Unclear It is not clear whether the oldest bubblewrap version that triggers the warning has actually changed.
What
The sandbox is the restricted space Claude Code runs commands in. On Linux it uses a tool called bubblewrap. Three things changed:
- The list of paths the sandbox may not read now also includes paths that come from credentials.
- The warning shown when bubblewrap is too old is now checked against a different version value. Its text no longer says that a mount point (a folder attachment) left behind by an interrupted sandbox stays on your machine.
- A new cleanup step removes a background connection file when the sandbox shuts down.
Why
These changes tighten what commands inside the sandbox can read and change what you are told about an older bubblewrap.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not clear whether the oldest bubblewrap version that triggers the warning has actually changed.