Evidence record / claude-code

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the signals and issues that cite it, below.

Build Tool Config Write Protection

What Changed

acceptEdits Mode now prompts before writing build-tool config files granting code execution (.npmrc, .yarnrc*, bunfig.toml, .bazelrc, .pre-commit-config.yaml, .devcontainer/, etc.)

Operator Implication

Build tool configuration files that grant code execution now require confirmation even in acceptEdits mode, mitigating supply-chain attacks

Receipt

[acceptEdits Mode: Now prompts before writing build-tool config files granting code execution (.npmrc, .yarnrc*, bunfig.toml, .bazelrc, `.pre-commit-conf](https://code.claude.com/docs/en/changelog)

Finding metadata

Confidence: high
Actionability: test
Accessibility impact: none

Run: 2026-06-03-weekly-digest-2026-05-28_2026-06-03-frontier-v0

Finding ID: 2026-06-02-claude-code-build-tool-config-protection

Accepted signals

Writes to execution-granting config and shell startup files now prompt even in acceptEdits mode / 2026-06-02

Source links

Primary links, including exact changelog lines when available.

Claude Code
release noteacceptEdits Mode: Now prompts before writing build-tool config files granting code execution (`.npmrc`, `.yarnrc*`, `bunfig.toml`, `.bazelrc`, `.pre-commit-config.yaml`, `.devcontainer/`, etc.)code.claude.com/docs/en/changelog

Versioned source: run artifact