potiuk opened a new pull request, #174: URL: https://github.com/apache/airflow-steward/pull/174
## Summary - Bumps the `claude-code` pin from 2.1.138 (released 2026-05-09) to 2.1.141 (released 2026-05-13). 2.1.141 is past the 1-day per-tool cooldown — `tools/agent-isolation/check-tool-updates.sh` flagged it on 2026-05-16. - Updates the version + `released` fields in `pinned-versions.toml`, both install command lines (`install.npm`, `install.brew`), and the top-level `pinned_at`. - Mirrors the bump in `docs/setup/secure-agent-setup.md` — the npm install command (2 occurrences) and the "Required tools (pinned versions)" table row. Release notes: <https://github.com/anthropics/claude-code/releases/tag/v2.1.141> — routine bug fixes and small features (`terminalSequence` hook field, `claude agents --cwd`, "Summarize up to here" rewind, IDE diff option restored on file-edit prompts). No changes to `permissions.deny` semantics, sandbox flags, or prompt-injection mitigations. Includes a fix for `transcript_path` after `EnterWorktree` switches the working directory, which is directly relevant for adopters that wire `EnterWorktree` hooks. ## Test plan - [ ] `tools/agent-isolation/check-tool-updates.sh` no longer flags `claude-code` as an upgrade candidate after merge. - [ ] `npm install -g --no-save @anthropic-ai/[email protected]` succeeds (the docs' install command resolves). - [ ] Adopters that re-fetch the snapshot via `/setup-steward upgrade` see the new pin without further intervention. 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
