Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.307 ·

Two server-controlled checks tighten how shell commands are judged safe

Two new server-controlled checks change how git command names are matched and add a stricter test for sed commands

You'll notice Improvements
JSON All of v2.1.307
You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.307,
ImprovementsSection of the release

Unclear Whether these checks are active, and whether they change which commands run without asking, is not established.

What

Before running a shell command, Claude Code checks whether it is safe enough to run without asking you. Two new switches, set from Anthropic's servers, change parts of that check:

  • Git command names: a wildcard pattern is turned into an exact matching rule and tested against the names of git programs.
  • sed commands: a second pattern is added to the check, and the message shown when a command is refused gains extra wording.

A third change affects how command options are judged safe. Before, the single sed pattern and the older option check always applied.

Why

This looks like the shell checker being hardened step by step. Depending on how the switches are set, some commands that used to run without asking may now need your approval.

How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtWhether these checks are active, and whether they change which commands run without asking, is not established.

See this entry in the whole of v2.1.307 →

Feedback