What
A plugin can be installed from GitHub, from a git URL, or from a subfolder of a git repository. When that source did not name a specific commit, Claude Code now records the commit it actually fetched, once it confirms the source still points there. Before, only plugins from claude.ai had a version recorded.
Why
The installed plugin is tied to a known point in its history, which makes it easier to know exactly which code you have.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not clear how the recorded commit is used after installation.