TAG

#claude-code

Stories connected through a shared idea, actor, technology or theme.

24 OctClaude Code 2.1.309 closes multiple sandbox and permission bypassesThe release prevents shell startup files and MCP configuration files from being modified outside intended controls, and fixes permission checks that could be bypassed through symlinks or wrapped directory changes. It also hardens worktree isolation and Windows hook behaviour.→17 OctClaude Code 2.1.301 adds safer unattended retries and richer agent telemetryThe release adds CLAUDE_CODE_RETRY_WATCHDOG_MAX_USAGE_LIMIT_WAIT_MS so unattended retry mode can stop instead of waiting indefinitely for a usage limit to reset. It also adds classifier verdict, permission mode, and classifier-category fields to tool-decision telemetry, while fixing unsafe worktree deletion and several search and workflow-reporting failures.→2 OctClaude Code 2.1.286 improves permission and cloud-credential recoveryThe release shows counts such as “2 of 5” when several permission requests are pending and adds mouse navigation for fullscreen lists. It also fixes cases where GCP or AWS credential refreshes opened multiple login browsers and where resumed sessions lost turns.→30 SeptClaude Code 2.1.284 makes Sonnet 5.5 the default and hardens MCP recoveryVersion 2.1.284 adds Claude Sonnet 5.5 as the default Sonnet model on the Anthropic API, with 1-million-token context and published pricing. It also makes resumed MCP sessions wait for connecting servers, adds bulk MCP reconnect, improves permission and plugin controls, and fixes numerous agent-session failures.→29 SeptRulesync 22.0 changes how agent instructions map to projectsThe release enforces Codex’s 32 KiB instruction-chain limit and warns when generated rule files exceed it. It also converts bearer-token and header variable references into the Codex configuration fields that actually resolve environment values, while making malformed Claude skills non-fatal during import.→26 SeptClaude Code 2.1.282 hardens telemetry, permissions and session recoveryThe release ignores project-level telemetry settings that could enable export or content capture, adds managed Chrome/MCP controls, and improves recovery of extended-thinking sessions. It also fixes permission-rule bypasses, duplicate command execution and several remote-session failures.→18 SeptClaude Code 2.1.274 hardens MCP startup, session recovery and telemetryClaude Code 2.1.274 adds configuration for limiting MCP startup waits, an effort attribute for OpenTelemetry spans and a redacted managed-settings telemetry event. It also improves transcript repair, context compaction, subagent reliability, remote sessions and gateway error handling.→16 SeptClaude Code 2.1.271 adds remote fast mode and tighter agent controlsThe release applies fast mode to permitted cloud and self-hosted Remote sessions, adds per-command allowed domains in sandboxed auto mode and introduces hash-specific approval for plugin installation and updates. It also fixes MCP OAuth registration handling, session resumption, permission checks and background-command duplication.→7 SeptClaude Code 2.1.263 fixes background-agent reliability failuresThe release fixes interrupted commands being shown as completed, prevents finished subagents from silently restarting during navigation, and addresses races when opening newly started sessions. It also improves background-session retention and worktree cleanup behaviour.→2 SeptClaude Code 2.1.252 fixes remote-session stalls and oversized failure outputVersion 2.1.252 fixes Remote Control sessions stalling after tools finish when the Claude service connection is degraded. It also prevents very large background-task failure messages from pushing conversations beyond the API request-size limit.→18 AugClaude API and Claude Code outage interrupted multiple Anthropic servicesAnthropic’s status API recorded the incident starting at 21:58:56 UTC on 16 August and resolved at 22:34:39 UTC. The affected components included the Claude API, Claude Code and the platform console, so both end-user and developer-facing surfaces were involved.→17 AugChainDrop targets npm users through developer-tool configurationThe Register reports that ChainDrop poisoned 444 npm packages and can activate through configuration used by environments such as VS Code and Claude Code. The campaign is designed to harvest npm tokens, cloud credentials, and other secrets, while dependency scanning may not detect the configuration-based payload.→17 AugClaude Code users report blank reasoning blocks despite billingThe Register reports that Opus 4.8 and Sonnet 5 requests can return missing or incomplete thinking summaries. Anthropic documentation states that thinking tokens remain billable even when the thinking content is collapsed or redacted, and the company was investigating the behaviour.→