Repository navigation
chore(deps): update dependency anthropics/claude-code to v2.1.281 - #228
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.1.274→2.1.281v2.1.293(+11)Release Notes
anthropics/claude-code (anthropics/claude-code)
v2.1.281Compare Source
What's changed
desktoppolicy blocks, includingblockReadsOutsideWorkingDirectoriesanddisableBypassPermissionsModeassume_roleon Claude apps gateway Bedrock upstreams: the gateway calls Bedrock as an IAM role it assumes through STS, in another AWS account if needed, optionally one session per developerguardrail: {id, version}on Claude apps gateway Bedrock upstreams to apply an Amazon Bedrock guardrail to every request sent through them (set it on all Bedrock upstreams or none)telemetry.resource_attributesto the Claude apps gateway config, to put fixed labels on the telemetry of Claude Desktop and/loginsessions"attribution": falseinsettings.jsonto hide all commit and PR attribution; older CLI versions skip a settings file that holds it, so keep the object form in files shared across versionsclaude plugin validate: it reports.mcp.jsonentries that would be silently dropped at load, undeclared${user_config.*}references, and insecure URLs/insightsthat estimates how many permission prompts auto mode could have handled in your recent sessions/skills,/mcpand/pluginInstalled lists in fullscreen mode, like the one/workflowsnow has: it appears while the mouse is over the list and can be clicked or dragged--max-turns, when the model alternated unparseable tool calls and output-limit truncationCLAUDE_CODE_RETRY_WATCHDOGsessions failing on the first 5xx or dropped connection after a run of 429/529 waits, and sleeping uncapped and silently on a longRetry-Afterfrom a 5xxRetry-After: 0--input-format stream-jsonsessions (Agent SDK, VS Code extension) and scheduled cloud sessions failing every turn with an error when an earlier assistant message had plain-string content-p, Agent SDK) failing on the next turn after the directory they were started in was deleted mid-session/.vol,/.nofollowor/.resolve(which can reach a network mount) before approvalrmwhose target is only command-substitution output, such asrm -rf "$(pwd)", running unprompted in auto and--dangerously-skip-permissionsmode; it now asks even with a Bash allow rule, unless run withCLAUDE_CODE_DISABLE_SUBSTITUTION_RM_PROMPT=1excludedCommandsentries not matchinggit rev-parse --git-dir, programs named like shell builtins, and commit messages containing[WIP]or#lines$TMPDIRwhenCLAUDE_CODE_TMPDIRis setclaude --bgstarting a background session, and running its project hooks, in a directory that had not passed the workspace trust prompt; it now asks for trust first, or exits when not run interactively--setting-sources(and SDKsettingSources) not being forwarded to spawned sessions: teammates,/bg,claude agentssessions and--worktree --tmuxnow start with the parent's restriction--add-dirdirectory inside the working directory being sent to the model twice in headless and SDK sessions/loopwakeups being fired again every second when their delivery failed, which could make Claude Code exit at the end of a turnclaude remote-controlstarts for you to open from Claude Desktop, claude.ai or the mobile appgcpAuthRefresh/awsAuthRefreshlogin processes being left running (and holding their localhost callback port on Windows) when Claude Code exits or the refresh times outmcp_toolhooks on blocking events (PreToolUse and similar) being skipped while their MCP server was still connecting; they now wait for it, up to the MCP connect timeoutMCP_CONNECTION_NONBLOCKING=0giving up on claude.ai connectors after 1s instead of honoringMCP_CONNECT_TIMEOUT_MS--channelsplugin entries being checked against the installed plugin's marketplace alone; the installed plugin's name must now match the entry as well--plugin-diron a folder of plugins that also has a.claude-plugin/marketplace.jsonloading one empty plugin instead of the plugins in itclaude plugin uninstallrefusing to remove a project-scope plugin that isn't enabled, saying it is "enabled at project scope" whileclaude plugin disablesays it is already disabledclaude plugin updatefailing for project-scoped plugins when--scopeis omitted — it now resolves the scope the plugin is installed at instead of assuming userclaude plugin validatereportingprivacyPolicyUrl,supportUrland other listing metadata keys in plugin.json as unknown fieldsknown_marketplaces.jsonrecording a marketplace as refreshed when its remote could not be reached andCLAUDE_CODE_PLUGIN_KEEP_MARKETPLACE_ON_FAILUREkept the existing clone/pluginErrors tab showing no confirmation after its last error is resolved/pluginstarting a second uninstall or update of the same plugin when Enter was pressed again while the first was still runningyheld while/pluginchecks a marketplace source adding the marketplace the instant the "Add marketplace?" question appears, before it can be read1answering Yes in/permissions' delete and remove-directory confirms while the pointer is on No, which let a held1remove one workspace directory after another/configoffering to turn thinking off on models that can't; thinking now stays on there, with a one-line reason in place of the switch/contexttotal leaving out messages added since the last response; it now matches its categories and can read higher than the status line/modelshowing the raw API error JSON and request ID when the API refuses the picked model; it now shows the server's message and says the model was not changed/ideshowing "No available IDEs detected" while also listing a running IDE/setup-bedrockor/setup-vertexrestarts Claude Code to apply new settings/configexiting whenrespectGitignoreorcopyFullResponsein~/.claude.jsonholdsnull/memory,/hooks,/mcp(including a server's sign-in screen),/export,/copy,/theme, and/teleport's uncommitted-changes and login prompts (where Esc also quit)xors, acting on the previous selection: a stale effort level in/effortand the model picker, and the previously highlighted row in/skills, the background task rows under the prompt, MCP server prompts and/install-github-app/install-github-appupdating the workflow after "Skip workflow update" was chosen, running setup twice on a repeated Enter, and ↑ on the repository step blocking a typed repository name when no repository was detecteddj/dk/dG/dggand theirc/yforms acting on part of a line;1Ggoing to the last line;d0/c0/y0doing nothing; the cursor being off by one after.repeats an insert; ando/pon a!-prefixed line switching to shell modecwon a space, an empty line, a word's last letter or a one-letter word also changing the next word; word motions stopping inside words in Hindi, Bengali and other scripts; and.,porPthat inserts text starting with!switching to shell mode, losing text or editing the wrong character- 316.) showing as letters, roman numerals or the wrong numberskeybindings.json, and showing a stray·when the stop-all-agents shortcut is unbound/skills) in fullscreen mode/heapdumpsummary saying most memory is native when it is in the JS heap snapshotxstopping it, when a new run started while the list was open/config,/plugin,/permissions) showing no highlight while the tab bar has focus when color is off (NO_COLOR)/pluginInstalled list scrolling the pane behind it instead of the list/hooksand/mcpdetail views printing a long value over the row below it in narrow terminals/pluginnot being answerable by typing a number in screen-reader mode$TMPDIR/…failing with "Permission denied"claude.exebackup, which could leave noclaude.exebehindsandbox.network.allowLocalBinding--agentsto accept the path to a JSON file (with-p) as well as inline JSON, and to allow an emptyprompt/batchto run where a WorktreeCreate hook provides the agent worktrees, not only inside a git repositoryclaude plugin validatewarning when a shell-form hook leaves${CLAUDE_PLUGIN_ROOT}unquoted (it breaks on plugin paths with spaces)/menu,/skills,/contextand the/pluginInstalled list to show skills synced from claude.ai by their short name when no other command uses it, notanthropic-skills:<name>/deep-researchreliability on long research briefs by removing unused required fields from the scope step's outputenvvariables ignored because the session's launch environment already sets them/permissionsand/usage: ↑/↓ move focus between the tab row and the content, and a list responds to keys only while it has focus/helpand/sandbox: ←/→ and Tab switch tabs from inside a tab's list, and ↓ on an empty Custom commands tab in/helpno longer leaves the keys stuck until Esc/install-github-app,/desktop, the/permissionsauto mode environment prompts, and the/plugin"Add marketplace?" and "Run this command?" prompts: they now use the standard dialog frame with key hints, and Ctrl+C or Ctrl+D cancels them on the second press like other dialogs/workflowsand/mcplists: they page (PgUp/PgDn, Home/End) and take j/k and the mouse like other lists, their arrows followselect:previous/select:nextrebinds, andxin/workflowsstops the run the pointer is on/pluginplugin and marketplace details menus and the/remote-controlalready-connected menu: they now support Home/End and clicking a row/skills: each row now leads with the skill's name, with ✔ or ◯ alone showing on or off, and stays on one line in narrow terminals/skills,/workflows,/feedback): a name keeps 20 columns beside its first detail, and details are shown whole or not at all/diff: a scrollbar shows where you are in a long list of changed files, and long paths no longer wrap their rows/hooks: a hook's detail screen now says what kind of hook it is and where to change it, instead of always pointing at settings.json, and the hooks-disabled, safe mode and managed-hooks-only notices each say what is happening in one plain sentence/mcp: a disabled server is read as "off" instead of "pending"CLAUDE_CODE_AUTO_MODE_SERVERto also apply on a direct Anthropic API connection:0opts out of the server-side auto mode classifier (the local classifier then counts toward usage),1opts inrmprompt in--dangerously-skip-permissionsand auto mode to wait 2 minutes for an answer, then deny the command with a rewrite hint so unattended sessions keep going (CLAUDE_CODE_DISABLE_DANGEROUS_RM_TIMEOUT=1turns this off)managedMcpServersentry'senvHelperpath starts with\??\or/??/, a path form current Claude Desktop refuses to runcommandhook that appends--system-promptor--append-system-promptmust switch to--system-prompt-fileor--append-system-prompt-file⧉ nameor⧉ N) that opens/artifacts, which now lists this session's artifacts first/config, to tint the row instead of drawing a second ❯ pointer beside the focused row'sclaude plugin uninstall --jsonand the /plugin dialog to say a plugin's data was kept when its folder stays because another installed plugin uses it or install records cannot be read/tasks): pressingxon a running/ultrareviewnow asks for confirmation before stopping the review/agentsentry from the command menu and/help; typing/agentsstill explains where the wizard wentv2.1.280Compare Source
What's changed
claude-opus-5-5), now the default Opus model — 1M context, $4/$20 per Mtok with $0.20/Mtok cache reads/skillslist, and a skill's state options in/plugincan be clickedCLAUDE_CODE_MAX_MCP_DESCRIPTION_LENGTHto change the 2,048-character cap on MCP tool descriptions and server instructions for every MCP server in the sessionhook_execution_completeOpenTelemetry eventacceptEdits, allow rules and auto mode no longer approve one landing outsidepath,file_text,file_contentor a straydescriptioninstead offile_pathandcontent/model,/effort,/config,/status,/usage,/plugin,/sandbox,/permissions,/artifacts,/mobile,/login,/upgrade,/usage-credits,/install-github-app,/setup-bedrock,/setup-vertex) quitting Claude Code instead of closing the dialognclosing dialogs and a strayyconfirming them; Enter and Esc accept and cancel (bindy/ntoconfirm:yes/confirm:noinkeybindings.jsonto restore)installed_plugins.jsonkeeping the install-time commit after updating a plugin from a GitHub repository or git URL that tracks a branch or tag~/.claude/skills/being moved to~/.claude/skills/.trash/when amanifest.jsonin that folder listed their names/workflowsbriefly showing a one-row list before opening the only run/modeland/permissions) in fullscreen mode/pluginand/skills; off now shows a dim ◯/plugin,/skillsand/mcplosing its right border in fullscreen mode/mcpshowing △ in the server list but ⚠ in the detail view for the same server; the list, detail views and/pluginnow all show ⚠/configsettings list and in selection lists such as/model,/memoryand permission prompts/skillsmenu wrapping past the first or last skill instead of stopping there/configlist; it now does nothing there/compactwhen its saved history held a malformed notice about MCP tools that could not be loaded/configcrashing and some on/off preferences being misread when a preference that has moved tosettings.jsonstill holds a value likenullor"false"in~/.claude.jsonclaude --bg) being unable to run git, hooks, plugins and other helper programs when an environment variable handed to the session contained a NUL character!shell-mode prompt stashed with Ctrl+S coming back as a plain prompt when restored, and/listing file paths right after stashing oneclaude agentsshowing a blank, unresponsive screen instead of an error when the temp directory is full, not writable or owned by another userclaude mcp removestill showing as needing authentication instead of reconnectingclaude plugin updateclearing a plugin's recorded commit and moving it to version "unknown" when the official marketplace's snapshot file is a link or too large/ultrareviewreporting a stopped cloud review as completed or as an error to retry, and waiting out the full timeout when its session was deleted or the signed-in account changed--configure-git~/.claude/session-env,image-cacheor another cleaned-up folder--retire-atrelease losing its finished signal; the runner now briefly waits for the turn to be reported before stopping the sessionctrl+l/cmd+kin fullscreen mode clearing the transcript view (added in 2.1.260); they redraw the screen again/permissions: focus returns to the rule list after viewing, adding or deleting a rule, and the delete-rule and remove-directory confirmations now default to No/permissionstab navigation: ←/→ and Tab pressed in a rule list now switch tabs without moving focus to the tab bar/costcache-miss causes to name thinking mode and thinking display changes/install-github-app: the GitHub CLI check and repository selection steps now show "Esc to cancel"/artifactsand/workflowslists: a scrollbar at the right edge shows how much of a long list is hidden and where you are in it/plugin's Add Marketplace form in fullscreen: it no longer draws a box inside the pane, and its text and key hints line up with the rest of/plugin/workflowsdetail view in fullscreen: it no longer draws a second horizontal rule under the pane's divider/btwasked while a tool is still running: the side question now knows that call is in progress instead of reading it as a failed one@file suggestions: a file whose name contains the query now ranks above one that only matches across its folder names/ultrareviewuploads: renamed copies of key files, such asid_rsa copyorkubeconfig (1).yaml, now also stay on your machine--debug-filewrites a debug log to a path you choose/effortbecame per-model to no longer apply to newly released models such as Opus 5.5; they start at their default until you pick a level/effortin-por the Agent SDK, a project, managed or--settingseffortLevel, or a per-model level/autocompact's footer hint to name ←/→, the keys that adjust other ordered values/fast's footer to name Space as the toggle keygit://remotes there now needGIT_ALLOW_PROTOCOLPermissionRequesthooks: an agent-type hook no longer runs there, since its answer could never allow or deny the request; it now shows an error pointing to command or http hooks/status, showing the session's version, account, model and server details/sandbox/chrome/export, to copy or save the conversation as plain text/skillsthat opens it/planthat switches to plan mode, sends a first planning prompt, or shows the session's planghand GitHub API calls inside a cloud session on a GitHub Enterprise Server repository failing after about eight hours; the token now renews automaticallyv2.1.278Compare Source
What's changed
CLAUDE_CODE_AUTO_MODE_SERVER=0opts out on Bedrock, Vertex, Foundry and gateways); warns on billed fallback. See https://code.claude.com/docs/en/auto-mode-classifier-billingAuto mode serverrow to/statusshowing whether this session's auto mode classifier runs on the serverv2.1.277Compare Source
What's changed
/config(not yet on Bedrock, Vertex or Foundry)CLAUDE_GATEWAY_PROXY_IS_EGRESS_BOUNDARY=1for Claude apps gateways whose only egress is a forward proxy: every outbound request hands the proxy the hostname instead of resolving it locallyheaders:map on Claude apps gateway upstreams, to send static headers to a proxy you run in front of a provider/tasksis openclaude -pand Agent SDK sessions that could hang with no result after an internal error; they now report the error and exit with code 1--resumeANTHROPIC_API_KEYusers when~/.claude.jsonholds a malformedcustomApiKeyResponsesvalueclaude updatehanging when a minimum or maximum version is set, if a proxy returns an invalid version; a malformedminimumVersionis now ignoredclaude updateon winget- or apk-managed installs reporting "up to date" when the version lookup failedclaude plugin installsometimes failing and breaking the installed copy when reinstalling a plugin version that a session or another program was using; an unchanged copy is now left aloneuXXXXtext as a\uXXXXescape, which could make an edit of a non-ASCII character rewrite an escaped backslash sequence instead\u0000written as an escape sequence; escaped control characters now stay as literal textclaude --bg) exiting when a plugin's LSP server exited or closed its stdin/mcpor/plugin managewith a malformedclaudeAiMcpEverConnectedvalue in~/.claude.json~/.claude.jsonholds a malformedthemevalue/clear(restart,--continue,--resume) missing part of their first message when a SessionStart hook printed output, causing a full prompt-cache miss/resumepicker and other panels that cover the prompt area$TMPDIRexpanding empty in Bash commands that run outside the sandbox while sandboxing is enabledNO_PROXYwhen a proxy is setstrictKnownMarketplacesorblockedMarketplacesentry silently disabling the whole enterprise marketplace policy~/.cache/claude/staging/pluginnot stripping terminal control characters from messages on the Installed tab, such as the error of a failed plugin update/plugin→ Installed and/skillscrashing when a skill or legacy command is named like a built-in Object property such asconstructorortoString/pluginclosing with no message when every install in a multi-select failed/pluginInstalled, and Remove not clearing such a rowinstalled_plugins.json, andinstalled_plugins.jsonkeeping the old commit after updating a pinned-commit plugin--plugin-urlarchive a reload falls back to when its download fails~/.claude.jsonholds a malformed placeholder record/loginclaude agentsdispatch input during key repeat or very fast inputkeybindings.jsonrebinds Enter in the Chat context, for example tochat:queueSubmitclaude -p --resume, the SDK, a VS Code extension window reload) starting the session's cost and usage totals at zero; headless sessions now save their totals at exit--worktreesessions when.claude/skillsis untrackedsandbox.excludedCommandsglob exempting an entire compound Bash command from the sandbox when only one part matched; every part must now match-p) use: the first turn no longer waits on the per-directory CLAUDE.md lookupCLAUDE_GATEWAY_ALLOW_LOOPBACK/pluginInstalled: an MCP server listed apart from its plugin now shows which plugin it belongs toclaude plugin installon an already-installed plugin: it now says when the marketplace offers a newer version and names theclaude plugin updatecommand/ultrareviewwhen there's nothing to review: messages say which case you're in, offer a command that reviews your latest commit, and a new repository's first commit is reviewed in full${VAR:?}guard, so headless runs can recoverConfiguration
📅 Schedule: (UTC)
* * * * 4)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.