- git_set_working_dir works again — the rev-parse probes the pre-flight validators emit (--is-inside-work-tree, --show-toplevel, --verify) are allow-listed
- git_commit, git_merge, git_stash, and git_tag emit --message=<text>, so a message that starts with a dash reaches git as data instead of being rejected
- A failed probe is rethrown verbatim instead of reported as "not a git repository", and can no longer trigger git init
- Regression net: a stdio e2e suite drives all 28 tools through the real argument validator, the validators are tested against a real git binary, and the allow-list sweep covers the whole CLI provider

Changelog: https://github.com/cyanheads/git-mcp-server/blob/main/CHANGELOG.md#v2153---2026-08-24