Added allowUnsandboxedCommands sandbox setting to disable the dangerouslyDisableSandbox escape hatch at policy level
Added disallowedTools field to custom agent definitions for explicit tool blocking
Added prompt-based stop hooks
VSCode: Added respectGitIgnore configuration to include .gitignored files in file searches (defaults to true)
Enabled SSE MCP servers on native build
Deprecated output styles. Review options in /output-style and use --system-prompt-file, --system-prompt, --append-system-prompt, CLAUDE.md, or plugins instead
Removed support for custom ripgrep configuration, resolving an issue where Search returns no results and config discovery fails