Tobin South d42e163958
Bump 25 plugin SHA pins to upstream HEAD (huggingface–railway) (#1914)
* Bump 26 plugin SHA pins to upstream HEAD

* Revert mercadopago SHA bump

The new upstream SHA adds a PreToolUse hook that fires on every
Bash/Edit/Write/Read in all sessions and globally blocks reading .env
files, regardless of project relevance. The policy scan flags this as
out of scope for what the plugin description advertises. Leave at the
prior pin until the upstream gates the hook on project relevance.
2026-05-19 08:19:35 -05:00
..