mirror of
https://github.com/anthropics/claude-code.git
synced 2026-08-13 18:32:27 -06:00
Compare commits
2 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 GitHub Actions
|
1f6015b5d5 | ||
|
GitHub Actions
|
be90077c6a |
@@ -1,5 +1,61 @@
|
||||
# Changelog
|
||||
|
||||
## 2.1.232
|
||||
|
||||
- Subagent forking is now on by default: a `subagent_type: "fork"` subagent inherits the full conversation and prompt cache, and non-teammate agent spawns in interactive sessions now run in the background by default
|
||||
- Type `@` in the prompt to mention another Claude session by name; Claude then uses `SendMessage` to reach that session directly
|
||||
- `SendMessage` now delivers to a bare name that exactly matches one live session, instead of asking to confirm with a ref first
|
||||
- Interactive sessions on one machine now keep unique names: starting or renaming a session to a name another live session already uses gives it a `name-word-word` variant and tells you
|
||||
- Added `/config` rows for "Dialog expiry" and "Messages from your other sessions" (cross-session inbound accept/hold/refuse)
|
||||
- Added secret redaction for GitLab token families (`glrt-`, `gloas-`, `glptt-`, `glagent-`, `glimt-`, `glsoat-`, `glcbt-`, `glft-`, `glffct-`) and full redaction of routable `glpat-`/`gldt-` tokens; the `glab` CLI config store gets the same sandbox and credential-path protection as `gh`
|
||||
- Added GitLab support to plugin marketplaces: bare `gitlab.com` repo URLs (including nested subgroups) now clone like `github.com` URLs, and clone auth-failure hints name your actual git host
|
||||
- Settings: `additionalMarketplaces` and `allowedMarketplaces` are now accepted as friendlier aliases for `extraKnownMarketplaces` and `strictKnownMarketplaces`
|
||||
- Enterprise policy: a url-typed `blockedMarketplaces` entry for a bare repo URL keeps blocking that URL when the CLI classifies it as a git clone
|
||||
- Gateway: the `desktop:` overlay now accepts every released Desktop setting (was 11 hand-listed keys), validated at boot against Desktop's own schema; unknown or invalid keys fail boot
|
||||
- Gateway: empty `managed.policies[].match.groups`/`admin.admin_groups` entries and malformed `email_domain` values (empty, or containing `@`, whitespace, or commas) now fail at boot instead of silently matching no one or granting admin access
|
||||
- Fable 5 is offered as an advisor in `/advisor` again for organizations with Fable access, with usage-credits consent set up through `/model fable`
|
||||
- Fixed a PowerShell permission bypass where variable-writing parameters could silently overwrite `$PSDefaultParameterValues` and redirect later commands' file access
|
||||
- Fixed a Windows permission bypass where Git Bash followed Cygwin-style symlinks that path validation saw as regular files; writes through them now require permission approval
|
||||
- Fixed nested git repositories inheriting trust from a parent directory; each repository now requires its own trust confirmation
|
||||
- Fixed MCP connections hanging for the full 30-second connect timeout when a server fails to answer or sends a malformed reply to the protocol-version probe
|
||||
- Fixed Remote Control sessions hosted by a bridge inside a cloud session inheriting that session's transcript or credentials
|
||||
- Fixed Remote Control sessions started from Claude Desktop or an IDE appearing as a new claude.ai session each time the local session was resumed; they now reattach to the existing one
|
||||
- Fixed Remote Control sessions appearing unreachable to newly attached clients while idle
|
||||
- Fixed Remote Control bridge sessions not restoring conversation history when the session worker restarts
|
||||
- Remote Control: resuming a conversation whose session was deleted from claude.ai or the app now starts a replacement instead of failing with a message about your login (regressed in v2.1.227)
|
||||
- Fixed Cloud gateway `/login` exiting silently or leaving an unresponsive terminal after "Press Enter to continue" when managed settings failed to load; the reason is now shown
|
||||
- Fixed voice mode on native builds getting stuck on "listening…" when the voice service rejected the connection; the rejection is now shown immediately
|
||||
- Fixed mTLS client certificate rotation requiring a restart; Claude Code now reloads the rotated cert and key automatically on connection errors
|
||||
- Fixed malformed AWS or Vertex region values being used to build request URLs; they now fall back to the default region
|
||||
- Fixed stream idle timeout errors failing the request instead of recovering on Bedrock, Vertex, and gateway deployments
|
||||
- Fixed content-sized overlays containing truncated text rendering one column too wide, and start-truncated text collapsing to an ellipsis
|
||||
- Fixed a stray garbled character where a long shell-command or agent-description preview was cut off mid-emoji
|
||||
- Fixed a startup race that could silently unregister a plugin marketplace due to concurrent writes to `known_marketplaces.json`
|
||||
- Fixed `/update` and `/tui` refusing to restart while work that survives the relaunch was running
|
||||
- Fixed usage-limit guidance suggesting unavailable slash commands in SDK and remote sessions
|
||||
- Fixed the consent message for interactive `--advisor fable` launches, which told you to run `/model fable` in an interactive session that had just exited
|
||||
- Improved fullscreen streaming: long sessions stay responsive because the whole conversation is no longer re-normalized on every update
|
||||
- Improved the managed settings approval dialog: shows endpoint URLs, uses clearer wording for telemetry-only changes, skips routine OpenTelemetry options, and requires approval for server-managed sandbox binary overrides (`sandbox.bwrapPath`, `sandbox.socatPath`, `sandbox.ripgrep`)
|
||||
- `/feedback` and `/bug` now open immediately when invoked while Claude is responding, instead of waiting for the turn to finish
|
||||
- `/plugin install plugin@marketplace` now refreshes the marketplace first, so newly published plugins install without a manual marketplace update
|
||||
- `/code-review` at high, xhigh, and max effort now runs in a background agent like the other levels
|
||||
- Pasted and clipboard images are read without blocking the event loop
|
||||
- Remote Control now keeps reconnecting for about 30 minutes after a network blip and no longer drops after a few blips spread across an hour
|
||||
- Remote Control: resuming a conversation no longer silently takes Remote Control away from another Claude Code on the same machine that still has it; run `/remote-control` there to move it
|
||||
- Updated agent panel: completed subagents hide immediately with a `/tasks` footer hint, and the "↓ N more" overflow indicator moved left for visibility
|
||||
- Remote Control: the terminal now says whether a session was taken over by another device, ended from another app, or deleted, and stops suggesting a reconnect that would undo it
|
||||
- Bash input redirections (`< file`) are now permission-checked like their argument spellings on all platforms
|
||||
- Shortened the message shown when resuming a completed background agent
|
||||
- Cowork sessions no longer inline external @-imports from user-scope memory files
|
||||
- Hardened the auto-generated cross-session messaging socket directory on shared `/tmp`: a pre-planted symlink or another user's directory is now refused instead of used
|
||||
- Hardened the Linux filesystem sandbox against a protected-path bypass
|
||||
- Changed `sandbox.ripgrep` to be honored only from user, managed, and `--settings` settings; project settings can no longer override the sandbox's ripgrep binary
|
||||
- Removed the startup tip suggesting you create custom subagents, and the matching nudge in the `/powerup` tour
|
||||
|
||||
## 2.1.231
|
||||
|
||||
- Fixed MCP OAuth sign-in failing with a redirect URI mismatch for servers that use a pre-registered OAuth client, such as Slack
|
||||
|
||||
## 2.1.229
|
||||
|
||||
- Documented `claude remote-control --continue` for resuming the most recent Remote Control session
|
||||
|
||||
@@ -6,7 +6,69 @@
|
||||
<author><name>Anthropic</name></author>
|
||||
<link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md"/>
|
||||
<link rel="self" type="application/atom+xml" href="https://raw.githubusercontent.com/anthropics/claude-code/main/feed.xml"/>
|
||||
<updated>2026-08-12T20:56:14Z</updated>
|
||||
<updated>2026-08-13T23:29:53Z</updated>
|
||||
<entry>
|
||||
<id>https://github.com/anthropics/claude-code/releases/tag/v2.1.232</id>
|
||||
<title>Claude Code v2.1.232</title>
|
||||
<link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/releases/tag/v2.1.232"/>
|
||||
<updated>2026-08-13T23:29:53Z</updated>
|
||||
<content type="html"><p>• Subagent forking is now on by default: a subagent_type: "fork" subagent inherits the full conversation and prompt cache, and non-teammate agent spawns in interactive sessions now run in the background by default</p>
|
||||
<p>• Type @ in the prompt to mention another Claude session by name; Claude then uses SendMessage to reach that session directly</p>
|
||||
<p>• SendMessage now delivers to a bare name that exactly matches one live session, instead of asking to confirm with a ref first</p>
|
||||
<p>• Interactive sessions on one machine now keep unique names: starting or renaming a session to a name another live session already uses gives it a name-word-word variant and tells you</p>
|
||||
<p>• Added /config rows for "Dialog expiry" and "Messages from your other sessions" (cross-session inbound accept/hold/refuse)</p>
|
||||
<p>• Added secret redaction for GitLab token families (glrt-, gloas-, glptt-, glagent-, glimt-, glsoat-, glcbt-, glft-, glffct-) and full redaction of routable glpat-/gldt- tokens; the glab CLI config store gets the same sandbox and credential-path protection as gh</p>
|
||||
<p>• Added GitLab support to plugin marketplaces: bare gitlab.com repo URLs (including nested subgroups) now clone like github.com URLs, and clone auth-failure hints name your actual git host</p>
|
||||
<p>• Settings: additionalMarketplaces and allowedMarketplaces are now accepted as friendlier aliases for extraKnownMarketplaces and strictKnownMarketplaces</p>
|
||||
<p>• Enterprise policy: a url-typed blockedMarketplaces entry for a bare repo URL keeps blocking that URL when the CLI classifies it as a git clone</p>
|
||||
<p>• Gateway: the desktop: overlay now accepts every released Desktop setting (was 11 hand-listed keys), validated at boot against Desktop's own schema; unknown or invalid keys fail boot</p>
|
||||
<p>• Gateway: empty managed.policies[].match.groups/admin.admin_groups entries and malformed email_domain values (empty, or containing @, whitespace, or commas) now fail at boot instead of silently matching no one or granting admin access</p>
|
||||
<p>• Fable 5 is offered as an advisor in /advisor again for organizations with Fable access, with usage-credits consent set up through /model fable</p>
|
||||
<p>• Fixed a PowerShell permission bypass where variable-writing parameters could silently overwrite $PSDefaultParameterValues and redirect later commands' file access</p>
|
||||
<p>• Fixed a Windows permission bypass where Git Bash followed Cygwin-style symlinks that path validation saw as regular files; writes through them now require permission approval</p>
|
||||
<p>• Fixed nested git repositories inheriting trust from a parent directory; each repository now requires its own trust confirmation</p>
|
||||
<p>• Fixed MCP connections hanging for the full 30-second connect timeout when a server fails to answer or sends a malformed reply to the protocol-version probe</p>
|
||||
<p>• Fixed Remote Control sessions hosted by a bridge inside a cloud session inheriting that session's transcript or credentials</p>
|
||||
<p>• Fixed Remote Control sessions started from Claude Desktop or an IDE appearing as a new claude.ai session each time the local session was resumed; they now reattach to the existing one</p>
|
||||
<p>• Fixed Remote Control sessions appearing unreachable to newly attached clients while idle</p>
|
||||
<p>• Fixed Remote Control bridge sessions not restoring conversation history when the session worker restarts</p>
|
||||
<p>• Remote Control: resuming a conversation whose session was deleted from claude.ai or the app now starts a replacement instead of failing with a message about your login (regressed in v2.1.227)</p>
|
||||
<p>• Fixed Cloud gateway /login exiting silently or leaving an unresponsive terminal after "Press Enter to continue" when managed settings failed to load; the reason is now shown</p>
|
||||
<p>• Fixed voice mode on native builds getting stuck on "listening…" when the voice service rejected the connection; the rejection is now shown immediately</p>
|
||||
<p>• Fixed mTLS client certificate rotation requiring a restart; Claude Code now reloads the rotated cert and key automatically on connection errors</p>
|
||||
<p>• Fixed malformed AWS or Vertex region values being used to build request URLs; they now fall back to the default region</p>
|
||||
<p>• Fixed stream idle timeout errors failing the request instead of recovering on Bedrock, Vertex, and gateway deployments</p>
|
||||
<p>• Fixed content-sized overlays containing truncated text rendering one column too wide, and start-truncated text collapsing to an ellipsis</p>
|
||||
<p>• Fixed a stray garbled character where a long shell-command or agent-description preview was cut off mid-emoji</p>
|
||||
<p>• Fixed a startup race that could silently unregister a plugin marketplace due to concurrent writes to known_marketplaces.json</p>
|
||||
<p>• Fixed /update and /tui refusing to restart while work that survives the relaunch was running</p>
|
||||
<p>• Fixed usage-limit guidance suggesting unavailable slash commands in SDK and remote sessions</p>
|
||||
<p>• Fixed the consent message for interactive --advisor fable launches, which told you to run /model fable in an interactive session that had just exited</p>
|
||||
<p>• Improved fullscreen streaming: long sessions stay responsive because the whole conversation is no longer re-normalized on every update</p>
|
||||
<p>• Improved the managed settings approval dialog: shows endpoint URLs, uses clearer wording for telemetry-only changes, skips routine OpenTelemetry options, and requires approval for server-managed sandbox binary overrides (sandbox.bwrapPath, sandbox.socatPath, sandbox.ripgrep)</p>
|
||||
<p>• /feedback and /bug now open immediately when invoked while Claude is responding, instead of waiting for the turn to finish</p>
|
||||
<p>• /plugin install plugin@marketplace now refreshes the marketplace first, so newly published plugins install without a manual marketplace update</p>
|
||||
<p>• /code-review at high, xhigh, and max effort now runs in a background agent like the other levels</p>
|
||||
<p>• Pasted and clipboard images are read without blocking the event loop</p>
|
||||
<p>• Remote Control now keeps reconnecting for about 30 minutes after a network blip and no longer drops after a few blips spread across an hour</p>
|
||||
<p>• Remote Control: resuming a conversation no longer silently takes Remote Control away from another Claude Code on the same machine that still has it; run /remote-control there to move it</p>
|
||||
<p>• Updated agent panel: completed subagents hide immediately with a /tasks footer hint, and the "↓ N more" overflow indicator moved left for visibility</p>
|
||||
<p>• Remote Control: the terminal now says whether a session was taken over by another device, ended from another app, or deleted, and stops suggesting a reconnect that would undo it</p>
|
||||
<p>• Bash input redirections (&lt; file) are now permission-checked like their argument spellings on all platforms</p>
|
||||
<p>• Shortened the message shown when resuming a completed background agent</p>
|
||||
<p>• Cowork sessions no longer inline external @-imports from user-scope memory files</p>
|
||||
<p>• Hardened the auto-generated cross-session messaging socket directory on shared /tmp: a pre-planted symlink or another user's directory is now refused instead of used</p>
|
||||
<p>• Hardened the Linux filesystem sandbox against a protected-path bypass</p>
|
||||
<p>• Changed sandbox.ripgrep to be honored only from user, managed, and --settings settings; project settings can no longer override the sandbox's ripgrep binary</p>
|
||||
<p>• Removed the startup tip suggesting you create custom subagents, and the matching nudge in the /powerup tour</p></content>
|
||||
</entry>
|
||||
<entry>
|
||||
<id>https://github.com/anthropics/claude-code/releases/tag/v2.1.231</id>
|
||||
<title>Claude Code v2.1.231</title>
|
||||
<link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/releases/tag/v2.1.231"/>
|
||||
<updated>2026-08-13T08:38:44Z</updated>
|
||||
<content type="html"><p>• Fixed MCP OAuth sign-in failing with a redirect URI mismatch for servers that use a pre-registered OAuth client, such as Slack</p></content>
|
||||
</entry>
|
||||
<entry>
|
||||
<id>https://github.com/anthropics/claude-code/releases/tag/v2.1.229</id>
|
||||
<title>Claude Code v2.1.229</title>
|
||||
@@ -549,50 +611,4 @@
|
||||
<p>• Claude in Chrome: save_to_disk on screenshot actions now writes the image to disk and returns the path; previously it did nothing</p>
|
||||
<p>• Fixed a prompt-caching regression on Bedrock, Vertex, Mantle, and Foundry that billed the trailing system context block as fresh input tokens on every request.</p></content>
|
||||
</entry>
|
||||
<entry>
|
||||
<id>https://github.com/anthropics/claude-code/releases/tag/v2.1.210</id>
|
||||
<title>Claude Code v2.1.210</title>
|
||||
<link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/releases/tag/v2.1.210"/>
|
||||
<updated>2026-07-14T23:45:19Z</updated>
|
||||
<content type="html"><p>• Added a live elapsed-time counter to the collapsed tool summary line so long-running tool calls visibly tick instead of looking stuck</p>
|
||||
<p>• Added a startup warning for Write(path), NotebookEdit(path), and Glob(path) permission rules — use Edit(path) or Read(path) instead</p>
|
||||
<p>• Fixed isolation: 'worktree' subagents being able to run git-mutating commands against the main repo checkout instead of their own isolated worktree</p>
|
||||
<p>• Fixed the ultracode keyword opt-in firing on non-human-originated input such as webhook payloads and relayed PR comments</p>
|
||||
<p>• Fixed a rendered text fragment leaking into crash telemetry when a UI component returned content outside a styled text element</p>
|
||||
<p>• Fixed paste markers leaking into external editors opened from Claude Code, which could appear as stray È/É characters around pasted text</p>
|
||||
<p>• Fixed claude attach sometimes failing with "job not found" or "agent is still starting" errors during session transitions — attach now waits for the daemon to settle, and terminal resizes during a slow attach are applied once it completes</p>
|
||||
<p>• Fixed a session crash when a tool's result renderer returned a numeric bigint value or plain text instead of a UI element</p>
|
||||
<p>• Fixed a hook callback timeout being misreported to the model as a user rejection, which made unattended sessions stop and wait</p>
|
||||
<p>• Fixed Claude assuming a cd took effect after its command was moved to the background; the tool result now states the working directory is unchanged</p>
|
||||
<p>• Fixed plugin-provided MCP servers being torn down when MCP servers are re-synced mid-session</p>
|
||||
<p>• Fixed plan approvals without edits being labeled "(edited by user)" and overwriting the plan file with a stale snapshot</p>
|
||||
<p>• Fixed /doctor skipping its auto-mode-default proposal on Bedrock, Vertex, and Foundry, where auto mode no longer needs an opt-in</p>
|
||||
<p>• Fixed Grep content mode claiming "No matches found" when paginating past the end of results</p>
|
||||
<p>• Fixed unmatched $1/$2 positional placeholders in skills and commands being silently stripped; they are now preserved verbatim</p>
|
||||
<p>• Fixed plugin cache writes leaving temp files behind on failure and failing on locked-file renames on Windows and network filesystems</p>
|
||||
<p>• Fixed background workers crash-looping when a client resets its connection to the background service</p>
|
||||
<p>• Fixed claude agents --effort ultracode not reaching dispatched sessions; the value was silently dropped</p>
|
||||
<p>• Fixed pressing ← to open the agents view dropping the task tracker when returning to the session</p>
|
||||
<p>• Fixed the agents dashboard retaining pasted images from abandoned reply drafts after their session was deleted</p>
|
||||
<p>• Fixed killed background sessions leaving a permanent git worktree lock behind; the periodic sweep now releases locks whose owning process is gone</p>
|
||||
<p>• Fixed SDK MCP servers registered via an initialize control request waiting until the next turn to start connecting</p>
|
||||
<p>• Fixed returning to the agents view from a session leaving overlapping ghost frames with CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN=1</p>
|
||||
<p>• Fixed late-appearing .claude/* symlinks not being reconciled into the sandbox deny-write list</p>
|
||||
<p>• Hardened the Agent tool against indirect prompt injection via content a subagent read</p>
|
||||
<p>• Improved the Bash/PowerShell tool message when a command hits its timeout and is auto-backgrounded, so the model can distinguish a hang from an explicit background request</p>
|
||||
<p>• Improved auto mode: the permission classifier now defaults to Sonnet 5 for external sessions, validated on the session's first request and pinned for the session</p>
|
||||
<p>• Improved the bundled dataviz skill's chart color validation with perceptual OKLab color difference and recalibrated color-blindness thresholds</p>
|
||||
<p>• Memory writes that leave a MEMORY.md index over its read limit now produce an explicit error instead of silent truncation</p>
|
||||
<p>• Screen reader mode now announces permission mode changes aloud when cycling modes with Shift+Tab</p>
|
||||
<p>• The agents footer hint now shows how many background agents are waiting on your input, with a brief color emphasis when the count changes</p>
|
||||
<p>• Agent view: the session you pressed ← from stays visibly marked even after mouse hover or arrow keys move the selection</p>
|
||||
<p>• Fable temporarily shows as unavailable in the advisor picker while a server-side issue causing Fable advisor failures is fixed</p></content>
|
||||
</entry>
|
||||
<entry>
|
||||
<id>https://github.com/anthropics/claude-code/releases/tag/v2.1.209</id>
|
||||
<title>Claude Code v2.1.209</title>
|
||||
<link rel="alternate" type="text/html" href="https://github.com/anthropics/claude-code/releases/tag/v2.1.209"/>
|
||||
<updated>2026-07-14T06:36:21Z</updated>
|
||||
<content type="html"><p>• Fixed /model and other dialogs being blocked in claude agents background sessions (reverts an overly broad guard)</p></content>
|
||||
</entry>
|
||||
</feed>
|
||||
|
||||
Reference in New Issue
Block a user