{"version":"2.1.218","anchor":"env-var-allowlist-greatly-expanded","canonical_anchor":"env-var-allowlist-greatly-expanded","heading":"Env Var Allowlist Greatly Expanded","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.218\/e\/env-var-allowlist-greatly-expanded","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.218","markdown":"### Env Var Allowlist Greatly Expanded\n\nThe internal list of \"Claude-aware\" environment variables has been expanded from a small set to over 80 named variables. This list is used by the hooks system to determine which env vars hooks may set or modify.\n\nA new secondary set (`Lvh`) covers privacy-sensitive variables (`DISABLE_TELEMETRY`, `DO_NOT_TRACK`, `DISABLE_ERROR_REPORTING`, `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC`) that hooks may only write when the caller has elevated trust.\n\nThis does not change how users configure Claude Code; it tightens the security boundary around which env vars hooks can inject.\n\n**Evidence**\n\nExpanded allowlist (search for `\"CLAUDE_CODE_DISABLE_BUNDLED_SKILLS\"` in env var set)"}