Unclear The finding doesn't specify which call sites now pass the new parameter as true, so it's unclear which real commands actually skip the ask requirement.
Several internal functions that check whether a bash command is safe to run were given a new trailing parameter. When set to true, it skips the requirement to ask for permission before reading a relative path that follows a cd in a compound command (like cd some-dir && cat file.txt), even when a rule is configured to deny that kind of Read.
This changes when Claude Code will pause to ask before reading a file reached via a directory change in the same command, in cases where a deny rule for Read is otherwise in place. The finding does not say which callers now pass true for this new parameter, so it's unclear which specific commands are affected in practice.
The finding doesn't specify which call sites now pass the new parameter as true, so it's unclear which real commands actually skip the ask…