From 9812f4e9449ba1ed9ee51a79837080f0bab2abbb Mon Sep 17 00:00:00 2001 From: tobin Date: Mon, 18 May 2026 19:46:54 +0000 Subject: [PATCH] Revert mercadopago SHA bump The new upstream SHA adds a PreToolUse hook that fires on every Bash/Edit/Write/Read in all sessions and globally blocks reading .env files, regardless of project relevance. The policy scan flags this as out of scope for what the plugin description advertises. Leave at the prior pin until the upstream gates the hook on project relevance. --- .claude-plugin/marketplace.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json index de7cc4d8..50d2972e 100644 --- a/.claude-plugin/marketplace.json +++ b/.claude-plugin/marketplace.json @@ -1219,7 +1219,7 @@ "url": "https://github.com/mercadopago/mercadopago-claude-marketplace.git", "path": "plugins/mercadopago", "ref": "main", - "sha": "a195cd861018a817b194f7e2491f5ca33b443395" + "sha": "1de8d97e1c875136e93bc8eea8494ebf982a08b8" }, "homepage": "https://github.com/mercadopago/mercadopago-claude-marketplace/tree/main/plugins/mercadopago" },