1. Stable 0.144.5 strengthens dangerous-command detectionMajor
  2. Stable 0.142.5 stops logging full WebSocket request payloadsMajor
  3. Plugin marketplace source policy starts enforcing at runtimeNotable