More environment variables read through the central accessor

More environment variables go through the central registry that handles allowlisting and scrubbing.

Under the hood Internal Changes

JSON All of v2.1.232

Under the hoodTier: how much it should matter to you

1Useful: my rating, 1 to 5

2Signal: worth watching, 1 to 5

ConfigurationArea: what it touches

Internal ChangesKind: in v2.1.232, 13 Aug 26

Internal ChangesSection of the release

What

Several direct process.env reads now go through the typed environment registry, which is also what the allowlist and scrubbing machinery operates on.

Details

Moved: SSH_CONNECTION, SSH_CLIENT and SSH_TTY (Windows SSH detection), TMUX, STY, USE_BUILTIN_RIPGREP, ANTHROPIC_SMALL_FAST_MODEL_AWS_REGION and ANTHROPIC_AUTH_TOKEN.

Evidence

USE_BUILTIN_RIPGREP

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.232 →

The build it came inv2.1.232

13 Aug 2026 · 405 entries, this one is #398.

Use it now43
You'll notice209
Nothing to try yet41
Under the hood112

Either side of it

v2.1.231Older
v2.1.233Newer

Open the release →

Names in this entry

settingprocess.env
Small polish: credit labels, an extra help link, bigger artifact fetch limit, safer MCP environment handling.
envSSH_CONNECTION
More environment variables go through the central registry that handles allowlisting and scrubbing.
envSSH_CLIENT
More environment variables go through the central registry that handles allowlisting and scrubbing.
envSSH_TTY
More environment variables go through the central registry that handles allowlisting and scrubbing.
envTMUX
More environment variables go through the central registry that handles allowlisting and scrubbing.
envSTY
More environment variables go through the central registry that handles allowlisting and scrubbing.
envUSE_BUILTIN_RIPGREP
More environment variables go through the central registry that handles allowlisting and scrubbing.
envANTHROPIC_SMALL_FAST_MODEL_AWS_REGION
Override AWS region for the Haiku-class model when using Amazon Bedrock or Amazon Bedrock Mantle. On Amazon Bedrock, this only takes effect when ANTHROPIC_DEFAULT_HAIKU_MODEL or the deprecated ANTHROPIC_SMALL_FAST_MODEL is also set, since Amazon Bedrock otherwise runs background tasks on the default Sonnet model or the primary model in the session region
envANTHROPIC_AUTH_TOKEN
Custom value for the Authorization header (the value you set here will be prefixed with Bearer )

Is this right?

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

v2.1.259 Config lock acquisition now retries with backoff instead of failing on ELOCKED
Both mention configuration
v2.1.259 Config load now distinguishes parse errors from read errors
Both mention configuration
v2.1.259 Config parse-error tracking becomes tri-state
Both mention configuration