex operands containing an unquoted =( after a start, |, || or && boundary.
A new scanner tracks quoting, escaping and paren depth to spot the construct.
Unconditional in the command analyser.
Evidence
contains zsh =(CMD) process substitution
Strings lifted out of the shipped bundle, so the claim above can be checked against them.