<h2>What's changed</h2> <ul> <li>Fixed sandboxed Bash commands on macOS and Linux running the shell's startup files outside the sandbox before each command</li> <li>Fixed macOS sandbox <code>denyWrite</code> glob patterns not applying at a path's real location when the pattern's folder is reached through a symlink</li> <li>Fixed sandboxed commands and auto-accepted edits being able to modify the MCP config file passed with <code>--mcp-config</code></li> <li>Fixed a disabled MCP server being reconnected by a later permission prompt in print and SDK sessions</li> <li>Fixed the Bash permission ch