Starship 1.27.0

1.27.0 (2026-10-17)

Security

This release contains fixes for GHSA-x486-6jjc-phfp and GHSA-679r-jwc5-r5m3.

Features

• Add jj_bookmark module (#7643) (6f33dce)
• add jj_change module (#7691) (70c705e)
• add jj_metrics module (#7720) (471858d)
• add jj_status module (#7729) (3ead2a0)
• Add Jujutsu support to the vcs module (#7612) (131bf95)
• bash: Support right prompt in Bash via Flyline (#7673) (85b8a61)
• claude_model: add effort variable (#7614) (ea4098c)
• git_branch: add ignore_remotes option (#7671) (0f9da35)
• jj: Better bookmark discovery and improving JJ output parsing (#7761) (013bef4)
• package: detect zig package version from build.zig.zon (#7753) (0584026)
• terraform: detect OpenTofu's .tofu files (#7783) (d77931d)

Bug Fixes

• bash: avoid duplicating PS0 preexec hook (#7587) (8f28dfc)
• directory: render symlinks pointing into a repo subdirectory (#7715) (2bc6acf)
• git: avoid running sensitive git commands in untrusted environments (fixes GHSA-679r-jwc5-r5m3) (db847dd)
• hostname: check SSH_CLIENT and SSH_TTY in addition to SSH_CONNECTION (#7611) (d1f5271)
• jj_status: count file changes across the whole repository (#7780) (2d8741e)
• nim: use detect_folders for folder detection (#7757) (ba04cfb)
• openstack: resolve clouds.yaml from context current directory (#7655) (6d88346)
• package: support build.gradle.kts in gradle version detection (#7627) (0461483)
• preset: Pad OS icon instead of username so it is not clipped when hidden (#7598) (91086e8)
• pulumi: read the per-backend stack selection (#7724) (69c1a57)
• sudo: Avoid creating system error logs on every unsuccessful invocation (#7530) (564a471)
• sudo: sudo module pollutes journalctl with error logs (564a471)
• utils: Avoid unbounded file reads (fixes GHSA-x486-6jjc-phfp) (187e183)
• utils: fix humanize_int rounding across unit boundaries (#7770) (084cdf2)

Performance Improvements

• swift: prefer swift-frontend for version detection (#7775) (bbde871)