You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.305,
ImprovementsSection of the release
What
Permission rules decide what Claude Code may do without asking. When a rule mixes a * with the trailing :* form, Claude Code reads that * as a literal character, not as "anything". For such rules that are not allow rules, such as deny or ask rules, Claude Code now adds a security notice. It says the rule reads its * literally and suggests a corrected version. Before, these rules got only a plain warning.
Why
A deny or ask rule that does not match what you expected can let actions through that you meant to block, so this points you to the fix.
