Finding / claude-code
2026-07-01-claude-code-v2-1-195-hook-matchers-with-hyphenated-identifiers-e-g-c
v2.1.195: Hook matchers with hyphenated identifiers (e.g. code-reviewer, mcp__brave-search) now exact-match instead of accidentally substring-matching; external plugins enabled only by project .claude/settings.json now require explicit install consent on every loader path. (channel: tagged-release, 2026-06-26). Operator consequence: Behavior-changing hook fix: teams using hyphenated hook matchers may see hooks stop matching things they previously (incorrectly) matched - use mcp__brave-search__.* to match all tools from a hyphenated MCP server. Plugin install-consent fix closes a path where a project settings file could enable an external plugin without consent - re-audit trust of project-scoped plugins. Full receipted detail lives in harvest/watchlist.md.
Receipt
Finding metadata
Run: 2026-07-01-weekly-digest-2026-06-24_2026-07-01-frontier-v0
Finding ID: 2026-07-01-claude-code-v2-1-195-hook-matchers-with-hyphenated-identifiers-e-g-c
Source links
Primary links, including exact changelog lines when available.
Versioned source: run artifact