Security
- Deny rules now apply to every shell language of ctx_execute (sh, bash, zsh, dash, ksh, fish) and to ctx_batch commands, checked per command segment like the Bash tool. The deny check now runs in linear time, so long input stays inside the hook budget. (bcd2921)
- Fetch blocks more private and special address ranges (shared 100.64.0.0/10, 0.0.0.0/8, 198.18.0.0/15, 240.0.0.0/4, fec0::/10, ::/96, 64:ff9b:1::/48), checks the IPv4 address inside NAT64 and 6to4 addresses, and checks every redirect hop. Stored line units now grow linearly with input size. (6de3349)
- ctx_upgrade keeps v1 data: old v1 data dirs are moved aside and kept, and a path reached through a link is reported and left as is. The PostToolUse hook reads persisted output only from its own session dir, as a plain file of at most 16 MiB. (54c4e2d)
Fixes
- fix: guard test keeps the Claude Code Agent input unchanged on first call and resend (#1319)
- fix: setup writes the stable Homebrew node link, so brew upgrade node keeps hooks and MCP running
- fix: ctx_upgrade keeps v1 data and never follows a project link; hook reads persisted output only from its own session dir
- fix: VS Code server reads the workspace from MCP roots, setup writes no ${workspaceFolder} in the user mcp.json
- fix: ZCode native plugin install, Qwen project scope and Windows hook command, hook overhead as warning
- fix: ctx_upgrade uses each agent's own update command, no release-branch clone (#1309)
- fix: block more private fetch targets and bound line unit size
- fix: OpenCode 2 host (Bun): doctor hook run, background launcher, read-only DB open, D3 entries, read size guard (#1310)
- fix: CONTEXT_MODE_DATA_DIR moves the data root, so each Claude Code profile can keep its own store (#1318)
- fix: gemini native install, GEMINI_CLI_HOME, AfterTool replace wording, Part lists
- fix: apply user deny rules to every shell ctx_execute language, per segment, in linear time
Who gets this
One version on both channels: the release commit on main (GitHub) and npm.
| Agent | Channel | Update with |
|---|---|---|
| Claude Code | GitHub | claude plugin update context-mode@context-mode
|
| Codex | GitHub, npm for the one-time hook trust step | codex plugin marketplace upgrade context-mode
|
| Gemini CLI | GitHub | gemini extensions update context-mode
|
| Qwen Code | GitHub | qwen extensions update context-mode
|
| Copilot CLI | npm | context-mode upgrade
|
| VS Code (Copilot) | npm | context-mode upgrade
|
| Kiro | npm | context-mode upgrade
|
| ZCode | GitHub | zcode plugins update context-mode@context-mode
|
| Pi | npm | pi update --extensions
|
| OpenCode | npm | opencode plugin update
|