Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.238 ·

Sensitive-file detection now sees through Unicode look-alikes

Sensitive filenames disguised with Unicode look-alike letters are now caught.

You'll notice Improvements
JSON All of v2.1.238
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Cloud SyncArea: what it touches
ImprovementsKind: in v2.1.238,
ImprovementsSection of the release
What

A file named with a dotless i, a long s, a Kelvin sign or an ff/fi ligature no longer slips past the checks that classify a path as sensitive. Paths are normalised through a NFKD plus case round trip with invisible characters stripped, and tracked sensitive files get their own verdict, sensitive_tracked. The sync worker's filename-safety checks reject these look-alikes outright.

Details
  • The set of confusables differs by platform: Windows and WSL use one list, macOS adds ß.
  • Runs on every classification, with no flag.
Evidence

sensitive_tracked

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.238 →

Feedback