Sweep 19 Sep 2026 · 02:36Z Build v2.1.278 500 read Stable v2.1.267 Latest v2.1.278 Next v2.1.278 Feeds RSS JSON llms.txt Unofficial
Claude Code v2.1.274 ·

Git tag/GPG signing config keys defined but apparently unused

New git config entries for tag and commit signing (like tag.gpgSign, gpg.format) added, purpose unclear

TierNothing to try yethow much it should matter to you
Useful1my rating, 1 to 5
Signal3worth watching, 1 to 5
AreaGit Securitywhat it touches
KindIn Developmentin v2.1.274,
Nothing to try yet

New git config entries for tag and commit signing (like tag.gpgSign, gpg.format) added, purpose unclear

What

A new regular expression matching git signing-related configuration keys, such as tag.gpgsign, user.signingkey, gpg.format, and gpg.program, was added, along with a paired list of key/forced-value combinations like tag.gpgSign set to false and gpg.ssh.defaultKeyCommand set to empty.

Why

This extends the earlier work that let Claude Code trust and automatically configure git signing settings for commits, now recognizing more signing-related keys such as tag signing settings, though the finding doesn't show these new entries actually being applied yet.

How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtWhether these new keys and forced values are actually applied anywhere, or just defined, is not shown by the evidence.

See this entry in the whole of v2.1.274 →