v0.22.0 (2026-08-17)

What's Changed

• Fix protected pattern semantics for read-only walkers by @dsfaccini in #364
• Add PromptInjectionDefender for indirect prompt injection by @shashi-stackone in #439
• Stop CodeMode from folding shell command tools into run_code by @kaxil in #593
• Update compaction doc examples to claude-sonnet-5, claude-opus-5, gpt-5.6-luna/terra, and gemini-3.6-flash by @mpfaffenberger in #639

New Contributors

• @shashi-stackone made their first contribution in #439
• @kaxil made their first contribution in #593
• @mpfaffenberger made their first contribution in #639

Full Changelog: v0.21.0...v0.22.0