Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PermissionsArea: what it touches
Internal ChangesKind: in v2.1.248,
Internal ChangesSection of the release
What
The session-requeue and local-runner-spawn admin tools, along with the PowerShell tool and cron job creation, now carry a flag marking them as capable of executing code. This is a declaration read by permission and classification logic, not a change to what the tools do.
Details
The two runner tools already required classifier review in auto mode and prompted otherwise.
Evidence
enablesCodeExecution, start a local self-hosted runner process for try-it-out
Strings lifted out of the shipped bundle, so the claim above can be checked against them.