You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
ArtifactsArea: what it touches
Bug FixesKind: in v2.1.274,
Bug FixesSection of the release
What
Before publishing a staged file, Claude Code verifies that the source file is what it appears to be. This check now uses a dedicated refusal response when a file's path can't be safely verified, for example because a symbolic or hard link makes the true source unclear. Previously this case was handled by a separate, duplicated deny object.
Why
This hardens the publish path against symlink or hardlink tricks that could otherwise be used to substitute a different file than the one that was actually staged.
