releases.shpreview

.env writes protected from symlink targets

v1.41.1

3 features2 enhancements2 fixesThis release3 featuresNew capabilities2 enhancementsImprovements to existing features2 fixesBug fixesAI-tallied from the release notes

Changelog

  • a25a0a9261a592c81b76bd9db75e9d4d74aa4c30 Bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0 (#1588)
  • efec00c84b5d01d1c378cdff6a7355647c513977 Capture plugin name in install telemetry (#1576)
  • 69cf2f795a461d7aad5f80fa651f1bc65e0f8707 Emit Claude Code plugin hint to stderr (#1550)
  • 59df362e14ae9988d2f4b0b66b8b627ac4545f9e Protect writes from symlink targets (#1586)
  • 754e7bc31b78aa188c75d600b79de4d52135b7b3 Re-enable test workflow on pull_request events (#1578)
  • dffad7ec143fdb8cb0f198f1e3b78a5327ed9de5 Read consolidated Stripe-Notice header (#1570)
  • ec6b9079c5eae7b86c3377e2d2746a4ea1381c8c Refactor symlink protection for .env writes (#1574)
  • e5de13915948ebfd69d0dec19dc05bfecfd37d16 Resolve plugin subcommand paths for telemetry analytics (#1567)
  • c2f0d364be8731e6bd113838ac5e8272f7e6aef8 Use plugin metadata endpoint for plugin installs when API key is available (#1575)
  • 776d7b57c33aa3974916ee83d9e25a438a88a3c0 fix fixture path losing suffix after dynamic ID substitution (#1549)

Fetched May 19, 2026