Follow Discord
Sweep 02 Oct 2026 · 18:55Z Build v2.1.288 509 read Stable v2.1.285 Latest v2.1.287 Next v2.1.288 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.287 ·

Environment variables from untrusted served folders are held back

Claude Code now withholds environment variables set by a served folder that nobody has trusted

You'll notice Improvements
JSON All of v2.1.287
You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
SettingsArea: what it touches
ImprovementsKind: in v2.1.287,
ImprovementsSection of the release
What

Settings can set environment variables, which are named values that programs read when they start. Claude Code now filters out such variables when they come from a served folder that nobody has trusted, and it keeps track of whether it held any back.

A starting folder without a trust marking is also now treated as private by default.

Why

This appears to tighten what outside or shared settings can change in your environment without your trust.

How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not clear what a served folder is in practice, what triggers this filtering, or whether it is switched on for everyone.

See this entry in the whole of v2.1.287 →

Feedback