Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v1.0.113 ·

Workspace Trust Validation for OpenTelemetry Helpers

Entry
JSON All of v1.0.113
EntryKind: in v1.0.113,
ChangesSection of the release

What changed: OpenTelemetry headers from project/local settings now require workspace trust Why it matters: Prevents arbitrary code execution from untrusted project configurations Details:

  • New function CZ1() at line 371858 detects if otelHeadersHelper comes from project/local settings
  • Function ph2() at line 371865 checks workspace trust via mx(!0) before executing helpers
  • Returns empty headers instead of executing untrusted code
  • Part of broader security hardening effort
  • Evidence: Replaces simpler bh2() at line 371852 in v1.0.112

See this entry in the whole of v1.0.113 →

Feedback