You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.310,
ImprovementsSection of the release
What
A shell command can begin with one or more variable settings, such as NAME=value, before the command itself. Claude Code now reads these through one shared step instead of each feature using its own. Before, only the variable's name was checked. Now the value is checked too, and the prefix is rejected when the value looks like a file path:
the value contains ..
the value starts with /
the value starts with a drive letter such as C:
Separately, a check decides whether a command matches an allowed command prefix and can run without asking. That check now treats Bash and PowerShell differently. For Bash it refuses commands that contain:
wildcard characters
~
a leading =
a leading !
Why
Fewer commands can match a permission prefix or be suggested as a new permission rule. A permission rule is a setting that says which commands may run without asking. Some commands that matched before may now ask for approval.
