Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeReleasesv2.1.222entry #46

Claude Code v2.1.222 ·

Git invocations hardened with sanitized args and environment

Many more git commands now run with a scrubbed environment so stray variables can't redirect them.

You'll notice Improvements
JSON All of v2.1.222
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
Git IntegrationArea: what it touches
ImprovementsKind: in v2.1.222,
ImprovementsSection of the release
What

Many more git call sites now prepend the frozen safety arguments and run with an environment scrubbed of git overrides, closing off paths where inherited env vars could redirect a git command.

Details
  • Newly covered call sites include rev-list, ls-files --others --ignored, worktree remove --force, and config core.hooksPath.
  • Sanitized environment strips GIT_DIR, GIT_WORK_TREE, GIT_INDEX_FILE, and the GIT_CONFIG_KEY_n / GIT_CONFIG_VALUE_n family, among others.
  • Two additional git diff call sites now also pass --no-ext-diff and --no-textconv.
Evidence

core.hooksPath=/dev/null

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Read from
Names in the bundleGIT_DIRGIT_WORK_TREEGIT_INDEX_FILE

See this entry in the whole of v2.1.222 →

Feedback