Highlights
This patch release stops SSH sessions from forwarding credential environment variables into sandboxes by default. Variables such as ANTHROPIC_API_KEY, OPENAI_API_KEY, and GH_TOKEN are no longer sent from the client to the sandbox unless explicitly allowed via the ssh.acceptEnv setting.
What's New
Bug Fixes
- SSH sessions no longer forward credential environment variables (
ANTHROPIC_API_KEY,OPENAI_API_KEY,GH_TOKEN, ...) from the client into the sandbox by default; use thessh.acceptEnvsetting to opt back in for specific variables