Added
- CC-SET-022 and CC-SET-023. Validate Claude Code 2.1.224's
crossSessionInboundanddialogExpiryenums. Rule count 445 -> 447.
Changed
- Tool release baselines. Advanced Claude Code to
v2.1.226, Codex CLI torust-v0.147.0, OpenCode tov1.18.15, Cline tov4.1.6, Cursor to3.15.6, Gemini CLI tov0.54.4, and Amp's release marker tosize-the-orbs-of-productionafter reviewing their current validated surfaces. - Dependency refresh. Updated
rmcpto3.1.2,ignoreto0.4.33, andsimilarto3.1.2. - CI action refresh. Updated
actions/setup-nodeto7.0.0,github/codeql-actionto4.37.6,softprops/action-gh-releaseto3.0.2, andactions/attestto4.2.2, keeping synchronized action families and SHA assertions in lockstep.
Fixed
- Claude Code 2.1.224 credential masking compatibility. Extend CC-SET-012 for structured environment extraction, JWT-aware
decodeandmaskClaims, AWS credential pairs, and SigV4 policies. - Codex 0.147 plugin name compatibility. Accept dotted legacy plugin names while rejecting leading, trailing, and repeated dots.