Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.222 Home All releases ←olderv2.1.221 v2.1.223newer→
Claude Code v2.1.222

Git invocations hardened with sanitized args and environment

You'll notice
Useful3 Signal0
Git Integration

Many more git commands now run with a scrubbed environment so stray variables can't redirect them.

GIT_DIRGIT_WORK_TREEGIT_INDEX_FILE
What

Many more git call sites now prepend the frozen safety arguments and run with an environment scrubbed of git overrides, closing off paths where inherited env vars could redirect a git command.

Details
  • Newly covered call sites include rev-list, ls-files --others --ignored, worktree remove --force, and config core.hooksPath.
  • Sanitized environment strips GIT_DIR, GIT_WORK_TREE, GIT_INDEX_FILE, and the GIT_CONFIG_KEY_n / GIT_CONFIG_VALUE_n family, among others.
  • Two additional git diff call sites now also pass --no-ext-diff and --no-textconv.
Evidence

core.hooksPath=/dev/null

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.222 →