You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.248,
ImprovementsSection of the release
What
New allowlists feed the check that decides whether a command is safe to run without prompting: read-only PowerShell cmdlets, PowerShell switch parameters, PowerShell executable paths probed on Windows, and known container and package registry hosts. A separate pattern flags paths mentioning helm, iam, prod, k8s or rbac as sensitive.
Evidence
registry-1\.docker\.io
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
