Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.308 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.218 ·

Env Var Allowlist Greatly Expanded

Entry
JSON All of v2.1.218
EntryKind: in v2.1.218,
ImprovementsSection of the release

The internal list of "Claude-aware" environment variables has been expanded from a small set to over 80 named variables. This list is used by the hooks system to determine which env vars hooks may set or modify.

A new secondary set (Lvh) covers privacy-sensitive variables (DISABLE_TELEMETRY, DO_NOT_TRACK, DISABLE_ERROR_REPORTING, CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC) that hooks may only write when the caller has elevated trust.

This does not change how users configure Claude Code; it tightens the security boundary around which env vars hooks can inject.

Evidence

Expanded allowlist (search for "CLAUDE_CODE_DISABLE_BUNDLED_SKILLS" in env var set)

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.218 →

Feedback