What probably matters to youSection of the release
Unclear Which variables this step removes and when it runs is not established.
What
Environment variables are named settings passed to a program when it starts. Claude Code has a step that removes certain variables from a blocked list. That step now also spares the variable whose name is given in CLAUDE_CODE_HOST_AUTH_ENV_VAR, alongside the one name it already spared. Names are compared without regard to upper or lower case.
Why
Hosted or remote setups that pass a sign-in credential through that variable can keep it instead of having it removed.