PowerShell 7.7.0-rc.1 Released With Security Hardening and Bug Fixes

PowerShell 7.7.0-rc.1 is available, upgrading build pipelines to .NET SDK 11.0.100-rc.3.26522.148 and Microsoft.PowerShell.PSResourceGet to version 1.3.0-rc1. This release candidate removes the built-in update notification system and introduces targeted security hardening, cmdlet bug fixes, and platform updates.

Security updates in Constrained Language Mode restrict property assignments on non-core objects to NoteProperty members and protect ForEach() property assignments on non-core types. Test-Json now requires -FetchExternalReference to resolve external references. Additional security changes apply implicit-remoting command protections to resolved aliases, validate CAB extraction for updatable help by capping module names at 128 characters, and enforce file mode checks on fallback temporary home directories on Unix platforms.

Cmdlet fixes address non-Windows systems invoking Clear-Host inside remote Windows sessions, Get-ChildItem respecting -Recurse with -Name, and Resolve-Path -Relative producing correct output for dot-prefixed paths. The release also corrects duplicate results from Get-Command fuzzy matching, prevents unnecessary SMB queries during file name formatting, treats StringCollection types as list collections with string elements, and replaces deprecated X509Certificate2 constructors with X509CertificateLoader.LoadCertificate.

Packaging revisions produce native RPM packages for Azure Linux 4 via the preview PMC repository. On Windows, installation checks query GetCurrentPackageFamilyNameNative to detect MSIX deployments, and the Hyper-V socket server V2 binds directly to the selected partition VM ID. Binaries and packages ship for Windows, macOS, and Linux across x64, x86, ARM32, and ARM64 architectures.