Under the hood
The 'scan' hook set's allowed capabilities were expanded and ui.toast was removed
What
The capability manifest for the 'scan' hook set (a declared list of what that group of hooks is allowed to do) now permits calling env.get, telemetry.log, and telemetry.mark, and explicitly lists reading the HOME and USERPROFILE environment variables. The ui.toast call, previously allowed, was removed from this set's permitted calls.
Why
This changes what 'scan' hooks are allowed to do: they gain access to environment lookups and telemetry logging, but can no longer show toast notifications directly.