New git config entries for tag and commit signing (like tag.gpgSign, gpg.format) added, purpose unclear
A new regular expression matching git signing-related configuration keys, such as tag.gpgsign, user.signingkey, gpg.format, and gpg.program, was added, along with a paired list of key/forced-value combinations like tag.gpgSign set to false and gpg.ssh.defaultKeyCommand set to empty.
This extends the earlier work that let Claude Code trust and automatically configure git signing settings for commits, now recognizing more signing-related keys such as tag signing settings, though the finding doesn't show these new entries actually being applied yet.
Whether these new keys and forced values are actually applied anywhere, or just defined, is not shown by the evidence.