Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeReleasesv2.1.239entry #109

Claude Code v2.1.239 ·

Sandboxed CLIs get placeholder credentials so they route through the agent proxy

gh, aws, gcloud, bq and gsutil get placeholder credentials so they authenticate through the proxy instead of failing.

You'll notice New Features
JSON All of v2.1.239
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
SandboxArea: what it touches
New FeaturesKind: in v2.1.239,
New FeaturesSection of the release
What

When Claude Code runs gh, aws, gcloud, bq or gsutil inside its proxied environment and none of that tool's real credential variables are set, it now injects placeholder values (literally proxy-injected) so the CLI authenticates via the proxy instead of failing for want of a token.

Details
  • Covered groups: gh uses GH_TOKEN and GITHUB_TOKEN; aws uses AWS_ACCESS_KEY_ID and its companions; gcloud, bq and gsutil use CLOUDSDK_AUTH_ACCESS_TOKEN.
  • If any real credential variable in a group is already present, no placeholder is injected for that group.
  • The list of credential variables forwarded into the sandboxed environment is now derived from this same table rather than hard-coded.
Evidence

realCredentialEnv

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.239 →

Feedback