Security-focused release. Hardens child-process env, plan-mode tools, sub-agent approvals, MCP config paths, run_tests approval policy, fetch_url redirects (v0.8.22 backfill), runtime API auth. Fixes #1244 and the v0.8.21/v0.8.22 changelog gap. Thanks to @47Cid for responsible disclosure.
Intelligence View
⚡ tsecurity.de Intelligence
chore(release): merge v0.8.23 (#1245)
Security-focused release. Hardens child-process env, plan-mode tools, sub-agent approvals, MCP config paths, run_tests approval policy, fetch_url redirects…