chore: Update CHANGELOG.md and feed.xml

Fix changelog

CHANGELOG.md

@@ -1,11 +1,13 @@
 # Changelog
 
+## 2.1.148
+
+- Fixed the Bash tool returning exit code 127 on every command for some users (a regression introduced in 2.1.147)
+
 ## 2.1.147
 
-- Added the `Workflow` tool for deterministic multi-agent orchestration. It is off by default — set `CLAUDE_CODE_WORKFLOWS=1` to enable
 - Pinned background sessions (`Ctrl+T` in `claude agents`) now stay alive when idle, are restarted in place to apply Claude Code updates, and are shed under memory pressure only after non-pinned sessions
 - Renamed `/simplify` to `/code-review`. It now reports correctness bugs at a chosen effort level (e.g., `/code-review high`); pass `--comment` to post findings as inline GitHub PR comments. The old cleanup-and-fix behavior has been removed
-- Hardened REPL and Workflow tool sandboxes against prototype-pollution and thenable-based escapes
 - Improved auto-updater: retries transient network failures, reports specific error categories and OS error codes on failure, and shows the current version when an update fails
 - Improved diff rendering performance for large file edits
 - Prompt history no longer records consecutive duplicate entries — recalling a prompt with arrow-up and submitting it again won't add another copy

feed.xml

@@ -6,16 +6,21 @@
   <author><name>Anthropic</name></author>
   <link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md"/>
   <link rel="self" type="application/atom+xml" href="https://raw.githubusercontent.com/anthropics/claude-code/main/feed.xml"/>
-  <updated>2026-05-21T20:39:15Z</updated>
+  <updated>2026-05-22T01:16:46Z</updated>
+  <entry>
+    <id>https://github.com/anthropics/claude-code/releases/tag/v2.1.148</id>
+    <title>Claude Code v2.1.148</title>
+    <link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/releases/tag/v2.1.148"/>
+    <updated>2026-05-22T01:16:46Z</updated>
+    <content type="html">&lt;p&gt;• Fixed the Bash tool returning exit code 127 on every command for some users (a regression introduced in 2.1.147)&lt;/p&gt;</content>
+  </entry>
   <entry>
     <id>https://github.com/anthropics/claude-code/releases/tag/v2.1.147</id>
     <title>Claude Code v2.1.147</title>
     <link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/releases/tag/v2.1.147"/>
     <updated>2026-05-21T20:39:15Z</updated>
-    <content type="html">&lt;p&gt;• Added the Workflow tool for deterministic multi-agent orchestration. It is off by default — set CLAUDE_CODE_WORKFLOWS=1 to enable&lt;/p&gt;
-&lt;p&gt;• Pinned background sessions (Ctrl+T in claude agents) now stay alive when idle, are restarted in place to apply Claude Code updates, and are shed under memory pressure only after non-pinned sessions&lt;/p&gt;
+    <content type="html">&lt;p&gt;• Pinned background sessions (Ctrl+T in claude agents) now stay alive when idle, are restarted in place to apply Claude Code updates, and are shed under memory pressure only after non-pinned sessions&lt;/p&gt;
 &lt;p&gt;• Renamed /simplify to /code-review. It now reports correctness bugs at a chosen effort level (e.g., /code-review high); pass --comment to post findings as inline GitHub PR comments. The old cleanup-and-fix behavior has been removed&lt;/p&gt;
-&lt;p&gt;• Hardened REPL and Workflow tool sandboxes against prototype-pollution and thenable-based escapes&lt;/p&gt;
 &lt;p&gt;• Improved auto-updater: retries transient network failures, reports specific error categories and OS error codes on failure, and shows the current version when an update fails&lt;/p&gt;
 &lt;p&gt;• Improved diff rendering performance for large file edits&lt;/p&gt;
 &lt;p&gt;• Prompt history no longer records consecutive duplicate entries — recalling a prompt with arrow-up and submitting it again won't add another copy&lt;/p&gt;
@@ -623,49 +628,4 @@
 &lt;p&gt;• Fixed a malformed hooks entry in settings.json no longer invalidating the entire file&lt;/p&gt;
 &lt;p&gt;• Voice mode: keybindings bound to Caps Lock now show an error since terminals don't deliver Caps Lock as a key event&lt;/p&gt;</content>
   </entry>
-  <entry>
-    <id>https://github.com/anthropics/claude-code/releases/tag/v2.1.121</id>
-    <title>Claude Code v2.1.121</title>
-    <link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/releases/tag/v2.1.121"/>
-    <updated>2026-05-18T01:52:01Z</updated>
-    <content type="html">&lt;p&gt;• Added alwaysLoad option to MCP server config — when true, all tools from that server skip tool-search deferral and are always available&lt;/p&gt;
-&lt;p&gt;• Added claude plugin prune to remove orphaned auto-installed plugin dependencies; plugin uninstall --prune cascades&lt;/p&gt;
-&lt;p&gt;• Added a type-to-filter search box to /skills so you can find a skill in long lists without scrolling&lt;/p&gt;
-&lt;p&gt;• PostToolUse hooks can now replace tool output for all tools via hookSpecificOutput.updatedToolOutput (previously MCP-only)&lt;/p&gt;
-&lt;p&gt;• Fullscreen mode: typing into the prompt no longer jumps scroll back to the bottom after you've scrolled up to read earlier output&lt;/p&gt;
-&lt;p&gt;• Dialogs that overflow the terminal are now scrollable with arrow keys, PgUp/PgDn, home/end, and mouse wheel in both fullscreen and non-fullscreen modes&lt;/p&gt;
-&lt;p&gt;• Clicking any line of a long URL that wraps across rows in fullscreen mode now opens the full URL&lt;/p&gt;
-&lt;p&gt;• SDK and claude -p: CLAUDE_CODE_FORK_SUBAGENT=1 now works in non-interactive sessions&lt;/p&gt;
-&lt;p&gt;• --dangerously-skip-permissions no longer prompts for writes to .claude/skills/, .claude/agents/, and .claude/commands/&lt;/p&gt;
-&lt;p&gt;• /terminal-setup now enables iTerm2's "Applications in terminal may access clipboard" setting so /copy works, including from tmux&lt;/p&gt;
-&lt;p&gt;• MCP servers that hit a transient error during startup now auto-retry up to 3 times instead of staying disconnected&lt;/p&gt;
-&lt;p&gt;• The terminal tab session title is now generated in your configured language setting&lt;/p&gt;
-&lt;p&gt;• Claude.ai connectors with the same upstream URL are now deduplicated instead of appearing as duplicates&lt;/p&gt;
-&lt;p&gt;• Vertex AI: support X.509 certificate-based Workload Identity Federation (mTLS ADC)&lt;/p&gt;
-&lt;p&gt;• Faster startup after upgrading: removed the Recent Activity panel from the release-notes splash&lt;/p&gt;
-&lt;p&gt;• LSP diagnostic summaries now expand on click/ctrl+o and show the expand hint&lt;/p&gt;
-&lt;p&gt;• SDK: mcp_authenticate now supports redirectUri for custom scheme completion and claude.ai connectors&lt;/p&gt;
-&lt;p&gt;• OpenTelemetry: added stop_reason, gen_ai.response.finish_reasons, and user_system_prompt (gated behind OTEL_LOG_USER_PROMPTS) to LLM request spans&lt;/p&gt;
-&lt;p&gt;• [VSCode] Voice dictation now respects the accessibility.voice.speechLanguage setting when no Claude Code language is configured&lt;/p&gt;
-&lt;p&gt;• [VSCode] /context now opens a native token usage dialog&lt;/p&gt;
-&lt;p&gt;• Fixed unbounded memory growth (multi-GB RSS) when processing many images in a session&lt;/p&gt;
-&lt;p&gt;• Fixed /usage leaking up to ~2GB of memory on machines with large transcript histories&lt;/p&gt;
-&lt;p&gt;• Fixed memory leak when long-running tools fail to emit a clear progress event&lt;/p&gt;
-&lt;p&gt;• Fixed Bash tool becoming permanently unusable when the directory Claude was started in is deleted or moved mid-session&lt;/p&gt;
-&lt;p&gt;• Fixed --resume crashing on startup in external builds&lt;/p&gt;
-&lt;p&gt;• Fixed --resume failing on large sessions when a transcript line was corrupted by an unclean shutdown — the corrupt line is now skipped&lt;/p&gt;
-&lt;p&gt;• Fixed thinking.type.enabled is not supported error when using Bedrock application inference profile ARNs&lt;/p&gt;
-&lt;p&gt;• Fixed Microsoft 365 MCP OAuth failing with duplicate or unsupported prompt parameter&lt;/p&gt;
-&lt;p&gt;• Fixed scrollback duplication when pressing Ctrl+L or triggering a redraw in non-fullscreen mode on tmux, GNOME Terminal, Windows Terminal, and Konsole&lt;/p&gt;
-&lt;p&gt;• Fixed claude.ai MCP connectors silently disappearing when the connector-list fetch hits a transient auth error at startup&lt;/p&gt;
-&lt;p&gt;• Fixed "Always allow" rules for built-in tools in remote sessions not surviving worker restarts&lt;/p&gt;
-&lt;p&gt;• Fixed NO_PROXY not being respected for all HTTP clients when set via managed-settings.json under the native build&lt;/p&gt;
-&lt;p&gt;• Fixed managed settings approval prompt exiting the session even when accepted — now applies settings and continues&lt;/p&gt;
-&lt;p&gt;• Fixed /usage returning "rate limited" after a stale OAuth token — now refreshes automatically&lt;/p&gt;
-&lt;p&gt;• Fixed invalid legacy enum values in settings.json invalidating the entire settings file&lt;/p&gt;
-&lt;p&gt;• Fixed /usage dialog content being clipped when no-flicker mode is off&lt;/p&gt;
-&lt;p&gt;• Fixed /focus showing "Unknown command" when the fullscreen renderer is off — now explains how to enable it&lt;/p&gt;
-&lt;p&gt;• Fixed embedded grep/find/rg shell wrappers failing when the running binary is deleted mid-session — now falls back to installed tools&lt;/p&gt;
-&lt;p&gt;• Reduced peak file descriptor usage during find in the Bash tool on large directory trees&lt;/p&gt;</content>
-  </entry>
 </feed>