[bootc-bot]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@anthropic-ai/claude-code	2.1.282 → 2.1.318
opencode-ai	1.18.32 → 1.19.5

---

Release Notes

anthropics/claude-code (@​anthropic-ai/claude-code)

v2.1.318

Compare Source

• Added a record of your answer when Claude Code asks to turn on the mods it writes in a session
• Added assume_role on mantle upstreams of the Claude apps gateway, for a role in another AWS account and for per-developer AWS cost attribution
• Added an effort option to a mod's $.model.fork, so a quick side job can run at low whatever effort the session uses; the result reports the effort sent
• Added the date a stored claude.ai sign-in ends to claude auth status (loginExpiresAt) and to claude -p JSON results (credential_expires_at)
• Added a one-line stderr warning to claude -p text output, starting 10 days before a stored claude.ai sign-in ends
• Fixed --continue sometimes losing the earlier conversation after a malformed tool call's retries ran out (regression in 2.1.314)
• Fixed macOS sessions with many running Bash commands stalling while memory grew
• Fixed permission prompts being answered by keys typed just after sending a message, or before a slow prompt appeared
• Fixed /logout, claude auth logout and claude mcp remove reporting success, and changes to trust, consent or MCP settings being dropped with no word, when the config file could not be updated on a shared network home directory
• Fixed jobs exiting with Not logged in when another terminal or host signs in again to the same account and organization on the same home
• Fixed claude mcp add and remove writing the config without its lock: they now wait for it or exit 1, though another job's save can still replace a saved server
• Fixed claude plugin commands exiting before a slow token refresh was saved, which could sign you out on the next run
• Fixed claude plugin validate passing a custom-named marketplace file that claude plugin marketplace add rejects
• Fixed stdio MCP servers that exit on the version probe being re-probed on every start; a server that dies in under 3s for its own reason is also pinned to the legacy handshake for 7 days
• Fixed sessions being refused at startup by an allowedProviders list that another login on the same machine had stored
• Fixed idle compaction replacing a conversation with a reply that was not a summary
• Fixed the "Now using usage credits" notice reappearing about every 30 seconds while a background subagent is running
• Fixed custom slash commands that fail, or that only Claude can invoke, printing nothing in claude -p and SDK sessions
• Fixed claude -p and Agent SDK sessions reporting success when an API error cut off a reply while a mod hooked turn.step
• Fixed a message sent right after a model change still running after Stop in headless sessions: Stop now cancels or stops it as it would a queued message
• Fixed a deleted session transcript being re-created with its last prompt when an idle non-interactive session exited
• Fixed claude remote-control hosts, the background daemon and self-hosted runners failing to start new sessions (spawn ENOENT) after an update or version cleanup removed the binary of a still-running process
• Fixed a running Claude Code process owned by another user (for example one left by sudo claude) being treated as dead by version cleanup, which could delete its binary
• Fixed /remote-control showing a session as available after a failed connection
• Fixed /design revoke reporting success when the request failed with a 404
• Fixed a shell command approved after a self-hosted runner or cloud session restart running in the session's start folder, not the folder it was asked in; if that folder can't be entered, it is not run
• Fixed Claude not being told when an approved connector tool was unavailable after a cloud session restart
• Fixed cloud sessions being stopped in the middle of a turn when the service refuses uploads for several minutes
• Fixed variables a Setup hook writes to CLAUDE_ENV_FILE not reaching the Bash tool in some cloud sessions
• Fixed the iPhone app showing a cloud session's turn as finished while it kept running, after a response was cut off at a tool call or a refused image or document was removed
• Fixed a restarted session re-sending a message that failed with an API error, ahead of the newer message waiting behind it
• Fixed a restarted session dropping its interrupted turn when the restart came right after Claude read a large image or retried a tool call
• Fixed every connection failing when the NODE_EXTRA_CA_CERTS file is empty, not PEM, or starts with a damaged certificate: readable certificates are now used, with a warning on stderr
• Fixed workflows re-running finished agents when resumed after a usage limit
• Fixed /mcp in cloud sessions counting tools the model can't use; a server's row now shows how many of its tools are available
• Fixed a duplicate notification when Claude left the status field out of a PushNotification call
• Fixed the error for a too-large image in a request with more than 20 images always saying the limit was 2000px; it now shows the API's limit
• Fixed the runtime in background shell details not updating while the dialog is open
• Fixed a mod's turn.step hook making a stopped reply finish as a success in headless runs
• Fixed retention cleanup leaving a home that only runs claude -p with no ~/.claude.json backup: it now takes a fresh backup before deleting the last good one
• Fixed the stored login being replaced by an empty file when a network home directory has no room left for data but still takes new files
• Fixed tokens from setup-token being refused at start on machines with forceLoginOrgUUID, when the token belongs to a permitted organization
• Fixed non-interactive launches replacing a ~/.claude.json that isn't valid JSON with defaults; the start now fails, says how to restore the file, and leaves it as is (#​87551)
• Fixed an empty ~/.claude.json with no backup being reported as corrupted; Claude Code now starts as it does when the file is missing
• Fixed the restore command printed for a damaged or missing ~/.claude.json naming an empty or cut-off backup, or failing on a read-only file
• Fixed the sign-in failure when a stored claude.ai login reaches its time limit: it now says so, and in claude -p names claude auth login and claude setup-token
• Improved how ~/.claude.json, settings files and the stored login survive saves on shared network home directories: they are less often deleted, briefly emptied or replaced by a near-empty or older copy
• Improved sessions on network file systems to look again when the configuration file is wrongly reported as missing, so fewer start without your MCP servers and trusted folders
• Improved MCP tool errors: a call made before the tool is loaded now returns its input schema
• Improved the reliability of git commits and pull request creation when the Bash tool runs macOS's built-in /bin/bash
• Improved "Ask your admin for more usage" in the usage limit menu to send the request in one step
• Improved how fast remote sessions reconnect after a pause or sleep
• Improved You should know toasts to say "try again" instead of "press 2", which only works in the terminal
• Improved auto-update reliability: a brief network failure while verifying a release is now retried right away instead of waiting for the next check
• Improved unattended runs (claude -p, SDK apps) to stop rewriting ~/.claude.json on every run when nothing in it changed
• Changed Claude Code to no longer install or update the IDE extension when started in an IDE terminal; use /ide from an outside terminal or your editor's extensions view
• Changed subagents to stop instead of switching models when "Switch models when a message is flagged" is set to "Ask each time"
• Changed background subagents to move a shell command to the background after 3 minutes on all providers, so the prompt cache doesn't expire while it runs
• Changed subagent progress summaries on Bedrock, Vertex, Foundry, or with telemetry off: on a cold prompt cache, one can now wait up to 5 minutes for the subagent's pending response
• Changed what a mod attaches at prompt.submit to stay in the user's turn rather than go out as a system message
• Changed deniedMcpServers URL entries to also block Anthropic-provided servers whose upstream URL matches, and connectors in cloud sessions and on self-hosted runners, where the session is given the connector's own URL; otherwise deny a connector by name
• Changed the /permissions rule details, built-in rules and delete confirmation views to use the standard dialog; pressing Ctrl+C twice there now goes back or cancels instead of quitting
• Changed /claude-api managed-agents-onboard to give a new agent's built-in tools, and a quickstart template's MCP tools, the auto permission policy ("Judge risky actions") by default, matching the Claude Console; say "run without asking" to opt out
• Removed the 2.1.288 fix that kept the model's earlier thinking when resuming a conversation started on 2.1.286 or earlier; that thinking can now be dropped
• Gateway: Added a log warning when the Google access token from a federation (external_account) credentials file is about to expire
• Gateway: Improved the log hints about listen.trusted_proxies: they now say to list only a proxy that adds the connecting address to X-Forwarded-For itself
• Gateway: Improved the warning when AWS CountTokens fails on Amazon Bedrock: it says Claude Code, not the gateway, counts after the 501, and points at IAM only when AWS denies access
• Self-hosted runner: Added CLAUDE_RUNNER_SPAWN_REASON to the orchestrator's spawn-runner hook environment: why Anthropic sent the request (e.g. runner_lost, resumed); unset when none was sent
• Self-hosted runner: Added a startup warning when --release-idle-session-min is the last argument with no value (still ignored) or has a value of only spaces (still read as 0)
• Self-hosted runner: Changed the orchestrator's log lines: ok session=… now prints at every log level on stdout (was debug only, stderr) with reason=… after jti=…, and nack session=… ends its fields with reason=… after retryable=…; update scripts that match retryable=true: or retryable=false:
• Remote Control: Fixed a misleading "spawn error: ENOENT" when a session's working folder is missing; the error now names the folder
• Remote Control: Improved the title a fork of a terminal fork is created with when the app doesn't set one: "Name (fork 2)"
• [VSCode] Fixed a window whose sign-in the organization's settings refuse starting a new Claude Code process in the background every minute
• [VSCode] Fixed a long word in the chat panel's error banner pushing its close button out of view
• [VSCode] Improved the sign-in screen to show what Claude Code printed when its sign-in status check fails
• [Cloud sessions] Added a No repository option: a cloud session on an Anthropic-hosted environment can now start without picking a repository
• [Cloud sessions] Added the usual Chrome names to cloud sessions, so tools other than Playwright can find the built-in Chromium through google-chrome and CHROME_PATH
• [Cloud sessions] Added a New session button to the card shown when a cloud session's environment was deleted, where the message box is hidden
• [Cloud sessions] Fixed reading GitHub Actions logs in cloud sessions: gh run view --log and gh api log requests now get the log in most environments, not an unreachable redirect
• [Cloud sessions] Improved most Create PR failure messages in cloud and Remote Control sessions: they now give the reason or a link to GitHub instead of saying Try again
• [Cloud sessions] Changed connector search results to tell Claude that the search covers only part of the connector directory
• [Remote Control] Fixed side-by-side checkouts of one repository looking identical in the environment menu's Remote Control rows; each now shows its own folder name
• [Claude Tag] Fixed keyboard focus and screen reader announcements in Claude Tag admin setup; pressing Escape in the connect form no longer also closes the Add dialog
• [Code Review] Improved the Code Review analytics page to retry once after a server or network failure, then show a Try again banner instead of empty cards

v2.1.317

Compare Source

• Added a warning to /schedule when a new cloud scheduled task gets connectors you did not ask for, with how to remove them
• Added a check that asks before a web or shell tool call sends your account email address to the network
• Added onFailure: "block" for Agent SDK hook callbacks, so a callback that fails blocks the action instead of letting it run
• Added a notice in Claude Desktop's Code tab when your organization's remote managed settings haven't loaded for the session, and another once they do
• Added a notice when auto mode's check has no answer for a subagent's tool call, which used to leave nothing in the main view
• Added anthropic.plan, anthropic.seat_type, anthropic.provider and anthropic.custom_base_url to OTel metrics, events and spans
• Added a cost report to the Claude apps gateway admin API, GET /v1/organizations/analytics/cost, for reading past spend over a date range in total, per developer, per day or per IdP group
• Added a daily record of each developer's IdP groups on Claude apps gateways with admin: set, kept for admin.identity_retention_days, which the cost report groups by
• Added CLAUDE_CODE_DISABLE_NESTED_SESSION_ID: set it to 1 on a self-hosted runner to have claude -p run inside a session use that session's ID and transcript, as in earlier versions
• Fixed project and local MCP servers disconnecting after the first turn in some Claude desktop sessions
• Fixed auto mode failing every turn when an LLM gateway set as the base URL answers 403 or 422 to its server-side safety check (a 403 with an apiKeyHelper is unchanged)
• Fixed claude auth status exiting before a slow token refresh was saved, which could sign you out on the next run
• Fixed a project's effortLevel setting being ignored by sessions that an app starts ahead of time and then opens in the project, such as new sessions in the desktop app's Code tab
• Fixed claude --from-pr reporting "No conversations found" in projects with many sessions when the linked session was older than the first page
• Fixed the second of two simultaneous permission prompts showing no file path or command on claude.ai and the mobile apps
• Fixed Remote Control and SDK hosts offering "don't ask again" on a mod's tool calls
• Fixed session titles being lost in cloud and SDK sessions when a new message or Stop arrived while the title was generating
• Fixed self-paced /loop wakeups sometimes not being scheduled when Claude left a field out of its request
• Fixed auto mode in cloud sessions stopping for approval when the Artifact tool uploaded, wrote to a database or saved a file through the outputs folder
• Fixed skills synced from claude.ai being lost or downloaded again every ten minutes when they can't be written to disk
• Fixed /schedule leaving a cloud scheduled task's next run time and link out of its results after creating or updating it
• Fixed screen readers speaking a running subagent's elapsed time and token count on every change in screen reader mode
• Fixed a region or network block (HTTP 403) being shown as a sign-in failure; the error now explains the block
• Fixed Claude saying a working claude.ai connector needed authorization or had failed in cloud sessions when a synced plugin included the same server
• Fixed claude -p exiting 0 when a full disk or quota lost its transcript or ~/.claude.json writes; it now prints an error and, in text and json output, exits 1. Full NFS exports may be missed
• Fixed edits to settings files made in the first second or so after launch not taking effect until a settings file changed again
• Fixed old transcripts not being cleaned up on machines where some runs skip cleanup, such as runs using --setting-sources
• Fixed deleted agent team inboxes being re-created by a teammate's late message
• Fixed a re-created agent teammate being removed from its team by an earlier shutdown approval
• Fixed stored scheduled tasks being impossible to list or delete after scheduled tasks were turned off
• Fixed Claude deleting your most recently updated /team-onboarding guide when asked to delete one without naming which
• Fixed Claude saying a /team-onboarding guide was deleted when the server refused the delete
• Fixed the Claude apps gateway hiding Amazon Bedrock's "Input is too long." error, which left sessions failing every turn with "upstream rejected the request" instead of compacting
• Fixed self-hosted runner sessions losing recent turns or the whole conversation when restarted while a plan waited for approval
• Fixed "Prompt is too long" after automatic compaction in sessions whose very large CLAUDE.md changed since it was last sent
• Fixed high memory use and slow startup in headless sessions with many plugins that register commands
• Fixed stdio MCP servers receiving an empty AWS_BEARER_TOKEN_BEDROCK when their env config sets it to empty; the variable is now unset, so the server can use the machine's own AWS credentials
• Fixed API requests failing with "unable to get local issuer certificate" behind some TLS-inspecting proxies after a root certificate renewal
• Fixed very long conversations losing their earlier summary when compaction had to shorten its own request
• Fixed a PDF's own metadata being able to make Read and @​-mentions under-count its pages
• Fixed DISABLE_PROMPT_CACHING_OPUS and DISABLE_PROMPT_CACHING_SONNET having no effect on [1m], other-region and undated spellings of the default model
• Fixed /artifacts and the Artifact tool's shared list showing no shared artifacts when you have 200 or more of your own
• Fixed Claude treating partial Grep and Glob results as complete when a search hit its time limit
• Fixed OpenTelemetry exports to an https:// endpoint through a proxy never being sent when they started while another export was still in progress
• Fixed a flood of connection attempts to a proxy that blocks (HTTP 403) OpenTelemetry exports to an http:// endpoint
• Fixed OpenTelemetry exports hanging indefinitely behind a proxy that never answers; they now time out after 10 seconds, or OTEL_EXPORTER_OTLP_TIMEOUT up to 30 seconds
• Fixed resumed sessions telling Claude again about a file change it already knew about
• Fixed Claude sometimes not using a built-in tool in a resumed session after an earlier call failed because the tool was switched off
• Fixed /remote-control answering "Unknown command" instead of saying that Remote Control is turned off by the disableRemoteControl setting
• Fixed agent team teammates in tmux or iTerm2 panes starting in auto mode when the lead session was in manual mode
• Fixed a background session sometimes losing a just-made change of permission mode when it was upgraded or retired
• Fixed Ctrl+C stopping all running background agents when pressed to clear typed text at the prompt
• Fixed /feedback showing "Enter to confirm" while a report is being sent
• Fixed child processes of a stopped shell command sometimes being sent SIGTERM twice, which could make some programs skip their cleanup
• Fixed claude -p run inside a cloud or self-hosted runner session sharing that session's ID: it wrote into the session's transcript, and a restart could resume the wrong conversation
• Fixed claude -p run inside a cloud or self-hosted runner session generating a title of its own and sending it to that session
• Improved the error shown on Microsoft Foundry when Azure credentials can't be loaded: it now says to check or refresh them, and reports as cloud_credential_error
• Improved /design-sync to say up front when your design system has moved to Claude, and stop before building instead of failing at upload
• Improved the startup error when a required Claude apps gateway can't be reached: it points to the network instead of a sign-in, and says when the gateway's TLS certificate can't be verified
• Improved the "Resume this session with" hint shown at exit to repeat the flags you launched with (for example --chrome --debug) ahead of --resume
• Improved how self-hosted runners recover from server errors: after a 5xx other than 501 or 529, a runner's next poll now opens a new connection instead of reusing the one that failed
• Improved how self-hosted runner sessions recover from server errors: after a 5xx other than 501 or 529, a session now opens new connections instead of reusing the one that failed
• Improved how self-hosted runner sessions recover when connections stop answering: after a heartbeat gets no answer, a session now opens new connections instead of trying each idle one in turn
• Changed SendMessage so a message to a running background agent arrives earlier: its running command moves to the background, without being stopped
• Changed subagents and teammates on a different model from the main conversation to use that model's saved effort level or its default, instead of the session's effort level
• Changed exit to skip the "Background work is running" prompt for plugin monitors
• Changed the built-in plugin-authoring skill to offer once, after a mod you built works, to help share the mod
• Removed the Read tool's "file unchanged since your last Read" stub: reading an unchanged file again returns its content
• Windows: Fixed every tool call being refused on some volumes where the native path lookup fails; the working-directory check now compares the folder's identity instead
• Windows: Fixed the session scratchpad and other temporary paths growing with your project's path length in sessions not started by Claude Desktop, which made repositories cloned into them hit the 260-character path limit
• Gateway: Fixed the status line and /usage showing a developer's own spend limit as 100% used after their group's pooled budget ran out
• Self-hosted runner: Fixed Claude not seeing the interrupted tool call when a session moves to a new runner and the turn is older than CLAUDE_CODE_RESUME_INTERRUPTED_TURN_MAX_AGE_MS
• Self-hosted runner: Fixed an MCP server that was switched off coming back on after the session moved to a new machine, when the session service had refused to save the switch
• Remote Control: Improved fork names when the app doesn't set one: a long name keeps its "(fork)" ending, and in sessions started with claude remote-control a fork of "Name (fork)" is "Name (fork 2)"
• [VSCode] Fixed forked conversations dropping messages: only one of the tool calls Claude ran in parallel was kept, and the last messages a compaction kept were lost, which could leave Claude's answer without the question it answered
• [VSCode] Fixed a message being lost when Claude did not finish starting in time: the extension now starts Claude once more before showing the error
• [VSCode] Fixed the sign-in screen opening when a request is blocked for its region or network
• [VSCode] Fixed the Account panel showing the plan name with a lower-cased second word
• [VSCode] Fixed file links in a Claude tab opening on top of the chat instead of in another editor group
• [VSCode] Fixed attachment chips, menus, banners and dialogs in the Claude panel staying small when chat.fontSize is raised
• [VSCode] Fixed ultrathink not raising effort for its turn or showing its rainbow when telemetry is off
• [Cloud sessions] Added a link card to cloud sessions, so you can open or decline a link an MCP server asks you to visit instead of the request going unseen
• [Cloud sessions] Changed the organization environment dialog in admin settings to the personal dialogs' short layout: each section opens from a row, and unsaved input asks before closing
• [Cloud sessions] Fixed adding a network secret for a host that already has one silently replacing it; the Add secret form now refuses and points you to the existing secret
• [Cloud sessions] Fixed new scheduled tasks ignoring your organization's default environment: the form now starts on the one an admin chose instead of the Anthropic-hosted default
• [Remote Control] Fixed the next message to an idle session going unanswered after you restart claude remote-control, when you sent it within a minute of your previous message
• [Claude Tag] Changed newly pasted artifact links in Slack to show a simpler card with an Open button that opens the artifact in Claude, instead of Slack's side panel

v2.1.316

• Added CLAUDE_CODE_DISABLE_ULTRATHINK, which turns the ultrathink keyword off
• Added pooled group budgets to the Claude apps gateway: one monthly budget that a group's members share, on top of each member's own limit, set with pooled_budget on the spend limits admin API
• Added CLAUDE_CODE_DISABLE_LOOPED_CROSS_CERT_DROP to keep system cross-certificates that certify each other in a loop, for servers whose private CA needs one
• Added CLAUDE_CODE_SUBAGENT_EFFORT to set the effort level subagents run at when nothing else names one, instead of inheriting the session's
• Added managed.policy_mode: layered to the Claude apps gateway: every policy that matches a developer applies, each merged over the ones listed below it, not only the first
• Added guardrail.input_tagging on Claude apps gateway Bedrock upstreams, which wraps prompts in the input tags that an Amazon Bedrock guardrail's prompt attacks filter needs; all_messages_and_system also tags the system prompt
• Deprecated fast mode for Opus 4.8 as of October 30, 2026; it will be removed on November 30, 2026. After removal, fast mode requests on Opus 4.8 return an error and do not fall back to standard Opus 4.8. Migrate to Opus 5.5 to keep the speedup
• Fixed shell commands being left running on macOS and Linux when Claude Code exits by itself, for example when credentials are refused or a cloud session is archived
• Fixed bash aliases with line breaks in their value (except in Git Bash), and functions whose names start with a dash, being garbled or lost in the Bash tool's shell
• Fixed bash scripts started from the Bash tool stopping after their first command when SHELLOPTS is exported
• Fixed PowerShell hooks not blocking on exit code 2 when the command begins with a type cast, param, using or an attribute
• Fixed some network requests hanging when a compressed response was cut off or corrupted
• Fixed sonnet, opus and haiku on Vertex AI and Amazon Bedrock showing an error mid-session instead of switching to an older model when the newest is not yet available to the account or region
• Fixed the Claude apps gateway not checking every model a request names against availableModels, deniedModels and models; a request that names a blocked model now gets a 400 naming the field
• Fixed claude auth login refusing to run where managed settings require a Claude apps gateway; in a terminal it now shows the gateway sign-in
• Fixed --restricted sessions uploading files from outside the working directories when a Read allow rule covered them
• Fixed prompts containing invisible characters needing a second Enter to send; plain prompts now send cleaned on the first Enter, and commands still wait for review
• Fixed sub-agents that inherited a parent sub-agent's model moving to the main model when a background job or message woke them
• Fixed a managed autoMode.allow list without "$defaults" getting the built-in exceptions back from a host app's --settings, a first rule added in /permissions, or /auto-mode-setup
• Fixed cloud sessions and cloud scheduled tasks not being marked as failed when auto mode stopped a turn because the server returned no safety verdict
• Fixed claude -p text output sometimes not saying why auto mode stopped a turn when a background agent was still running
• Fixed CLAUDE_CODE_AUTO_MODE_SERVER=1 being ignored in sessions started by a host application (such as Claude Desktop) behind a proxy or LLM gateway with experimental betas turned off
• Fixed plugin MCP headersHelper scripts receiving a corrupted CLAUDE_PLUGIN_ROOT and server URL when a credential-named environment variable was set to a switch value such as 1
• Fixed the SDK register_repo_root control request not loading the CLAUDE.md of a directory outside the working directory (with CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD=1)
• Fixed the Artifact tool showing ? for artifact database access rules at the self level, and not quoting those rules back when it refuses a republish that would drop them
• Fixed /model <id> not warning when the model isn't recognized by this version and auto-compact will assume a 200K context window
• Fixed the "hold space to speak" hint using up its three showings in one session, and showing an empty key when push-to-talk is unbound
• Fixed Grep and Glob never returning when the search process is killed at the timeout but does not exit, seen on Windows
• Fixed a rare case where resuming a conversation did not restore its plan, when /clear or /resume had been run while part of that conversation was still being saved
• Fixed first-run setup dropping words from the security notes and the terminal-setup explanation in narrow terminals
• Fixed the Enterprise survey card taking a typed 1 or 0 after a short pause; a typed answer now needs Enter
• Self-hosted runner: Fixed a message sent while Claude was working being answered after a Stop, once the session's process had been replaced
• Self-hosted runner: Fixed an MCP server's on/off switch sometimes being lost when a session moved to a new machine
• Windows: Fixed the Bash tool losing your aliases and functions in Git Bash when the rc file sets errexit and pipefail and only winpty aliases, or none, are defined
• Improved /code-review started from the Code tab in Claude Desktop or on the web: cloud and claude remote-control sessions now show the findings card, not a plain-text list
• Improved /diff on large repositories: each refresh usually runs one fewer full-repository git command, and refreshes are spaced out when git is slow
• Improved the messages shown when /ultrareview, a cloud session or a cloud agent finds no GitHub remote: they now say to create a repository at https://github.com/new, and /ultrareview no longer suggests a gh command that gh rejects
• Improved SSL certificate errors to name the likely causes, among them a server that leaves out an intermediate certificate, and the fix for each
• Changed auto mode so that an autoMode.allow list without "$defaults" no longer removes the built-in rule on scheduled-task prompts
• Changed server-managed settings for Team and Enterprise logins: settings fetched from Anthropic's API now apply without an approval prompt, and a stored copy that doesn't verify is refused
• [VSCode] Added sign-in to a Claude apps gateway from the chat panel, with no terminal needed
• [VSCode] Changed ultrathink to run its turn at xhigh effort and show in a rainbow in the chat box, as in the terminal
• [VSCode] Fixed the missing Effort slider, Ultracode switch and model name when the model setting has the [1m] tag, such as opus[1m]
• [VSCode] Fixed saved /btw side-question history being deleted too early while a settings file has errors
• [VSCode] Fixed a conversation coming back in Auto mode after a reload or restart when its plan was approved with "Yes, and manually approve edits"
• [Cloud sessions] Added a form card to cloud sessions, so you can fill in or decline a form an MCP server asks for instead of the request being canceled without you seeing it
• [Cloud sessions] Added a "Catching up…" line that shows while a cloud or Remote Control session you switch back to is still bringing its messages up to date
• [Cloud sessions] Changed network secrets so Enterprise members can add and delete them on their own cloud environments, instead of only viewing them
• [Cloud sessions] Improved the Changes pane for cloud sessions: the note about what the list leaves out is now a badge beside the branch name, not a row above the diff
• [Cloud sessions] Fixed file search in a cloud session's Files pane showing folders as ../.. paths after Claude changed directory; results now show their path from the project's root
• [Claude Tag] Fixed Claude refusing to edit or append to a canvas it made in a Slack channel, from that channel, once the canvas was also shared to another channel or a DM
• [Claude Tag] Fixed untagged replies going unanswered in a Slack Connect thread when both organizations have installed Claude and Slack delivered the reply to the other organization's app
• [Claude Tag] Fixed a cloud scheduled task's live status checklist in Slack staying half-done; a run can now edit the top-level messages it posted during that run
• [Claude Tag] Changed a Slack channel's Respond automatically switch to a "How Claude participates" choice on the channel's Configure page and in Claude Tag admin settings
• [Code Review] Added a findings-by-severity card to the Code Review analytics page, showing the period's total findings, a daily chart stacked by severity, and each severity's count

v2.1.314

Compare Source

• Added permissions.blockWritesOutsideWorkingDirectories: Write, Edit and NotebookEdit refuse paths outside the working directories in every permission mode
• Added an optional groups list to Claude apps gateway upstreams: only developers in the listed IdP groups are sent to that upstream, on failover too
• Added guardrail_trace to Claude apps gateway Bedrock upstreams, to log which Amazon Bedrock guardrail filter fired on a request, without the matched text
• Added idle compaction to VS Code and Claude Desktop's Code tab: a 200K+ token conversation left idle is summarized, and the summary is used on your next message if the prompt cache has expired
• Fixed sessions failing turn after turn with "Invalid effort level" when an organization's admin caps a model's effort: Claude Code now lowers the effort, retries, and says which level it uses
• Fixed claude -p exiting with code 0 and no output when startup failed; it now prints the error and exits 1
• Fixed Bedrock sessions with many images failing every turn and /compact with "400 Input is too long." instead of removing older images and compacting
• Fixed Microsoft Foundry sessions failing when the resource has no deployment for the default Sonnet, Opus or Haiku model: Claude Code now falls back to an older model of that family
• Fixed repeated refused requests behind a gateway that doesn't accept tool search's tool_reference blocks: the request is sent again once without tool search, and the session remembers
• Fixed TLS connections failing with UNABLE_TO_GET_ISSUER_CERT when the system certificate store holds a renewed root certificate that is cross-signed with its predecessor
• Fixed MCP servers that also work without sign-in showing "needs authentication" after their stored sign-in stopped working; they are now used signed out
• Fixed claude mcp logout reporting success when the MCP sign-in was not removed, for example while the macOS keychain is locked over SSH
• Fixed extra sign-in renewals when several sessions share an Anthropic profile login and the credentials lock is busy
• Fixed claude ultrareview and claude remote-control asking the workspace trust question in a CI job that has a terminal; with CI set they now refuse an untrusted folder at once
• Fixed an administrator's TLS trust settings in managed settings not being applied in Claude Desktop sessions
• Fixed model switching being refused on machines with managed plugin settings when one of your own --plugin-dir or --plugin-url plugins had a broken manifest or failed to download
• Fixed the Bedrock and Vertex model upgrade offer coming back at every start when managed settings pin the model
• Fixed forceRemoteSettingsRefresh set only in remote managed settings no longer applying once the stored copy had expired, which let sessions start without policy when the server could not be reached
• Fixed "Continue automatically at usage limit" continuing more than three times without a prompt from you when a task restarted itself between waits (a /goal check-in, a background or scheduled task)
• Fixed background and cloud sessions started with Ultracode turning it back on at their next start after it had been switched off
• Fixed the last broken reply and its retry prompts staying in the conversation after Claude gave up on a tool call that could not be parsed
• Fixed a PreCompact hook with very large output making compaction fail or repeat; each hook's output is now cut at 10,000 characters
• Fixed background diff refreshes briefly taking the repository's index lock, which could make a git command run at the same moment fail with "Unable to create '.git/index.lock': File exists"
• Fixed markdown tables jumping between grid and stacked layouts on half-typed rows while streaming, and long tables falling back to raw pipes
• Fixed the /resume picker showing the text of CLAUDE.md or CLAUDE.local.md as a session's title when the session only ran slash commands
• Fixed /btw answering from the main conversation when asked from a subagent's open transcript
• Fixed pasting an image over SSH to a Linux machine doing nothing silently; the prompt now says to copy the file over and paste its path
• Fixed claude remote-control sessions that failed to start when the session service was slow for a moment: the worker's registration is now retried with growing waits
• Fixed model switches over Remote Control that take over 8 seconds getting a "still pending" error instead of the final result
• Fixed the sandbox.excludedCommands setting description saying listed commands always run outside the sandbox; it now says every command in a call must match an entry
• Fixed shell and MCP calls that auto mode, a deny rule or a PreToolUse hook blocked, or that otherwise did not run, reading as if they ran in a collapsed tool group
• Fixed sandbox protections not applying to a worktree entered by claude -p --resume or --continue
• Fixed hooks matching Bash not running on shell commands started by the Monitor tool; such hooks can block or ask, but not approve or rewrite those commands
• Fixed a settings file excluded with --setting-sources still supplying some settings, such as auto mode rules and saved permission consents
• Fixed auto mode reporting a call as blocked, and listing it in /permissions, when its safety check gave no verdict
• Fixed a Claude apps gateway Vertex upstream hanging for minutes when a Google token endpoint accepts the connection and never answers
• Fixed the Claude apps gateway's start-up warning for a deprecated Claude Desktop key that it still serves as written saying "stops being accepted" after the key's end date
• Fixed /upgrade opening the browser and starting a new login for plans billed through the App Store or Google Play; it now says where to change the plan
• Fixed --resume, and rewinding past a switch to another model after a refusal, moving a session on a model name Claude Code doesn't recognize to a different model
• Fixed requests failing when a gateway or cloud provider refuses one of Claude Code's beta headers by name: the request is sent again without it
• Fixed model IDs spelled with a dot behind an LLM gateway, such as claude-opus-4.8, being treated as an older model with the wrong context window, output limit, effort, thinking mode and cost
• Fixed Remote Control clients showing a stray "Compacted (ctrl+o to see full summary)" row after /compact
• Fixed the cloud sessions tip and the Remote Control idle notice showing when an organization's policy turns those features off
• Fixed a resumed claude.ai cloud session making a model call nobody asked for when the previous worker stopped just after receiving a new chat's files
• Fixed WebFetch in Cowork cloud sessions silently dropping a PDF's text past 100,000 characters; it now says how much was unread and where to read on
• Fixed Claude being told only that a command was declined after you stopped it with Esc or Stop in a cloud session or the IDE; it now also hears that the command may have run
• Fixed blank lines at the top of a code block disappearing when the code block opens a quote
• Fixed a blank line appearing above some ⎿ rows in the transcript view (Ctrl+O)
• Fixed vim mode dw, dW, yw and yW carrying on past the end of the line, and made w and W stop on empty lines
• Fixed x and Enter in the agent panel sometimes acting on the wrong agent when another agent started or finished
• Fixed pasted text and dragged-in files being lost in Claude's question dialog unless the "Other" row had focus
• Fixed pasted text being lost when a row in the prompt footer was selected
• Fixed vim mode p over a character selection ignoring whether the yanked text was whole lines
• Fixed vim mode aw and iw taking the line break at the end of a line
• Fixed ↓ selecting footer items hidden by the ? help menu, the command list or a paste hint
• Fixed Esc on a command's panel, such as /btw, also interrupting the subagent whose transcript is open
• Fixed the welcome header in fullscreen mode showing the session's model while viewing a subagent or teammate that runs on a different model
• Fixed the fullscreen transcript being left mid-conversation after "Restore conversation" in the rewind menu while scrolled up
• Fixed a rare case where a deleted session could reappear in the resume list as an almost empty entry
• Fixed prompts containing tags such as <bash-stdout> or <local-command-stdout> not being acknowledged to a local stream-json host
• Fixed sessions staying untitled when the first prompt failed (for example on a usage limit) and the conversation continued afterward
• Fixed the skill file watcher checking every removed skill kept in ~/.claude/skills/.trash, which added file system load that grew with each removal
• Fixed the session name from /rename disappearing while Claude asks for permission or a plan decision, so side-by-side sessions stay identifiable
• Fixed background sessions that fail to start being reported as a deleted daemon binary when the binary is still on disk
• Fixed the tip and idle reminder about push notifications appearing when the push settings in /config are hidden or your organization has turned off Remote Control
• Fixed ~/.claude/skills/.trash and ~/.claude/plugins/.trash growing without limit: each now holds about 1024 entries, whatever cleanupPeriodDays says
• Fixed the Bash edit diff listing a whole file as changed when a CRLF file under git's line-ending conversion was re-saved unchanged or had one line edited
• Self-hosted runner: Fixed an idle session moving to another runner instead of pausing when the runner's request to pause it lost its connection before Anthropic answered
• Improved memory use in long headless and SDK turns that run many subagents: the parent session no longer keeps each subagent's tool results until the turn ends
• Improved prompt history: Ctrl+R now matches text inside collapsed [Pasted text] pills
• Improved the /design-sync upload prompt to show the folder, the project and the files it will upload or delete
• Improved /permissions review tab, now called Recently blocked: the footer says what Esc will do with marked rows
• Improved auto mode's blocked calls: messages name the command, say Claude may retry and auto mode checks again, and point to /permissions to review
• Improved permission prompts: a long reason takes fewer rows, so it pushes the command being approved off the screen on fewer terminals
• Improved the cloud session error shown while a request refused for your claude.ai login is still being retried: it now also suggests claude auth login
• Improved the behavior of stored claude.ai, Team, and Enterprise logins when MDM and remote settings differ on base URL or apiKeyHelper
• Improved /config in agent view to say how to stop agent view opening by default
• Improved session auto-titles: a session that starts with a skill or a prompt-based command such as /security-review now gets a title from it instead of staying untitled
• Improved --resume speed and memory use on damaged transcripts
• Improved /context speed in sessions with ten thousand or more MCP tools
• Self-hosted runner: Improved the error shown when a session's branch isn't on the git remote: it now covers a never-pushed branch, says how to fix each case, and no longer suggests retrying
• Updated the /claude-api skill: its Datadog setup for API tracing now sends the dd-llmobs-enabled: true header, as the Console does, and its ant install instructions drop the outdated macOS xattr step
• Updated the bundled dataviz skill to advise printing y-axis tick labels in full under 10,000, and horizontal ones in full under a million where they fit
• Updated the bundled dataviz skill to answer donut and pie chart requests with ranked bars or a segmented bar that prints its values
• Changed Claude's file tools to ask before editing the local copy of your organization's server-managed settings, as they do for your settings files
• Changed /ultrareview to check workspace trust before it runs git, as claude ultrareview does
• Changed the Bash tool's shell to clear any inherited which alias or function and to stop passing exported which/unsetenv functions to commands, so which is the system command or zsh builtin
• Changed /permissions Recently blocked to refuse approving a call you can't read in full, including one the terminal is too short to show
• Changed auto mode in Cowork cloud sessions: a hook's allow of an MCP tool call now counts as no answer, so the classifier or a permission prompt decides
• Changed hook if conditions such as Monitor(tail *) to match the Monitor tool's shell commands as Bash(tail *) matches Bash's
• Changed the claude-api skill to ask to read a Managed Agents workflow run's workflow before changing the agent to improve that run
• Changed flagged requests to retry on another model, not end in a refusal, when ANTHROPIC_DEFAULT_OPUS_MODEL, availableModels or deniedModels leaves only an older Opus model, or none
• Changed idle compaction to also run for subscribers with telemetry turned off, and on Bedrock, Vertex, Foundry and LLM gateways once the one-hour prompt cache is on
• Changed FORCE_HYPERLINK=false (also no and off) to turn hyperlinks off instead of on
• macOS: Changed git grep in most commands that Claude runs to use the C locale, to avoid a reported memory leak in macOS's regex library on files that aren't valid UTF-8
• [VSCode] Fixed "Clear authentication" for MCP servers reporting success when the saved sign-in could not be removed
• [VSCode] Fixed missing spinner and Stop button while a queued message's hooks run
• [VSCode] Fixed session group changes that cannot be saved, such as a delete, failing silently; an error notification now appears
• [VSCode] Fixed Cmd+F / Ctrl+F not opening the find widget in the plan preview tab
• [VSCode] Fixed the voice dictation shortcut (Ctrl+D) doing nothing under non-Latin keyboard layouts such as Russian, Greek or Hebrew
• [VSCode] Fixed missed one-time saved scheduled tasks being deleted without asking when the extension opened without a chat
• [VSCo

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.