You'll notice
Device IDs are now validated against a pattern before being trusted for bridge/session connections
What
When a device ID is used to identify a peer (another connected device or session, such as over a bridge connection), Claude Code now checks it against a regular expression before accepting it. This applies both to the general device-ID validity check and to the step that pushes external configuration to a peer. Previously any non-empty string was accepted as a valid device ID.
Why
This stops malformed device IDs from being treated as valid, which could otherwise let unexpected or malformed values flow into peer connections and configuration syncing.