Worktree creation now rejects .claude, .claude/worktrees, and .claude/worktrees/<name> if any of them is a symbolic link, preventing path traversal outside the repository.
Error shown: Cannot create worktree: <path> is a symlink. A repository-committed symlink at .claude, .claude/worktrees, or .claude/worktrees/<name> could redirect worktree creation outside the repository. Remove the symlink and retry.
Evidence
"is a symlink. A repository-committed symlink at .claude, .claude/worktrees…" (search for "git_worktree_create_symlink_rejected")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeFixed worktree creation following a repository-committed symlink at .claude/worktrees, which could create files outside the repository
