You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
ElsewhereArea: what it touches
ImprovementsKind: in v2.1.274,
ImprovementsSection of the release
What
Claude Code can now refuse to create a git worktree or checkout with a new reason, unsafe_key, when the repository's own git config sets an LFS (Git Large File Storage)-related config key that names a program git-lfs would run during checkout or status.
Why
A repository's git config can be crafted to make git-lfs automatically run an arbitrary program. Refusing the worktree creation in that case stops Claude Code from triggering that program without the user knowing.