You'll notice
More dynamic-linker and module-path variables are stripped before spawning hooks and git operations.
The list of environment variables stripped before spawning subprocesses such as hooks and git operations has grown to include more dynamic-linker and locale/module-path variables, including DEVELOPER_DIR, GIT_TEXTDOMAINDIR, GCONV_PATH, NLSPATH, PSMODULEPATH, and versioned DYLD variables like DYLD_VERSIONED_LIBRARY_PATH, closing off more injection vectors.