Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.227 ·

Wider detection of secret-shaped environment variables

Many more environment variable names are now treated as secrets and protected.

You'll notice Improvements
JSON All of v2.1.227
You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.227,
What probably matters to youSection of the release
What

Environment variables are now treated as sensitive when their name contains TOKEN, SECRET, PASSWORD, PASSPHRASE, KEY, AUTH, COOKIE, PAT, DSN or CREDENTIAL(S) as a whole word, plus CLOUDSDK_PROXY_PASSWORD and the numbered GIT_CONFIG_KEY_ variables specifically.

Evidence

"CLOUDSDK_PROXY_PASSWORD", "GIT_CONFIG_KEY_[0-9]*"

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.227 →

Feedback