Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.218 Home All releases ←olderv2.1.217 v2.1.219newer→

Claude Code v2.1.218 22 Jul 2026

Env Var Allowlist Greatly Expanded

The internal list of "Claude-aware" environment variables has been expanded from a small set to over 80 named variables. This list is used by the hooks system to determine which env vars hooks may set or modify.

A new secondary set (Lvh) covers privacy-sensitive variables (DISABLE_TELEMETRY, DO_NOT_TRACK, DISABLE_ERROR_REPORTING, CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC) that hooks may only write when the caller has elevated trust.

This does not change how users configure Claude Code; it tightens the security boundary around which env vars hooks can inject.

Evidence

Expanded allowlist (search for "CLAUDE_CODE_DISABLE_BUNDLED_SKILLS" in env var set)

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.218 →