What
The sandbox is the restricted environment Claude Code can run commands in, which limits the files they can change. The way Claude Code builds the sandbox's file rules changed:
- Write access granted late through symlinks (shortcut files that point to another location) now goes through a separate checking step. Before, these grants went straight into the rules.
- For each such grant, Claude Code now tries to create the target folder or file and removes matching entries from the blocked list.
- The file rules can now allow writing to particular paths that sit inside an otherwise blocked area.
- Git worktrees (extra working copies of a repository) now have their links guarded.
- The configuration of
glab, the GitLab command-line tool, is now blocked from writes.
Why
This changes which paths commands inside the sandbox can write to. In particular, they can no longer change your glab configuration.