You'll notice
Sandbox checks now recognize safe argument flags for many more scripting-language interpreters
What
When Claude Code's sandbox checks whether a script invoked via a shebang line (the #!/usr/bin/... line that names an interpreter) is safe to run, it now uses a large table of argument grammars specific to each interpreter, including bash, dash, zsh, node, Rscript, osascript, fish, tclsh, wish, python, perl, ruby, awk, sed, php, csh, expect, and make. Previously this check was simpler and less permissive.
Why
Scripts that invoke a recognized interpreter with known-safe flags can now be judged safe more accurately, rather than being treated conservatively across the board.