You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PluginsArea: what it touches
ImprovementsKind: in v2.1.321,
ImprovementsSection of the release
Unclear What Claude Code does with the new list of sensitive file names is not shown.
What
Managed settings are settings an administrator sets for everyone in an organization. A plugin marketplace is a source Claude Code installs plugins from. Several checks were added:
Path warning: Claude Code warns when managed settings place a marketplace at a path that is not absolute, meaning not written out in full from the top of the file system.
Pins: for marketplaces that come from settings, Claude Code now compares their pins, the fixed point a marketplace is locked to.
Sensitive file names: Claude Code now carries a long list of file names it treats as sensitive.
Secret scanning: every rule Claude Code uses to look for passwords and keys in text now has a short piece of text that must be present before the full rule is tried.
Why
Organizations get marketplace policy enforced more strictly, and the search for leaked secrets runs faster.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtWhat Claude Code does with the new list of sensitive file names is not shown.
Anthropic's release notes agree[VSCode] Fixed a plugin's permission request showing a name with hidden characters: it now reads "a plugin"
