Released 2026-09-17, the fix worth reading is that conditional approvals now key off validated tool arguments rather than whatever the model emitted, closing a gap where an approval predicate could evaluate one thing and the tool receive another. Other fixes deliver tool-not-found output on server-managed resume, reap subprocesses on early stream close, and handle concurrent async SQLite session startup. The release also adds CodeQL scanning and dependency updates across the repo.