You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Bash SafetyArea: what it touches
Bug FixesKind: in v2.1.273,
Bug FixesSection of the release
What
Claude Code's bash safety checker gained two new internal helpers:
One recursively checks whether a command or variable assignment contains a nested subshell (a command run in its own sub-process, e.g. via parentheses).
Another walks a parsed command looking for =( array-literal syntax hidden inside words, regular expressions, or expansions, falling back to treating the command as unsafe by default if parsing fails or the input is too long.
Why
These detectors help the safety checker catch commands that use subshells or array-literal syntax to do something other than what they appear to on the surface, before deciding whether a command is safe to auto-run.
