Qwen Code v0.18.3-nightly.20260621.6b2f800ab 预发布

<!-- Release notes generated using configuration in .github/release.yml at release/v0.18.3-nightly.20260621.6b2f800ab --> ## What's Changed * fix(core): require opt-in for plan mode prompt by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5433 * test(core): drop duplicate gitdiff untracked count case by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5468 * fix(core): evaluate ignore files named with dot prefixes by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5458 * fix(core): enforce shell directory workspace boundary by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5454 * fix(core): validate lsp socket ports by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5493 * fix(core): parse max output token env strictly by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5491 * fix(core): detect providers by hostname by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5450 * fix(cli): validate ACP glob max results by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5480 * fix(core): allow dot-prefixed plans directories by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5460 * fix(extensions): fetch http marketplaces with http client by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5452 * fix(cli): parse FORCE_HYPERLINK strictly by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5489 * fix(core): parse tool concurrency env strictly by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5496 * fix(cli): enforce custom theme home boundary by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5456 * fix(dingtalk): skip uppercase webhook reaction targets by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5466 * fix(desktop): accept uppercase icon URL schemes by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5470 * fix(cli): reject partial session size values by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5475 * fix(telegram): clear typing intervals on disconnect by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5477 * fix(cli): respect installation path boundaries by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5441 * fix: accept uppercase endpoint URL schemes by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5443 * fix(core): reject fractional computer-use integer strings by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5500 * fix(core): match provider base URL slash variants by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5448 * fix(cli): enforce temp path boundaries for at-file by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5446 * fix(desktop): preserve uppercase favicon URLs by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5463 * fix(desktop): parse NO_PROXY ports strictly by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5498 * fix(serve): validate session reaper timeouts by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5484 * fix(extensions): handle uppercase npm registry schemes by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5437 * fix(core): add missing Token Plan models (qwen3.7-plus, glm-5.2, kimi-k2.7-code) by @huww98 in https://github.com/QwenLM/qwen-code/pull/5505 * fix(cli): wire ACP model-invocable commands by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5504 * fix(cli): reject partial cpu profile durations by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5486 * test(desktop): update blocked scheme open-url assertion by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5529 * fix(desktop): restore locale parity by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5537 * fix(extension): accept uppercase URL schemes in Claude plugin sources by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5461 * fix(desktop): parse server ports strictly by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5509 * fix(desktop): validate generic oauth token responses by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5511 * fix(core): don't treat an empty-parts message as a function call/response by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5494 * fix(desktop): allow double dots in bundle filenames by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5515 * feat(core): add Requesty provider by @Thibaultjaigu in https://github.com/QwenLM/qwen-code/pull/5478 * fix(cli): handle truncated remote input files by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5473 * test(core): wait for cron lock probe takeover by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5535 * perf(core): read current git branch directly from .git instead of spawning git by @wenshao in https://github.com/QwenLM/qwen-code/pull/5432 ## New Contributors * @Thibaultjaigu made their first contribution in https://github.com/QwenLM/qwen-code/pull/5478 **Full Changelog**: https://github.com/QwenLM/qwen-code/compare/v0.18.4...v0.18.3-nightly.20260621.6b2f800ab