{"version":"2.1.259","anchor":"command-name-normalization-now-checks-a-known-binary-allowli","canonical_anchor":"command-name-normalization-now-checks-a-known-binary-allowli","heading":"Command-name normalization now checks a known-binary allowlist before stripping version suffixes","tier":"notice","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.259\/e\/command-name-normalization-now-checks-a-known-binary-allowli","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.259","markdown":"### Command-name normalization now checks a known-binary allowlist before stripping version suffixes\n\nCommand-name normalization only strips a trailing version number when the result is a known binary, so names like python3 stay intact.\n\nThe helper that normalizes command\/process names for detection, used in bash-safety and permission logic, used to unconditionally strip trailing version digits (e.g. `python3` \u2192 `python`). It now only strips the suffix if the resulting stripped name is in a known-binary allowlist, otherwise it keeps the original name intact.\n\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5"}