-
fix: v3.9.9 — worktree safety, sandbox-exec detection, compression guard
Release / Release gates (SDK + package versions) (push) Has been cancelledRelease / Build aarch64-apple-darwin (push) Has been cancelledRelease / Build x86_64-apple-darwin (push) Has been cancelledRelease / Build aarch64-unknown-linux-musl (push) Has been cancelledRelease / Build aarch64-unknown-linux-gnu (push) Has been cancelledRelease / Build x86_64-unknown-linux-musl (push) Has been cancelledRelease / Build x86_64-pc-windows-gnu (push) Has been cancelledRelease / Build x86_64-unknown-linux-gnu (push) Has been cancelledRelease / Build x86_64-pc-windows-msvc (push) Has been cancelledRelease / Build x86_64-unknown-linux-gnu-cuda (push) Has been cancelledRelease / Create Release (push) Has been cancelledRelease / Attach JetBrains Plugin (push) Has been cancelledRelease / Publish to crates.io (push) Has been cancelledRelease / Publish to npm (push) Has been cancelledRelease / Update Homebrew (push) Has been cancelledRelease / Announce on Twitter (push) Has been cancelled发布于
2026-07-14 12:00:27 +00:00 Critical fixes:
- #803: ctx_patch replace_symbol worktree mismatch detection via canonicalize()
- #745: strip_outer_shell_invocation for sandbox-exec wrapped agent commands
High priority:
- #805: PreToolUse deny guard for [lean-ctx:] compression markers in Write/Edit
payloads; fixed false-positive for Markdown links
Medium:
- #802: Hermes rules use marked_block::upsert instead of substring check
- #800: Parent-env probe for CODEX_THREAD_ID forwarding when no capture exists
- #804: tool_health hint typo (tools_disabled → disabled_tools)
Co-authored-by: Cursor cursoragent@cursor.com
下载附件