CLAIM-2026-09-21-08
GitHub rejects a 40-hex branch name outright, while Bitbucket and self-hosted git servers allow it, and Anthropic's documentation lists Bitbucket and self-hosted git as valid marketplace backends.
Why it matters
The mitigation that shipped is at the git host, so the choice of forge decides whether a team has it.
Sources
- airsecurity2026pluginshe
- theregister2026ai