v0.22.1
Highlights
-
Claude Code CDN downloads — Binary downloads now use
downloads.claude.aias the primary source with automatic fallback to GCS, improving reliability and aligning with Anthropic's official distribution channel. (#511, #512) -
GitHub Actions security hardening — All third-party actions are pinned to commit SHAs with minimal permissions per job, plus a new
check_actions.pytool to verify and auto-update pins. (#504, #505)
Other Changes
- Added Markdown cross-reference validation CI check covering all internal doc links. (#507)
- Added wildcard host method filtering documentation and tests for credential-only sandboxing. (#506)
- Coverage output now shows only uncovered files with exact line numbers on failure. (#508)
- Added
uv-securevulnerability scan for the screenshots project. (#509)
Upgrade
airut update
If airut check reports a pending config schema migration after updating, run airut migrate.