Repository spec audits — audits now work through unfinished specs in bounded batches and reuse completed checkpoints, reducing repeated reviews on large repositories.
Security3
Dependencies — upgraded the libraries behind sign-in tokens, request tracing, and search to their patched releases, closing published advisories: oversized or deeply nested sign-in tokens can no longer exhaust the server while they are checked, and oversized trace headers are no longer parsed without a limit.
Image handling — upgraded the image library used when the agent works with files to a release that fixes several critical memory-safety bugs; a crafted image, PDF or TIFF file can no longer crash or corrupt memory in the isolated sandbox that opens it.
Repository access — PR insights and background scoring now honor your team's current GitHub repository access, hiding insight fields and stopping new scoring work for repositories that are no longer connected.