diff --git a/CHANGELOG.md b/CHANGELOG.md index b80eb1ed..a903062b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,27 @@ # Changelog +## 2.1.223 + +- Added owner wildcard entries (`"owner/*"`) to the `strictKnownMarketplaces` and `blockedMarketplaces` managed settings for allowing or blocking all marketplace repos under a GitHub org +- Added a warning when workflow agents, forked skills, slash commands, or resumed background agents' requested subagent model is restricted and the parent model runs instead +- Added a `/teleport` hint in cloud sessions showing how to continue locally with `claude --teleport ` +- Fixed a Bash permission bypass where a crafted command could hide parts of itself from permission checks +- Fixed permission prompts so commands padded with tabs or invisible Unicode can no longer hide part of the command from the approval dialog +- Fixed workflow scripts being able to use dynamic `import()` to run code outside the workflow sandbox +- Fixed a permission gap where an agent definition's `bypassPermissions` mode ignored the org bypass-permissions disable policy +- Fixed resuming a session after a mid-session `/cd` coming back empty +- Fixed gateway model discovery hiding Claude models registered under provider-prefixed IDs such as `vertex_ai/claude-*` or `bedrock/anthropic.claude-*` +- Fixed `modelOverrides` keys that aren't Anthropic model IDs being treated as the session's canonical model ID; unknown keys are now ignored as documented +- Fixed managed settings: server-delivered settings no longer disable the env block of a machine-local `managed-settings.json` or MDM profile; admin env now merges per key +- Fixed sandboxed commands failing to start on Linux when `sandbox.filesystem.denyWrite` covers the working directory +- Fixed forked background agents getting stuck "already resuming" for the rest of the session when rebuilding the fork's parent prompt failed during resume +- Fixed a resumed session failing every turn, or leaving the interactive app on an unresponsive error screen, when its history held a malformed diagnostics attachment +- Fixed a rare hang when parsing unusual `git push` output +- Changed `CLAUDE_CODE_DISABLE_1M_CONTEXT` to hold every Claude model with a native 1M window to 200K via auto-compaction, not just a fixed list; a startup warning now appears when auto-compaction isn't holding the session to 200K +- Changed auto-compact to keep sessions on unrecognized model IDs within the assumed context window instead of letting them grow past it; set `CLAUDE_CODE_DISABLE_UNKNOWN_MODEL_WINDOW_ENFORCEMENT=1` to restore the previous behavior +- Changed `/review` to be an alias of `/code-review`, which reviews the current diff or a PR (`/code-review `); use `/code-review ultra` for a deep cloud review +- Changed `/code-review` with no effort level to reuse the level you typed last; type a level like `/code-review high` to change it + ## 2.1.222 - Fixed worktree-isolated sessions and their subagents being able to run destructive git commands against the main checkout; isolation now applies to file edits and Bash in every session type diff --git a/feed.xml b/feed.xml index 4b444b98..fafe2b80 100644 --- a/feed.xml +++ b/feed.xml @@ -6,7 +6,32 @@ Anthropic - 2026-08-04T22:39:48Z + 2026-08-06T00:52:31Z + + https://github.com/anthropics/claude-code/releases/tag/v2.1.223 + Claude Code v2.1.223 + + 2026-08-06T00:52:31Z + <p>• Added owner wildcard entries ("owner/*") to the strictKnownMarketplaces and blockedMarketplaces managed settings for allowing or blocking all marketplace repos under a GitHub org</p> +<p>• Added a warning when workflow agents, forked skills, slash commands, or resumed background agents' requested subagent model is restricted and the parent model runs instead</p> +<p>• Added a /teleport hint in cloud sessions showing how to continue locally with claude --teleport &lt;session id&gt;</p> +<p>• Fixed a Bash permission bypass where a crafted command could hide parts of itself from permission checks</p> +<p>• Fixed permission prompts so commands padded with tabs or invisible Unicode can no longer hide part of the command from the approval dialog</p> +<p>• Fixed workflow scripts being able to use dynamic import() to run code outside the workflow sandbox</p> +<p>• Fixed a permission gap where an agent definition's bypassPermissions mode ignored the org bypass-permissions disable policy</p> +<p>• Fixed resuming a session after a mid-session /cd coming back empty</p> +<p>• Fixed gateway model discovery hiding Claude models registered under provider-prefixed IDs such as vertex_ai/claude-* or bedrock/anthropic.claude-*</p> +<p>• Fixed modelOverrides keys that aren't Anthropic model IDs being treated as the session's canonical model ID; unknown keys are now ignored as documented</p> +<p>• Fixed managed settings: server-delivered settings no longer disable the env block of a machine-local managed-settings.json or MDM profile; admin env now merges per key</p> +<p>• Fixed sandboxed commands failing to start on Linux when sandbox.filesystem.denyWrite covers the working directory</p> +<p>• Fixed forked background agents getting stuck "already resuming" for the rest of the session when rebuilding the fork's parent prompt failed during resume</p> +<p>• Fixed a resumed session failing every turn, or leaving the interactive app on an unresponsive error screen, when its history held a malformed diagnostics attachment</p> +<p>• Fixed a rare hang when parsing unusual git push output</p> +<p>• Changed CLAUDE_CODE_DISABLE_1M_CONTEXT to hold every Claude model with a native 1M window to 200K via auto-compaction, not just a fixed list; a startup warning now appears when auto-compaction isn't holding the session to 200K</p> +<p>• Changed auto-compact to keep sessions on unrecognized model IDs within the assumed context window instead of letting them grow past it; set CLAUDE_CODE_DISABLE_UNKNOWN_MODEL_WINDOW_ENFORCEMENT=1 to restore the previous behavior</p> +<p>• Changed /review to be an alias of /code-review, which reviews the current diff or a PR (/code-review &lt;level&gt; &lt;pr#&gt;); use /code-review ultra for a deep cloud review</p> +<p>• Changed /code-review with no effort level to reuse the level you typed last; type a level like /code-review high to change it</p> + https://github.com/anthropics/claude-code/releases/tag/v2.1.222 Claude Code v2.1.222 @@ -627,28 +652,4 @@ <p>• Removed a redundant navigation hint from the claude agents footer</p> <p>• [VSCode] Added a Settings toggle for "Enable Remote Control for all sessions"</p> - - https://github.com/anthropics/claude-code/releases/tag/v2.1.202 - Claude Code v2.1.202 - - 2026-07-06T22:51:10Z - <p>• Added a "Dynamic workflow size" setting in /config for controlling how large Claude generally makes dynamic workflows (small/medium/large agent counts) — an advisory guideline, not an enforced cap</p> -<p>• Added workflow.run_id and workflow.name OpenTelemetry attributes to telemetry emitted by workflow-spawned agents, so a workflow run's activity can be reconstructed from OTel data</p> -<p>• Fixed a crash in the inline Ctrl+R history search when accepting or cancelling while the search was still scanning the history file</p> -<p>• Fixed /rename on background sessions being reverted when the job restarts, which broke addressing the session by its new name</p> -<p>• Fixed transient mTLS handshake failures when settings were re-applied during an in-place client certificate rotation</p> -<p>• Fixed commands sent from Remote Control (mobile/web) into an interactive session failing with "Unknown command"</p> -<p>• Fixed images and files sent from the Remote Control mobile or web app without a caption being silently dropped</p> -<p>• Fixed the sign-in URL printed by claude auth login and claude mcp login --no-browser not being reliably clickable when it wraps over SSH — it is now emitted as a single hyperlink</p> -<p>• Fixed opening a chat from claude agents sometimes failing with "currently running as a background agent" followed by a worker crash/respawn loop</p> -<p>• Fixed workflow scripts with unicode quote escapes in strings being corrupted before parsing; workflow parse errors now show the offending line instead of always blaming TypeScript</p> -<p>• Fixed voice dictation retrying in an unbounded loop when the microphone or audio recorder fails — repeated capture failures now pause voice input</p> -<p>• Fixed /remote-control sessions showing the wrong permission mode in the mobile and web apps</p> -<p>• Fixed resuming a session by name, or opening the resume picker, taking minutes and using a large amount of memory in repositories with many git worktrees</p> -<p>• Fixed installer and updater downloads failing immediately with "aborted" when a proxy or network drops the connection mid-download — transient connection drops now retry</p> -<p>• Fixed re-invoking an already-loaded skill appending a duplicate copy of its instructions to context</p> -<p>• Improved /workflows agent list layout: wider titles, a dedicated time column, shorter model names, and no per-row tool-call counts</p> -<p>• Improved MCP error messages: clearer error when a server config has url but no type, suggesting "type": "http" instead of the misleading "command: expected string"</p> -<p>• Changed /review &lt;pr&gt; back to a fast single-pass review; use /code-review &lt;level&gt; &lt;pr#&gt; for the multi-agent review at a chosen effort level</p> -