v1.0.64

stable

Published Oct 19, 2026

NEW16SECURITY1BREAKING1FIX1

Trailer

Untrusted folders run only your organization's managed hooks. User, project, plugin, and agent hooks wait until you trust the folder. Headless sessions treat user hooks as trusted.

Worktree names typed with Ctrl+W keep Unicode letters such as café, and a name or ref that starts with - is refused.
Auto mode runs a shell command without review only when every command in it matches an allowlist entry; anything else asks first. Permission rules read each word the way bash passes it to the program.
/resume loads older sessions when you reach the last row, and shows how many sessions are loaded.
Auto mode runs make --version, cmake --version, and just --version without asking.
HTTP connections, including remote MCP servers, accept gzip, brotli, zstd, and deflate compressed responses.
Plugin install suggestions above the prompt are off when disable_plugins = true is set.

New worktrees keep tracked files that match .gitignore, and leave out files excluded only by .git/info/exclude or core.excludesFile.
A new session that fails to start puts what you typed back in the prompt you return to, instead of losing it.
Web search works from a session's first turn, and in subagents, when the search model signs in through an external auth provider.
grok -w, grok worktree create, worktree forks, and subagent worktrees refuse up front with the sandbox's message when the sandbox profile does not allow creating worktrees.
Worktree options are hidden in /fork, /new, and the Welcome screen when the sandbox profile does not allow creating worktrees.
A worktree name you type that is already taken is refused instead of getting a numbered suffix, and a name whose folder you deleted by hand can be used again.
External OpenTelemetry export keeps sending logs and metrics when OTEL_EXPORTER_OTLP_COMPRESSION is set to gzip or zstd.
[model.*] tables without a context window take the window and API of another table that sends the same model, instead of the 200,000-token fallback.
Grok on macOS without a GUI session, such as over SSH, no longer hangs on its first modifier-key check.
Custom models on the Responses API keep the turn going when a web search call starts without an action.
Shell commands run correctly on zsh when your startup files alias grep or replace run-help.
Voice dictation preview grows the prompt as you speak and keeps the newest words in view.