You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
ElsewhereArea: what it touches
Bug FixesKind: in v2.1.280,
Bug FixesSection of the release
What
When Claude Code checks a URL's hostname against your no_proxy (or honorNoProxy) settings to decide whether to bypass a proxy, it now clears any username and password from the URL first, before comparing hostnames.
Why
Credentials embedded in a URL (like user:pass@host) could otherwise interfere with matching the hostname against your no-proxy list. Stripping them first makes the comparison rely only on the actual host, so proxy bypass rules behave consistently regardless of whether a URL carries login details.
