mirror of
https://github.com/anthropics/claude-code.git
synced 2026-08-17 12:53:44 +00:00
Compare commits
2 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
0fa8c19d50 | ||
|
|
1f6015b5d5 |
75
CHANGELOG.md
75
CHANGELOG.md
@@ -1,5 +1,80 @@
|
||||
# Changelog
|
||||
|
||||
## 2.1.233
|
||||
|
||||
- Added GitLab merge request URL support to the `--worktree` flag and the `claude agents` view (where MRs display as `!N`)
|
||||
- Added an opt-in `forward_user_identity` apps gateway setting on Anthropic upstreams that sends the signed-in user's identity as headers, so a proxy behind the gateway can attribute spend per user
|
||||
- Added opt-in memory cgroup support for Bash tool commands on Linux (`CLAUDE_CODE_TOOL_MEMORY_LIMIT`) so a runaway build can't stall the session
|
||||
- Added `CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS` environment variable to configure the WebFetch session URL cache TTL (default unchanged: 15 minutes)
|
||||
- Fixed cloud sessions occasionally being marked as lost when the environment shut down while Claude was waiting on a permission prompt
|
||||
- Fixed MCP v2 connections endlessly reopening the subscriptions/listen stream against servers that terminate long-held streams on a fixed timeout (e.g. serverless hosts)
|
||||
- Fixed Notification hooks not firing for permission prompts when running under Claude Desktop or VS Code
|
||||
- Fixed idle sessions on Linux sometimes keeping one CPU core at 100% when sandboxing is enabled
|
||||
- Fixed bundled skill aliases like `/checkup` and `/review` reporting "Unknown command" in `-p` mode or with plugins/MCP loaded when a user or project skill shadows the bundled skill
|
||||
- Fixed skill/command argument substitution to prevent argument values from being re-expanded as template markers
|
||||
- Fixed Windows paths spelled with the NT `\??\` device prefix bypassing UNC path validation, closing an NTLM credential-leak vector
|
||||
- Improved `claude self-hosted-runner` session start time: the session branch is now created without rewriting the working tree, and two server round trips no longer block the agent's launch
|
||||
- Improved apps gateway error forwarding: 400/413 errors from Vertex, Foundry, and Claude Platform on AWS upstreams now carry the upstream's own message; fixes a bug with auto-compact on apps gateway
|
||||
- Improved `claude plugin validate` to check a bare `.claude/skills` directory, reporting SKILL.md files whose frontmatter fails to parse
|
||||
- Improved screen reader mode: the `/effort` selector renders as a numbered list with a typed-number prompt, and hint and dialog text is no longer clipped
|
||||
- Improved print mode diagnostics: a `[claude-code:unrecognized_model]` line is written to stderr when a request goes out for a model ID Claude Code doesn't recognize; map it with `modelOverrides` to silence
|
||||
- Changed the GitHub app setup tip to no longer appear in repositories whose origin remote is on gitlab.com or bitbucket.org; the enterprise marketplace tip now covers non-GitHub internal git hosts
|
||||
- Todo/task-tracking tools (TaskCreate/Get/Update/List, TodoWrite) are no longer available on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models; set `CLAUDE_CODE_ENABLE_TODO_TOOLS=1` to bring them back
|
||||
- Windows: fixed auto mode repeatedly stopping for manual approval on ordinary `cd <dir> && <command> > file` Bash commands (a 2.1.232 regression)
|
||||
- Reverted the 2.1.232 Bash permission changes for Cygwin-style symlinks on Windows and for input redirections (`< file`); a narrower version will return in a later release
|
||||
|
||||
## 2.1.232
|
||||
|
||||
- Subagent forking is now on by default: a `subagent_type: "fork"` subagent inherits the full conversation and prompt cache, and non-teammate agent spawns in interactive sessions now run in the background by default
|
||||
- Type `@` in the prompt to mention another Claude session by name; Claude then uses `SendMessage` to reach that session directly
|
||||
- `SendMessage` now delivers to a bare name that exactly matches one live session, instead of asking to confirm with a ref first
|
||||
- Interactive sessions on one machine now keep unique names: starting or renaming a session to a name another live session already uses gives it a `name-word-word` variant and tells you
|
||||
- Added `/config` rows for "Dialog expiry" and "Messages from your other sessions" (cross-session inbound accept/hold/refuse)
|
||||
- Added secret redaction for GitLab token families (`glrt-`, `gloas-`, `glptt-`, `glagent-`, `glimt-`, `glsoat-`, `glcbt-`, `glft-`, `glffct-`) and full redaction of routable `glpat-`/`gldt-` tokens; the `glab` CLI config store gets the same sandbox and credential-path protection as `gh`
|
||||
- Added GitLab support to plugin marketplaces: bare `gitlab.com` repo URLs (including nested subgroups) now clone like `github.com` URLs, and clone auth-failure hints name your actual git host
|
||||
- Settings: `additionalMarketplaces` and `allowedMarketplaces` are now accepted as friendlier aliases for `extraKnownMarketplaces` and `strictKnownMarketplaces`
|
||||
- Enterprise policy: a url-typed `blockedMarketplaces` entry for a bare repo URL keeps blocking that URL when the CLI classifies it as a git clone
|
||||
- Gateway: the `desktop:` overlay now accepts every released Desktop setting (was 11 hand-listed keys), validated at boot against Desktop's own schema; unknown or invalid keys fail boot
|
||||
- Gateway: empty `managed.policies[].match.groups`/`admin.admin_groups` entries and malformed `email_domain` values (empty, or containing `@`, whitespace, or commas) now fail at boot instead of silently matching no one or granting admin access
|
||||
- Fable 5 is offered as an advisor in `/advisor` again for organizations with Fable access, with usage-credits consent set up through `/model fable`
|
||||
- Fixed a PowerShell permission bypass where variable-writing parameters could silently overwrite `$PSDefaultParameterValues` and redirect later commands' file access
|
||||
- Fixed a Windows permission bypass where Git Bash followed Cygwin-style symlinks that path validation saw as regular files; writes through them now require permission approval
|
||||
- Fixed nested git repositories inheriting trust from a parent directory; each repository now requires its own trust confirmation
|
||||
- Fixed MCP connections hanging for the full 30-second connect timeout when a server fails to answer or sends a malformed reply to the protocol-version probe
|
||||
- Fixed Remote Control sessions hosted by a bridge inside a cloud session inheriting that session's transcript or credentials
|
||||
- Fixed Remote Control sessions started from Claude Desktop or an IDE appearing as a new claude.ai session each time the local session was resumed; they now reattach to the existing one
|
||||
- Fixed Remote Control sessions appearing unreachable to newly attached clients while idle
|
||||
- Fixed Remote Control bridge sessions not restoring conversation history when the session worker restarts
|
||||
- Remote Control: resuming a conversation whose session was deleted from claude.ai or the app now starts a replacement instead of failing with a message about your login (regressed in v2.1.227)
|
||||
- Fixed Cloud gateway `/login` exiting silently or leaving an unresponsive terminal after "Press Enter to continue" when managed settings failed to load; the reason is now shown
|
||||
- Fixed voice mode on native builds getting stuck on "listening…" when the voice service rejected the connection; the rejection is now shown immediately
|
||||
- Fixed mTLS client certificate rotation requiring a restart; Claude Code now reloads the rotated cert and key automatically on connection errors
|
||||
- Fixed malformed AWS or Vertex region values being used to build request URLs; they now fall back to the default region
|
||||
- Fixed stream idle timeout errors failing the request instead of recovering on Bedrock, Vertex, and gateway deployments
|
||||
- Fixed content-sized overlays containing truncated text rendering one column too wide, and start-truncated text collapsing to an ellipsis
|
||||
- Fixed a stray garbled character where a long shell-command or agent-description preview was cut off mid-emoji
|
||||
- Fixed a startup race that could silently unregister a plugin marketplace due to concurrent writes to `known_marketplaces.json`
|
||||
- Fixed `/update` and `/tui` refusing to restart while work that survives the relaunch was running
|
||||
- Fixed usage-limit guidance suggesting unavailable slash commands in SDK and remote sessions
|
||||
- Fixed the consent message for interactive `--advisor fable` launches, which told you to run `/model fable` in an interactive session that had just exited
|
||||
- Improved fullscreen streaming: long sessions stay responsive because the whole conversation is no longer re-normalized on every update
|
||||
- Improved the managed settings approval dialog: shows endpoint URLs, uses clearer wording for telemetry-only changes, skips routine OpenTelemetry options, and requires approval for server-managed sandbox binary overrides (`sandbox.bwrapPath`, `sandbox.socatPath`, `sandbox.ripgrep`)
|
||||
- `/feedback` and `/bug` now open immediately when invoked while Claude is responding, instead of waiting for the turn to finish
|
||||
- `/plugin install plugin@marketplace` now refreshes the marketplace first, so newly published plugins install without a manual marketplace update
|
||||
- `/code-review` at high, xhigh, and max effort now runs in a background agent like the other levels
|
||||
- Pasted and clipboard images are read without blocking the event loop
|
||||
- Remote Control now keeps reconnecting for about 30 minutes after a network blip and no longer drops after a few blips spread across an hour
|
||||
- Remote Control: resuming a conversation no longer silently takes Remote Control away from another Claude Code on the same machine that still has it; run `/remote-control` there to move it
|
||||
- Updated agent panel: completed subagents hide immediately with a `/tasks` footer hint, and the "↓ N more" overflow indicator moved left for visibility
|
||||
- Remote Control: the terminal now says whether a session was taken over by another device, ended from another app, or deleted, and stops suggesting a reconnect that would undo it
|
||||
- Bash input redirections (`< file`) are now permission-checked like their argument spellings on all platforms
|
||||
- Shortened the message shown when resuming a completed background agent
|
||||
- Cowork sessions no longer inline external @-imports from user-scope memory files
|
||||
- Hardened the auto-generated cross-session messaging socket directory on shared `/tmp`: a pre-planted symlink or another user's directory is now refused instead of used
|
||||
- Hardened the Linux filesystem sandbox against a protected-path bypass
|
||||
- Changed `sandbox.ripgrep` to be honored only from user, managed, and `--settings` settings; project settings can no longer override the sandbox's ripgrep binary
|
||||
- Removed the startup tip suggesting you create custom subagents, and the matching nudge in the `/powerup` tour
|
||||
|
||||
## 2.1.231
|
||||
|
||||
- Fixed MCP OAuth sign-in failing with a redirect URI mismatch for servers that use a pre-registered OAuth client, such as Slack
|
||||
|
||||
165
feed.xml
165
feed.xml
@@ -6,7 +6,88 @@
|
||||
<author><name>Anthropic</name></author>
|
||||
<link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md"/>
|
||||
<link rel="self" type="application/atom+xml" href="https://raw.githubusercontent.com/anthropics/claude-code/main/feed.xml"/>
|
||||
<updated>2026-08-13T08:38:44Z</updated>
|
||||
<updated>2026-08-14T22:20:50Z</updated>
|
||||
<entry>
|
||||
<id>https://github.com/anthropics/claude-code/releases/tag/v2.1.233</id>
|
||||
<title>Claude Code v2.1.233</title>
|
||||
<link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/releases/tag/v2.1.233"/>
|
||||
<updated>2026-08-14T22:20:50Z</updated>
|
||||
<content type="html"><p>• Added GitLab merge request URL support to the --worktree flag and the claude agents view (where MRs display as !N)</p>
|
||||
<p>• Added an opt-in forward_user_identity apps gateway setting on Anthropic upstreams that sends the signed-in user's identity as headers, so a proxy behind the gateway can attribute spend per user</p>
|
||||
<p>• Added opt-in memory cgroup support for Bash tool commands on Linux (CLAUDE_CODE_TOOL_MEMORY_LIMIT) so a runaway build can't stall the session</p>
|
||||
<p>• Added CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS environment variable to configure the WebFetch session URL cache TTL (default unchanged: 15 minutes)</p>
|
||||
<p>• Fixed cloud sessions occasionally being marked as lost when the environment shut down while Claude was waiting on a permission prompt</p>
|
||||
<p>• Fixed MCP v2 connections endlessly reopening the subscriptions/listen stream against servers that terminate long-held streams on a fixed timeout (e.g. serverless hosts)</p>
|
||||
<p>• Fixed Notification hooks not firing for permission prompts when running under Claude Desktop or VS Code</p>
|
||||
<p>• Fixed idle sessions on Linux sometimes keeping one CPU core at 100% when sandboxing is enabled</p>
|
||||
<p>• Fixed bundled skill aliases like /checkup and /review reporting "Unknown command" in -p mode or with plugins/MCP loaded when a user or project skill shadows the bundled skill</p>
|
||||
<p>• Fixed skill/command argument substitution to prevent argument values from being re-expanded as template markers</p>
|
||||
<p>• Fixed Windows paths spelled with the NT \??\ device prefix bypassing UNC path validation, closing an NTLM credential-leak vector</p>
|
||||
<p>• Improved claude self-hosted-runner session start time: the session branch is now created without rewriting the working tree, and two server round trips no longer block the agent's launch</p>
|
||||
<p>• Improved apps gateway error forwarding: 400/413 errors from Vertex, Foundry, and Claude Platform on AWS upstreams now carry the upstream's own message; fixes a bug with auto-compact on apps gateway</p>
|
||||
<p>• Improved claude plugin validate to check a bare .claude/skills directory, reporting SKILL.md files whose frontmatter fails to parse</p>
|
||||
<p>• Improved screen reader mode: the /effort selector renders as a numbered list with a typed-number prompt, and hint and dialog text is no longer clipped</p>
|
||||
<p>• Improved print mode diagnostics: a [claude-code:unrecognized_model] line is written to stderr when a request goes out for a model ID Claude Code doesn't recognize; map it with modelOverrides to silence</p>
|
||||
<p>• Changed the GitHub app setup tip to no longer appear in repositories whose origin remote is on gitlab.com or bitbucket.org; the enterprise marketplace tip now covers non-GitHub internal git hosts</p>
|
||||
<p>• Todo/task-tracking tools (TaskCreate/Get/Update/List, TodoWrite) are no longer available on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models; set CLAUDE_CODE_ENABLE_TODO_TOOLS=1 to bring them back</p>
|
||||
<p>• Windows: fixed auto mode repeatedly stopping for manual approval on ordinary cd &lt;dir&gt; &amp;&amp; &lt;command&gt; &gt; file Bash commands (a 2.1.232 regression)</p>
|
||||
<p>• Reverted the 2.1.232 Bash permission changes for Cygwin-style symlinks on Windows and for input redirections (&lt; file); a narrower version will return in a later release</p></content>
|
||||
</entry>
|
||||
<entry>
|
||||
<id>https://github.com/anthropics/claude-code/releases/tag/v2.1.232</id>
|
||||
<title>Claude Code v2.1.232</title>
|
||||
<link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/releases/tag/v2.1.232"/>
|
||||
<updated>2026-08-13T23:29:53Z</updated>
|
||||
<content type="html"><p>• Subagent forking is now on by default: a subagent_type: "fork" subagent inherits the full conversation and prompt cache, and non-teammate agent spawns in interactive sessions now run in the background by default</p>
|
||||
<p>• Type @ in the prompt to mention another Claude session by name; Claude then uses SendMessage to reach that session directly</p>
|
||||
<p>• SendMessage now delivers to a bare name that exactly matches one live session, instead of asking to confirm with a ref first</p>
|
||||
<p>• Interactive sessions on one machine now keep unique names: starting or renaming a session to a name another live session already uses gives it a name-word-word variant and tells you</p>
|
||||
<p>• Added /config rows for "Dialog expiry" and "Messages from your other sessions" (cross-session inbound accept/hold/refuse)</p>
|
||||
<p>• Added secret redaction for GitLab token families (glrt-, gloas-, glptt-, glagent-, glimt-, glsoat-, glcbt-, glft-, glffct-) and full redaction of routable glpat-/gldt- tokens; the glab CLI config store gets the same sandbox and credential-path protection as gh</p>
|
||||
<p>• Added GitLab support to plugin marketplaces: bare gitlab.com repo URLs (including nested subgroups) now clone like github.com URLs, and clone auth-failure hints name your actual git host</p>
|
||||
<p>• Settings: additionalMarketplaces and allowedMarketplaces are now accepted as friendlier aliases for extraKnownMarketplaces and strictKnownMarketplaces</p>
|
||||
<p>• Enterprise policy: a url-typed blockedMarketplaces entry for a bare repo URL keeps blocking that URL when the CLI classifies it as a git clone</p>
|
||||
<p>• Gateway: the desktop: overlay now accepts every released Desktop setting (was 11 hand-listed keys), validated at boot against Desktop's own schema; unknown or invalid keys fail boot</p>
|
||||
<p>• Gateway: empty managed.policies[].match.groups/admin.admin_groups entries and malformed email_domain values (empty, or containing @, whitespace, or commas) now fail at boot instead of silently matching no one or granting admin access</p>
|
||||
<p>• Fable 5 is offered as an advisor in /advisor again for organizations with Fable access, with usage-credits consent set up through /model fable</p>
|
||||
<p>• Fixed a PowerShell permission bypass where variable-writing parameters could silently overwrite $PSDefaultParameterValues and redirect later commands' file access</p>
|
||||
<p>• Fixed a Windows permission bypass where Git Bash followed Cygwin-style symlinks that path validation saw as regular files; writes through them now require permission approval</p>
|
||||
<p>• Fixed nested git repositories inheriting trust from a parent directory; each repository now requires its own trust confirmation</p>
|
||||
<p>• Fixed MCP connections hanging for the full 30-second connect timeout when a server fails to answer or sends a malformed reply to the protocol-version probe</p>
|
||||
<p>• Fixed Remote Control sessions hosted by a bridge inside a cloud session inheriting that session's transcript or credentials</p>
|
||||
<p>• Fixed Remote Control sessions started from Claude Desktop or an IDE appearing as a new claude.ai session each time the local session was resumed; they now reattach to the existing one</p>
|
||||
<p>• Fixed Remote Control sessions appearing unreachable to newly attached clients while idle</p>
|
||||
<p>• Fixed Remote Control bridge sessions not restoring conversation history when the session worker restarts</p>
|
||||
<p>• Remote Control: resuming a conversation whose session was deleted from claude.ai or the app now starts a replacement instead of failing with a message about your login (regressed in v2.1.227)</p>
|
||||
<p>• Fixed Cloud gateway /login exiting silently or leaving an unresponsive terminal after "Press Enter to continue" when managed settings failed to load; the reason is now shown</p>
|
||||
<p>• Fixed voice mode on native builds getting stuck on "listening…" when the voice service rejected the connection; the rejection is now shown immediately</p>
|
||||
<p>• Fixed mTLS client certificate rotation requiring a restart; Claude Code now reloads the rotated cert and key automatically on connection errors</p>
|
||||
<p>• Fixed malformed AWS or Vertex region values being used to build request URLs; they now fall back to the default region</p>
|
||||
<p>• Fixed stream idle timeout errors failing the request instead of recovering on Bedrock, Vertex, and gateway deployments</p>
|
||||
<p>• Fixed content-sized overlays containing truncated text rendering one column too wide, and start-truncated text collapsing to an ellipsis</p>
|
||||
<p>• Fixed a stray garbled character where a long shell-command or agent-description preview was cut off mid-emoji</p>
|
||||
<p>• Fixed a startup race that could silently unregister a plugin marketplace due to concurrent writes to known_marketplaces.json</p>
|
||||
<p>• Fixed /update and /tui refusing to restart while work that survives the relaunch was running</p>
|
||||
<p>• Fixed usage-limit guidance suggesting unavailable slash commands in SDK and remote sessions</p>
|
||||
<p>• Fixed the consent message for interactive --advisor fable launches, which told you to run /model fable in an interactive session that had just exited</p>
|
||||
<p>• Improved fullscreen streaming: long sessions stay responsive because the whole conversation is no longer re-normalized on every update</p>
|
||||
<p>• Improved the managed settings approval dialog: shows endpoint URLs, uses clearer wording for telemetry-only changes, skips routine OpenTelemetry options, and requires approval for server-managed sandbox binary overrides (sandbox.bwrapPath, sandbox.socatPath, sandbox.ripgrep)</p>
|
||||
<p>• /feedback and /bug now open immediately when invoked while Claude is responding, instead of waiting for the turn to finish</p>
|
||||
<p>• /plugin install plugin@marketplace now refreshes the marketplace first, so newly published plugins install without a manual marketplace update</p>
|
||||
<p>• /code-review at high, xhigh, and max effort now runs in a background agent like the other levels</p>
|
||||
<p>• Pasted and clipboard images are read without blocking the event loop</p>
|
||||
<p>• Remote Control now keeps reconnecting for about 30 minutes after a network blip and no longer drops after a few blips spread across an hour</p>
|
||||
<p>• Remote Control: resuming a conversation no longer silently takes Remote Control away from another Claude Code on the same machine that still has it; run /remote-control there to move it</p>
|
||||
<p>• Updated agent panel: completed subagents hide immediately with a /tasks footer hint, and the "↓ N more" overflow indicator moved left for visibility</p>
|
||||
<p>• Remote Control: the terminal now says whether a session was taken over by another device, ended from another app, or deleted, and stops suggesting a reconnect that would undo it</p>
|
||||
<p>• Bash input redirections (&lt; file) are now permission-checked like their argument spellings on all platforms</p>
|
||||
<p>• Shortened the message shown when resuming a completed background agent</p>
|
||||
<p>• Cowork sessions no longer inline external @-imports from user-scope memory files</p>
|
||||
<p>• Hardened the auto-generated cross-session messaging socket directory on shared /tmp: a pre-planted symlink or another user's directory is now refused instead of used</p>
|
||||
<p>• Hardened the Linux filesystem sandbox against a protected-path bypass</p>
|
||||
<p>• Changed sandbox.ripgrep to be honored only from user, managed, and --settings settings; project settings can no longer override the sandbox's ripgrep binary</p>
|
||||
<p>• Removed the startup tip suggesting you create custom subagents, and the matching nudge in the /powerup tour</p></content>
|
||||
</entry>
|
||||
<entry>
|
||||
<id>https://github.com/anthropics/claude-code/releases/tag/v2.1.231</id>
|
||||
<title>Claude Code v2.1.231</title>
|
||||
@@ -513,86 +594,4 @@
|
||||
<p>• Updated the auth status panel title from "Cloud authentication" to "Authentication"</p>
|
||||
<p>• Corrected an earlier release note (2.1.200): tmux through the 3.6 series lacks synchronized output; newer tmux with support is detected automatically</p></content>
|
||||
</entry>
|
||||
<entry>
|
||||
<id>https://github.com/anthropics/claude-code/releases/tag/v2.1.211</id>
|
||||
<title>Claude Code v2.1.211</title>
|
||||
<link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/releases/tag/v2.1.211"/>
|
||||
<updated>2026-07-15T23:02:29Z</updated>
|
||||
<content type="html"><p>• Added --forward-subagent-text flag and CLAUDE_CODE_FORWARD_SUBAGENT_TEXT environment variable to include subagent text and thinking in stream-json output</p>
|
||||
<p>• Fixed permission previews relayed to chat channels not neutralizing bidirectional-override, zero-width, and look-alike quote characters, so tool inputs cannot visually alter the approval message</p>
|
||||
<p>• Fixed auto mode overriding a PreToolUse hook's ask decision for unsandboxed Bash — a hook ask now floors the decision at a prompt</p>
|
||||
<p>• Fixed parallel Claude Code sessions all logging out simultaneously after wake-from-sleep when many sessions share one credential store</p>
|
||||
<p>• Fixed plugin MCP servers not reconnecting after an idle web session woke, leaving MCP calls failing until the next message</p>
|
||||
<p>• Fixed Claude Code on Vertex and Bedrock attempting the default Opus model at startup and printing a spurious fallback notice when a model is explicitly configured</p>
|
||||
<p>• Fixed subagents spawned with an explicit model override reverting to the parent's model when resumed or sent a follow-up message</p>
|
||||
<p>• Fixed nested .claude/rules/*.md files loading even when setting sources exclude project settings</p>
|
||||
<p>• Fixed file upload validation: filenames ending in a DOS device suffix (.prn) or trailing dot are now accepted, and files with multiple hard links are refused</p>
|
||||
<p>• Fixed file uploads to Claude in Chrome from remote and CLI sessions</p>
|
||||
<p>• Fixed edits that leave the input as "?" being silently swallowed and toggling the shortcuts panel</p>
|
||||
<p>• Fixed a startup hang when the Claude in Chrome extension is enabled but Chrome is not running</p>
|
||||
<p>• Fixed a 300ms delay revealing async content (Settings tabs, Stats, diff views, and other loading states)</p>
|
||||
<p>• Fixed reopening a just-stopped background session from the agents view starting a blank conversation under the same session id</p>
|
||||
<p>• Fixed /loop hiding the session from /resume after a single use</p>
|
||||
<p>• Fixed screen reader users losing the audible terminal bell after /terminal-setup or onboarding terminal setup</p>
|
||||
<p>• Fixed background jobs on LLM gateway auth (ANTHROPIC_AUTH_TOKEN + ANTHROPIC_BASE_URL) coming back "Not logged in" after the daemon respawns them</p>
|
||||
<p>• Fixed claude agents jobs becoming permanently undeletable when git no longer recognizes their worktree — the row now shows why the delete was refused instead of silently reappearing</p>
|
||||
<p>• Fixed /clear not resetting the session cost counter — the statusline's cost now starts at $0 after /clear</p>
|
||||
<p>• Fixed Claude in Chrome setup pages failing to open in the browser on Windows</p>
|
||||
<p>• Fixed headless print-mode sessions on Windows crashing or silently exiting when stdin is unreadable</p>
|
||||
<p>• Fixed background session titles in the agents view showing the naming model's refusal text when the prompt contains a link</p>
|
||||
<p>• Fixed background agents killed by the user auto-respawning, and revived agents re-running stale prompts from old sessions</p>
|
||||
<p>• Fixed routines with no schedule reporting a next run time in the year 1</p>
|
||||
<p>• Hardened synced skill/plugin directory naming on Windows and kept CCR web fetch/search proxies working after /clear</p>
|
||||
<p>• Improved terminal layout and rendering performance</p>
|
||||
<p>• Improved background agent result reporting — Claude now reports the status of still-running agents and waits for the real completion instead of fabricating results</p>
|
||||
<p>• Improved the memory index over-limit warning to measure only loaded content, excluding frontmatter and HTML comments</p>
|
||||
<p>• Updated integer environment variables (timeouts, token budgets, retry counts) to accept scientific notation and digit-separator spellings like 1e6 and 64_000</p>
|
||||
<p>• Updated documentation links to the current docs sites</p>
|
||||
<p>• Changed "always allow" permission rules to save at the repository root, so approvals granted in a git worktree persist across sessions and worktrees</p>
|
||||
<p>• Changed /usage-credits to ask for confirmation before sending a request to organization admins</p>
|
||||
<p>• Changed Vim mode s and S (substitute char/line) to work in NORMAL mode, matching vim behavior</p>
|
||||
<p>• [VSCode] Updated the Remote Control banner to describe what it does</p>
|
||||
<p>• Claude in Chrome: hardened file-upload path validation</p>
|
||||
<p>• Claude in Chrome: save_to_disk on screenshot actions now writes the image to disk and returns the path; previously it did nothing</p>
|
||||
<p>• Fixed a prompt-caching regression on Bedrock, Vertex, Mantle, and Foundry that billed the trailing system context block as fresh input tokens on every request.</p></content>
|
||||
</entry>
|
||||
<entry>
|
||||
<id>https://github.com/anthropics/claude-code/releases/tag/v2.1.210</id>
|
||||
<title>Claude Code v2.1.210</title>
|
||||
<link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/releases/tag/v2.1.210"/>
|
||||
<updated>2026-07-14T23:45:19Z</updated>
|
||||
<content type="html"><p>• Added a live elapsed-time counter to the collapsed tool summary line so long-running tool calls visibly tick instead of looking stuck</p>
|
||||
<p>• Added a startup warning for Write(path), NotebookEdit(path), and Glob(path) permission rules — use Edit(path) or Read(path) instead</p>
|
||||
<p>• Fixed isolation: 'worktree' subagents being able to run git-mutating commands against the main repo checkout instead of their own isolated worktree</p>
|
||||
<p>• Fixed the ultracode keyword opt-in firing on non-human-originated input such as webhook payloads and relayed PR comments</p>
|
||||
<p>• Fixed a rendered text fragment leaking into crash telemetry when a UI component returned content outside a styled text element</p>
|
||||
<p>• Fixed paste markers leaking into external editors opened from Claude Code, which could appear as stray È/É characters around pasted text</p>
|
||||
<p>• Fixed claude attach sometimes failing with "job not found" or "agent is still starting" errors during session transitions — attach now waits for the daemon to settle, and terminal resizes during a slow attach are applied once it completes</p>
|
||||
<p>• Fixed a session crash when a tool's result renderer returned a numeric bigint value or plain text instead of a UI element</p>
|
||||
<p>• Fixed a hook callback timeout being misreported to the model as a user rejection, which made unattended sessions stop and wait</p>
|
||||
<p>• Fixed Claude assuming a cd took effect after its command was moved to the background; the tool result now states the working directory is unchanged</p>
|
||||
<p>• Fixed plugin-provided MCP servers being torn down when MCP servers are re-synced mid-session</p>
|
||||
<p>• Fixed plan approvals without edits being labeled "(edited by user)" and overwriting the plan file with a stale snapshot</p>
|
||||
<p>• Fixed /doctor skipping its auto-mode-default proposal on Bedrock, Vertex, and Foundry, where auto mode no longer needs an opt-in</p>
|
||||
<p>• Fixed Grep content mode claiming "No matches found" when paginating past the end of results</p>
|
||||
<p>• Fixed unmatched $1/$2 positional placeholders in skills and commands being silently stripped; they are now preserved verbatim</p>
|
||||
<p>• Fixed plugin cache writes leaving temp files behind on failure and failing on locked-file renames on Windows and network filesystems</p>
|
||||
<p>• Fixed background workers crash-looping when a client resets its connection to the background service</p>
|
||||
<p>• Fixed claude agents --effort ultracode not reaching dispatched sessions; the value was silently dropped</p>
|
||||
<p>• Fixed pressing ← to open the agents view dropping the task tracker when returning to the session</p>
|
||||
<p>• Fixed the agents dashboard retaining pasted images from abandoned reply drafts after their session was deleted</p>
|
||||
<p>• Fixed killed background sessions leaving a permanent git worktree lock behind; the periodic sweep now releases locks whose owning process is gone</p>
|
||||
<p>• Fixed SDK MCP servers registered via an initialize control request waiting until the next turn to start connecting</p>
|
||||
<p>• Fixed returning to the agents view from a session leaving overlapping ghost frames with CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN=1</p>
|
||||
<p>• Fixed late-appearing .claude/* symlinks not being reconciled into the sandbox deny-write list</p>
|
||||
<p>• Hardened the Agent tool against indirect prompt injection via content a subagent read</p>
|
||||
<p>• Improved the Bash/PowerShell tool message when a command hits its timeout and is auto-backgrounded, so the model can distinguish a hang from an explicit background request</p>
|
||||
<p>• Improved auto mode: the permission classifier now defaults to Sonnet 5 for external sessions, validated on the session's first request and pinned for the session</p>
|
||||
<p>• Improved the bundled dataviz skill's chart color validation with perceptual OKLab color difference and recalibrated color-blindness thresholds</p>
|
||||
<p>• Memory writes that leave a MEMORY.md index over its read limit now produce an explicit error instead of silent truncation</p>
|
||||
<p>• Screen reader mode now announces permission mode changes aloud when cycling modes with Shift+Tab</p>
|
||||
<p>• The agents footer hint now shows how many background agents are waiting on your input, with a brief color emphasis when the count changes</p>
|
||||
<p>• Agent view: the session you pressed ← from stays visibly marked even after mouse hover or arrow keys move the selection</p>
|
||||
<p>• Fable temporarily shows as unavailable in the advisor picker while a server-side issue causing Fable advisor failures is fixed</p></content>
|
||||
</entry>
|
||||
</feed>
|
||||
|
||||
Reference in New Issue
Block a user