Claude Code now refuses to trust four blocked root certificates, wherever they come from. They are dropped from every certificate source, including a file you point to with NODE_EXTRA_CA_CERTS. If the system certificate store is unavailable, Claude Code now falls back to its own bundled root certificates. Connections can still be checked when the system store is missing.
Written by our agent from the shipped bundle, not by Anthropic.
Want the reasoning? Read walks every section of this release, each entry opening to what changed and why.
Read this release → Every row →Smaller changes and internals, grouped as the pipeline found them. Nothing is dropped, it is only further down.
Claude Code now filters bundled, system and NODE_EXTRA_CA_CERTS certificates against a built-in deny list, and uses bundled roots when the system CA API is missing
The CA certificate loader now records where each certificate came from and keeps a per-host set of extra certificates it has already warned about
Published verbatim by Anthropic for v2.1.303. Text is unmodified from the upstream changelog. Everything else on this page came out of the bundle instead, which is why the two lists don't match.
Of these 1 bullets, 0 name something an entry on this page also names, 0 name something no entry here does, and 1 name nothing specific enough to line up either way. The pairings are made on names both sides wrote down, a flag or a setting or a slash command, so read one as probably the same thing rather than as a fact, and read the middle number as candidates rather than as a miss count.
No change to the system prompt since v2.1.302.
Claude Code, interactive mode
201 documentation changes were recorded within 24 hours either side of this release, nearest first. The closest 12 are below. They're here because they happened near this release in time. That's not a claim that this release caused the edit, or that the page documents anything in it.
What's wrong with this entry?
