[patch-upgrades] Update all patch dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@anthropic-ai/claude-code	2.1.2 → 2.1.74
axios (source)	1.13.2 → 1.13.6
cors	2.8.5 → 2.8.6
mailparser	3.9.1 → 3.9.4

---

Release Notes

anthropics/claude-code (@​anthropic-ai/claude-code)

v2.1.74

Compare Source

• Added actionable suggestions to /context command — identifies context-heavy tools, memory bloat, and capacity warnings with specific optimization tips
• Added autoMemoryDirectory setting to configure a custom directory for auto-memory storage
• Fixed memory leak where streaming API response buffers were not released when the generator was terminated early, causing unbounded RSS growth on the Node.js/npm code path
• Fixed managed policy ask rules being bypassed by user allow rules or skill allowed-tools
• Fixed full model IDs (e.g., claude-opus-4-5) being silently ignored in agent frontmatter model: field and --agents JSON config — agents now accept the same model values as --model
• Fixed MCP OAuth authentication hanging when the callback port is already in use
• Fixed MCP OAuth refresh never prompting for re-auth after the refresh token expires, for OAuth servers that return errors with HTTP 200 (e.g. Slack)
• Fixed voice mode silently failing on the macOS native binary for users whose terminal had never been granted microphone permission — the binary now includes the audio-input entitlement so macOS prompts correctly
• Fixed SessionEnd hooks being killed after 1.5 s on exit regardless of hook.timeout — now configurable via CLAUDE_CODE_SESSIONEND_HOOKS_TIMEOUT_MS
• Fixed /plugin install failing inside the REPL for marketplace plugins with local sources
• Fixed marketplace update not syncing git submodules — plugin sources in submodules no longer break after update
• Fixed unknown slash commands with arguments silently dropping input — now shows your input as a warning
• Fixed Hebrew, Arabic, and other RTL text not rendering correctly in Windows Terminal, conhost, and VS Code integrated terminal
• Fixed LSP servers not working on Windows due to malformed file URIs
• Changed --plugin-dir so local dev copies now override installed marketplace plugins with the same name (unless that plugin is force-enabled by managed settings)
• [VSCode] Fixed delete button not working for Untitled sessions
• [VSCode] Improved scroll wheel responsiveness in the integrated terminal with terminal-aware acceleration

v2.1.73

Compare Source

• Added modelOverrides setting to map model picker entries to custom provider model IDs (e.g. Bedrock inference profile ARNs)
• Added actionable guidance when OAuth login or connectivity checks fail due to SSL certificate errors (corporate proxies, NODE_EXTRA_CA_CERTS)
• Fixed freezes and 100% CPU loops triggered by permission prompts for complex bash commands
• Fixed a deadlock that could freeze Claude Code when many skill files changed at once (e.g. during git pull in a repo with a large .claude/skills/ directory)
• Fixed Bash tool output being lost when running multiple Claude Code sessions in the same project directory
• Fixed subagents with model: opus/sonnet/haiku being silently downgraded to older model versions on Bedrock, Vertex, and Microsoft Foundry
• Fixed background bash processes spawned by subagents not being cleaned up when the agent exits
• Fixed /resume showing the current session in the picker
• Fixed /ide crashing with onInstall is not defined when auto-installing the extension
• Fixed /loop not being available on Bedrock/Vertex/Foundry and when telemetry was disabled
• Fixed SessionStart hooks firing twice when resuming a session via --resume or --continue
• Fixed JSON-output hooks injecting no-op system-reminder messages into the model's context on every turn
• Fixed voice mode session corruption when a slow connection overlaps a new recording
• Fixed Linux sandbox failing to start with "ripgrep (rg) not found" on native builds
• Fixed Linux native modules not loading on Amazon Linux 2 and other glibc 2.26 systems
• Fixed "media_type: Field required" API error when receiving images via Remote Control
• Fixed /heapdump failing on Windows with EEXIST error when the Desktop folder already exists
• Improved Up arrow after interrupting Claude — now restores the interrupted prompt and rewinds the conversation in one step
• Improved IDE detection speed at startup
• Improved clipboard image pasting performance on macOS
• Improved /effort to work while Claude is responding, matching /model behavior
• Improved voice mode to automatically retry transient connection failures during rapid push-to-talk re-press
• Improved the Remote Control spawn mode selection prompt with better context
• Changed default Opus model on Bedrock, Vertex, and Microsoft Foundry to Opus 4.6 (was Opus 4.1)
• Deprecated /output-style command — use /config instead. Output style is now fixed at session start for better prompt caching
• VSCode: Fixed HTTP 400 errors for users behind proxies or on Bedrock/Vertex with Claude 4.5 models

v2.1.72

Compare Source

• Fixed tool search to activate even with ANTHROPIC_BASE_URL as long as ENABLE_TOOL_SEARCH is set.
• Added w key in /copy to write the focused selection directly to a file, bypassing the clipboard (useful over SSH)
• Added optional description argument to /plan (e.g., /plan fix the auth bug) that enters plan mode and immediately starts
• Added ExitWorktree tool to leave an EnterWorktree session
• Added CLAUDE_CODE_DISABLE_CRON environment variable to immediately stop scheduled cron jobs mid-session
• Added lsof, pgrep, tput, ss, fd, and fdfind to the bash auto-approval allowlist, reducing permission prompts for common read-only operations
• Restored the model parameter on the Agent tool for per-invocation model overrides
• Simplified effort levels to low/medium/high (removed max) with new symbols (○ ◐ ●) and a brief notification instead of a persistent icon. Use /effort auto to reset to default
• Improved /config — Escape now cancels changes, Enter saves and closes, Space toggles settings
• Improved up-arrow history to show current session's messages first when running multiple concurrent sessions
• Improved voice input transcription accuracy for repo names and common dev terms (regex, OAuth, JSON)
• Improved bash command parsing by switching to a native module — faster initialization and no memory leak
• Reduced bundle size by ~510 KB
• Changed CLAUDE.md HTML comments (<!-- ... -->) to be hidden from Claude when auto-injected. Comments remain visible when read with the Read tool
• Fixed slow exits when background tasks or hooks were slow to respond
• Fixed agent task progress stuck on "Initializing…"
• Fixed skill hooks firing twice per event when a hooks-enabled skill is invoked by the model
• Fixed several voice mode issues: occasional input lag, false "No speech detected" errors after releasing push-to-talk, and stale transcripts re-filling the prompt after submission
• Fixed --continue not resuming from the most recent point after --compact
• Fixed bash security parsing edge cases
• Added support for marketplace git URLs without .git suffix (Azure DevOps, AWS CodeCommit)
• Improved marketplace clone failure messages to show diagnostic info even when git produces no stderr
• Fixed several plugin issues: installation failing on Windows with EEXIST error in OneDrive folders, marketplace blocking user-scope installs when a project-scope install exists, CLAUDE_CODE_PLUGIN_CACHE_DIR creating literal ~ directories, and plugin.json with marketplace-only fields failing to load
• Fixed feedback survey appearing too frequently in long sessions
• Fixed --effort CLI flag being reset by unrelated settings writes on startup
• Fixed backgrounded Ctrl+B queries losing their transcript or corrupting the new conversation after /clear
• Fixed /clear killing background agent/bash tasks — only foreground tasks are now cleared
• Fixed worktree isolation issues: Task tool resume not restoring cwd, and background task notifications missing worktreePath and worktreeBranch
• Fixed /model not displaying results when run while Claude is working
• Fixed digit keys selecting menu options instead of typing in plan mode permission prompt's text input
• Fixed sandbox permission issues: certain file write operations incorrectly allowed without prompting, and output redirections to allowlisted directories (like /tmp/claude/) prompting unnecessarily
• Improved CPU utilization in long sessions
• Fixed prompt cache invalidation in SDK query() calls, reducing input token costs up to 12x
• Fixed Escape key becoming unresponsive after cancelling a query
• Fixed double Ctrl+C not exiting when background agents or tasks are running
• Fixed team agents to inherit the leader's model
• Fixed "Always Allow" saving permission rules that never match again
• Fixed several hooks issues: transcript_path pointing to the wrong directory for resumed/forked sessions, agent prompt being silently deleted from settings.json on every settings write, PostToolUse block reason displaying twice, async hooks not receiving stdin with bash read -r, and validation error message showing an example that fails validation
• Fixed session crashes in Desktop/SDK when Read returned files containing U+2028/U+2029 characters
• Fixed terminal title being cleared on exit even when CLAUDE_CODE_DISABLE_TERMINAL_TITLE was set
• Fixed several permission rule matching issues: wildcard rules not matching commands with heredocs, embedded newlines, or no arguments; sandbox.excludedCommands failing with env var prefixes; "always allow" suggesting overly broad prefixes for nested CLI tools; and deny rules not applying to all command forms
• Fixed oversized and truncated images from Bash data-URL output
• Fixed a crash when resuming sessions that contained Bedrock API errors
• Fixed intermittent "expected boolean, received string" validation errors on Edit, Bash, and Grep tool inputs
• Fixed multi-line session titles when forking from a conversation whose first message contained newlines
• Fixed queued messages not showing attached images, and images being lost when pressing ↑ to edit a queued message
• Fixed parallel tool calls where a failed Read/WebFetch/Glob would cancel its siblings — only Bash errors now cascade
• VSCode: Fixed scroll speed in integrated terminals not matching native terminals
• VSCode: Fixed Shift+Enter submitting input instead of inserting a newline for users with older keybindings
• VSCode: Added effort level indicator on the input border
• VSCode: Added vscode://anthropic.claude-code/open URI handler to open a new Claude Code tab programmatically, with optional prompt and session query parameters

v2.1.71

Compare Source

• Added /loop command to run a prompt or slash command on a recurring interval (e.g. /loop 5m check the deploy)
• Added cron scheduling tools for recurring prompts within a session
• Added voice:pushToTalk keybinding to make the voice activation key rebindable in keybindings.json (default: space) — modifier+letter combos like meta+k have zero typing interference
• Added fmt, comm, cmp, numfmt, expr, test, printf, getconf, seq, tsort, and pr to the bash auto-approval allowlist
• Fixed stdin freeze in long-running sessions where keystrokes stop being processed but the process stays alive
• Fixed a 5–8 second startup freeze for users with voice mode enabled, caused by CoreAudio initialization blocking the main thread after system wake
• Fixed startup UI freeze when many claude.ai proxy connectors refresh an expired OAuth token simultaneously
• Fixed forked conversations (/fork) sharing the same plan file, which caused plan edits in one fork to overwrite the other
• Fixed the Read tool putting oversized images into context when image processing failed, breaking subsequent turns in long image-heavy sessions
• Fixed false-positive permission prompts for compound bash commands containing heredoc commit messages
• Fixed plugin installations being lost when running multiple Claude Code instances
• Fixed claude.ai connectors failing to reconnect after OAuth token refresh
• Fixed claude.ai MCP connector startup notifications appearing for every org-configured connector instead of only previously connected ones
• Fixed background agent completion notifications missing the output file path, which made it difficult for parent agents to recover agent results after context compaction
• Fixed duplicate output in Bash tool error messages when commands exit with non-zero status
• Fixed Chrome extension auto-detection getting permanently stuck on "not installed" after running on a machine without local Chrome
• Fixed /plugin marketplace update failing with merge conflicts when the marketplace is pinned to a branch/tag ref
• Fixed /plugin marketplace add owner/repo@ref incorrectly parsing @ — previously only # worked as a ref separator, causing undiagnosable errors with strictKnownMarketplaces
• Fixed duplicate entries in /permissions Workspace tab when the same directory is added with and without a trailing slash
• Fixed --print hanging forever when team agents are configured — the exit loop no longer waits on long-lived in_process_teammate tasks
• Fixed "❯ Tool loaded." appearing in the REPL after every ToolSearch call
• Fixed prompting for cd <cwd> && git ... on Windows when the model uses a mingw-style path
• Improved startup time by deferring native image processor loading to first use
• Improved bridge session reconnection to complete within seconds after laptop wake from sleep, instead of waiting up to 10 minutes
• Improved /plugin uninstall to disable project-scoped plugins in .claude/settings.local.json instead of modifying .claude/settings.json, so changes don't affect teammates
• Improved plugin-provided MCP server deduplication — servers that duplicate a manually-configured server (same command/URL) are now skipped, preventing duplicate connections and tool sets. Suppressions are shown in the /plugin menu.
• Updated /debug to toggle debug logging on mid-session, since debug logs are no longer written by default
• Removed startup notification noise for unauthenticated org-registered claude.ai connectors

v2.1.70

Compare Source

• Fixed API 400 errors when using ANTHROPIC_BASE_URL with a third-party gateway — tool search now correctly detects proxy endpoints and disables tool_reference blocks
• Fixed API Error: 400 This model does not support the effort parameter when using custom Bedrock inference profiles or other model identifiers not matching standard Claude naming patterns
• Fixed empty model responses immediately after ToolSearch — the server renders tool schemas with system-prompt-style tags at the prompt tail, which could confuse models into stopping early
• Fixed prompt-cache bust when an MCP server with instructions connects after the first turn
• Fixed Enter inserting a newline instead of submitting when typing over a slow SSH connection
• Fixed clipboard corrupting non-ASCII text (CJK, emoji) on Windows/WSL by using PowerShell Set-Clipboard
• Fixed extra VS Code windows opening at startup on Windows when running from the VS Code integrated terminal
• Fixed voice mode failing on Windows native binary with "native audio module could not be loaded"
• Fixed push-to-talk not activating on session start when voiceEnabled: true was set in settings
• Fixed markdown links containing #NNN references incorrectly pointing to the current repository instead of the linked URL
• Fixed repeated "Model updated to Opus 4.6" notification when a project's .claude/settings.json has a legacy Opus model string pinned
• Fixed plugins showing as inaccurately installed in /plugin
• Fixed plugins showing "not found in marketplace" errors on fresh startup by auto-refreshing after marketplace installation
• Fixed /security-review command failing with unknown option merge-base on older git versions
• Fixed /color command having no way to reset back to the default color — /color default, /color gray, /color reset, and /color none now restore the default
• Fixed a performance regression in the AskUserQuestion preview dialog that re-ran markdown rendering on every keystroke in the notes input
• Fixed feature flags read during early startup never refreshing their disk cache, causing stale values to persist across sessions
• Fixed permissions.defaultMode settings values other than acceptEdits or plan being applied in Claude Code Remote environments — they are now ignored
• Fixed skill listing being re-injected on every --resume (~600 tokens saved per resume)
• Fixed teleport marker not rendering in VS Code teleported sessions
• Improved error message when microphone captures silence to distinguish from "no speech detected"
• Improved compaction to preserve images in the summarizer request, allowing prompt cache reuse for faster and cheaper compaction
• Improved /rename to work while Claude is processing, instead of being silently queued
• Reduced prompt input re-renders during turns by ~74%
• Reduced startup memory by ~426KB for users without custom CA certificates
• Reduced Remote Control /poll rate to once per 10 minutes while connected (was 1–2s), cutting server load ~300×. Reconnection is unaffected — transport loss immediately wakes fast polling.
• [VSCode] Added spark icon in VS Code activity bar that lists all Claude Code sessions, with sessions opening as full editors
• [VSCode] Added full markdown document view for plans in VS Code, with support for adding comments to provide feedback
• [VSCode] Added native MCP server management dialog — use /mcp in the chat panel to enable/disable servers, reconnect, and manage OAuth authentication without switching to the terminal

v2.1.69

Compare Source

• Added the /claude-api skill for building applications with the Claude API and Anthropic SDK
• Added Ctrl+U on an empty bash prompt (!) to exit bash mode, matching escape and backspace
• Added numeric keypad support for selecting options in Claude's interview questions (previously only the number row above QWERTY worked)
• Added optional name argument to /remote-control and claude remote-control (/remote-control My Project or --name "My Project") to set a custom session title visible in claude.ai/code
• Added Voice STT support for 10 new languages (20 total) — Russian, Polish, Turkish, Dutch, Ukrainian, Greek, Czech, Danish, Swedish, Norwegian
• Added effort level display (e.g., "with low effort") to the logo and spinner, making it easier to see which effort setting is active
• Added agent name display in terminal title when using claude --agent
• Added sandbox.enableWeakerNetworkIsolation setting (macOS only) to allow Go programs like gh, gcloud, and terraform to verify TLS certificates when using a custom MITM proxy with httpProxyPort
• Added includeGitInstructions setting (and CLAUDE_CODE_DISABLE_GIT_INSTRUCTIONS env var) to remove built-in commit and PR workflow instructions from Claude's system prompt
• Added /reload-plugins command to activate pending plugin changes without restarting
• Added a one-time startup prompt suggesting Claude Code Desktop on macOS and Windows (max 3 showings, dismissible)
• Added ${CLAUDE_SKILL_DIR} variable for skills to reference their own directory in SKILL.md content
• Added InstructionsLoaded hook event that fires when CLAUDE.md or .claude/rules/*.md files are loaded into context
• Added agent_id (for subagents) and agent_type (for subagents and --agent) to hook events
• Added worktree field to status line hook commands with name, path, branch, and original repo directory when running in a --worktree session
• Added pluginTrustMessage in managed settings to append organization-specific context to the plugin trust warning shown before installation
• Added policy limit fetching (e.g., remote control restrictions) for Team plan OAuth users, not just Enterprise
• Added pathPattern to strictKnownMarketplaces for regex-matching file/directory marketplace sources alongside hostPattern restrictions
• Added plugin source type git-subdir to point to a subdirectory within a git repo
• Added oauth.authServerMetadataUrl config option for MCP servers to specify a custom OAuth metadata discovery URL when standard discovery fails
• Fixed a security issue where nested skill discovery could load skills from gitignored directories like node_modules
• Fixed trust dialog silently enabling all .mcp.json servers on first run. You'll now see the per-server approval dialog as expected
• Fixed claude remote-control crashing immediately on npm installs with "bad option: --sdk-url" (#​28334)
• Fixed --model claude-opus-4-0 and --model claude-opus-4-1 resolving to deprecated Opus versions instead of current
• Fixed macOS keychain corruption when using multiple OAuth MCP servers. Large OAuth metadata blobs could overflow the security -i stdin buffer, silently leaving stale credentials behind and causing repeated /login prompts.
• Fixed .credentials.json losing subscriptionType (showing "Claude API" instead of "Claude Pro"/"Claude Max") when the profile endpoint transiently fails during token refresh (#​30185)
• Fixed ghost dotfiles (.bashrc, HEAD, etc.) appearing as untracked files in the working directory after sandboxed Bash commands on Linux
• Fixed Shift+Enter printing [27;2;13~ instead of inserting a newline in Ghostty over SSH
• Fixed stash (Ctrl+S) being cleared when submitting a message while Claude is working
• Fixed ctrl+o (transcript toggle) freezing for many seconds in long sessions with lots of file edits
• Fixed plan mode feedback input not supporting multi-line text entry (backslash+Enter and Shift+Enter now insert newlines)
• Fixed cursor not moving down into blank lines at the top of the input box
• Fixed /stats crash when transcript files contain entries with missing or malformed timestamps
• Fixed a brief hang after a streaming error on long sessions (the transcript was being fully rewritten to drop one line; it is now truncated in place)
• Fixed --setting-sources user not blocking dynamically discovered project skills
• Fixed duplicate CLAUDE.md, slash commands, agents, and rules when running from a worktree nested inside its main repo (e.g. claude -w)
• Fixed plugin Stop/SessionEnd/etc hooks not firing after any /plugin operation
• Fixed plugin hooks being silently dropped when two plugins use the same ${CLAUDE_PLUGIN_ROOT}/... command template
• Fixed memory leak in long-running SDK/CCR sessions where conversation messages were retained unnecessarily
• Fixed API 400 errors in forked agents (autocompact, summarization) when resuming sessions that were interrupted mid-tool-batch
• Fixed "unexpected tool_use_id found in tool_result blocks" error when resuming conversations that start with an orphaned tool result
• Fixed teammates accidentally spawning nested teammates via the Agent tool's name parameter
• Fixed CLAUDE_CODE_MAX_OUTPUT_TOKENS being ignored during conversation compaction
• Fixed /compact summary rendering as a user bubble in SDK consumers (Claude Code Remote web UI, VSCode extension)
• Fixed voice space bar getting stuck after a failed voice activation (module loading race, cold GrowthBook)
• Fixed worktree file copy on Windows
• Fixed global .claude folder detection on Windows
• Fixed symlink bypass where writing new files through a symlinked parent directory could escape the working directory in acceptEdits mode
• Fixed sandbox prompting users to approve non-allowed domains when allowManagedDomainsOnly is enabled in managed settings — non-allowed domains are now blocked automatically with no bypass
• Fixed interactive tools (e.g., AskUserQuestion) being silently auto-allowed when listed in a skill's allowed-tools, bypassing the permission prompt and running with empty answers
• Fixed multi-GB memory spike when committing with large untracked binary files in the working tree
• Fixed Escape not interrupting a running turn when the input box has draft text. Use Up arrow to pull queued messages back for editing, or Ctrl+U to clear the input line.
• Fixed Android app crash when running local slash commands (/voice, /cost) in Remote Control sessions
• Fixed a memory leak where old message array versions accumulated in React Compiler memoCache over long sessions
• Fixed a memory leak where REPL render scopes accumulated over long sessions (~35MB over 1000 turns)
• Fixed memory retention in in-process teammates where the parent's full conversation history was pinned for the teammate's lifetime, preventing GC after /clear or auto-compact
• Fixed a memory leak in interactive mode where hook events could accumulate unboundedly during long sessions
• Fixed hang when --mcp-config points to a corrupted file
• Fixed slow startup when many skills/plugins are installed
• Fixed cd <outside-dir> && <cmd> permission prompt to surface the chained command instead of only showing "Yes, allow reading from /"
• Fixed conditional .claude/rules/*.md files (with paths: frontmatter) and nested CLAUDE.md files not loading in print mode (claude -p)
• Fixed /clear not fully clearing all session caches, reducing memory retention in long sessions
• Fixed terminal flicker caused by animated elements at the scrollback boundary
• Fixed UI frame drops on macOS when using MCP servers with OAuth (regression from 2.1.x)
• Fixed occasional frame stalls during typing caused by synchronous debug log flushes
• Fixed TeammateIdle and TaskCompleted hooks to support {"continue": false, "stopReason": "..."} to stop the teammate, matching Stop hook behavior
• Fixed WorktreeCreate and WorktreeRemove plugin hooks being silently ignored
• Fixed skill descriptions with colons (e.g., "Triggers include: X, Y, Z") failing to load from SKILL.md frontmatter
• Fixed project skills without a description: frontmatter field not appearing in Claude's available skills list
• Fixed /context showing identical token counts for all MCP tools from a server
• Fixed literal nul file creation on Windows when the model uses CMD-style 2>nul redirection in Git Bash
• Fixed extra blank lines appearing below each tool call in the expanded subagent transcript view (Ctrl+O)
• Fixed Tab/arrow keys not cycling Settings tabs when /config search box is focused but empty
• Fixed service key OAuth sessions (CCR containers) spamming [ERROR] logs with 403s from profile-scoped endpoints
• Fixed inconsistent color for "Remote Control active" status indicator
• Fixed Voice waveform cursor covering the first suffix letter when dictating mid-input
• Fixed Voice input showing all 5 spaces during warmup instead of capping at ~2 (aligning with the "keep holding…" hint)
• Improved spinner performance by isolating the 50ms animation loop from the surrounding shell, reducing render and CPU overhead during turns
• Improved UI rendering performance in native binaries with React Compiler
• Improved --worktree startup by eliminating a git subprocess on the startup path
• Improved macOS startup by eliminating redundant settings-file reloads when managed settings resolve
• Improved macOS startup for Claude.ai enterprise/team users by skipping an unnecessary keychain lookup
• Improved MCP -p startup by pipelining claude.ai config fetch with local connections and using a concurrency pool instead of sequential batching
• Improved voice startup by removing imperceptible warmup pulse animations that were causing re-render stutter
• Improved MCP binary content handling: tools returning PDFs, Office documents, or audio now save decoded bytes to disk with the correct file extension instead of dumping raw base64 into the conversation context. WebFetch also saves binary responses alongside its summary.
• Improved memory usage in long sessions by stabilizing onSubmit across message updates
• Improved LSP tool rendering and memory context building to no longer read entire files
• Improved session upload and memory sync to avoid reading large files into memory before size/binary checks
• Improved file operation performance by avoiding reading file contents for existence checks (6 sites)
• Improved documentation to clarify that --append-system-prompt-file and --system-prompt-file work in interactive mode (the docs previously said print mode only)
• Reduced baseline memory by ~16MB by deferring Yoga WASM preloading
• Reduced memory footprint for SDK and CCR sessions using stream-json output
• Reduced memory usage when resuming large sessions (including compacted history)
• Reduced token usage on multi-agent tasks with more concise subagent final reports
• Changed Sonnet 4.5 users on Pro/Max/Team Premium to be automatically migrated to Sonnet 4.6
• Changed the /resume picker to show your most recent prompt instead of the first one. This also resolves some titles appearing as (session).
• Changed claude.ai MCP connector failures to show a notification instead of silently disappearing from the tool list
• Changed example command suggestions to be generated deterministically instead of calling Haiku
• Changed resuming after compaction to no longer produce a preamble recap before continuing
• [SDK] Changed task creation to no longer require the activeForm field — the spinner falls back to the task subject
• [VSCode] Added compaction display as a collapsible "Compacted chat" card with the summary inside
• [VSCode] The permission mode picker now respects permissions.disableBypassPermissionsMode from your effective Claude Code settings (including managed/policy settings) — when set to disable, bypass permissions mode is hidden from the picker
• [VSCode] Fixed RTL text (Arabic, Hebrew, Persian) rendering reversed in the chat panel (regression in v2.1.63)

v2.1.68

Compare Source

• Opus 4.6 now defaults to medium effort for Max and Team subscribers. Medium effort works well for most tasks — it's the sweet spot between speed and thoroughness. You can change this anytime with /model
• Re-introduced the "ultrathink" keyword to enable high effort for the next turn
• Removed Opus 4 and 4.1 from Claude Code on the first-party API — users with these models pinned are automatically moved to Opus 4.6

v2.1.67

Compare Source

v2.1.66

Compare Source

• Reduced spurious error logging

v2.1.64

Compare Source

v2.1.63

Compare Source

• Added /simplify and /batch bundled slash commands
• Fixed local slash command output like /cost appearing as user-sent messages instead of system messages in the UI
• Project configs & auto memory now shared across git worktrees of the same repository
• Added ENABLE_CLAUDEAI_MCP_SERVERS=false env var to opt out from making claude.ai MCP servers available
• Improved /model command to show the currently active model in the slash command menu
• Added HTTP hooks, which can POST JSON to a URL and receive JSON instead of running a shell command
• Fixed listener leak in bridge polling loop
• Fixed listener leak in MCP OAuth flow cleanup
• Added manual URL paste fallback during MCP OAuth authentication. If the automatic localhost redirect doesn't work, you can paste the callback URL to complete authentication.
• Fixed memory leak when navigating hooks configuration menu
• Fixed listener leak in interactive permission handler during auto-approvals
• Fixed file count cache ignoring glob ignore patterns
• Fixed memory leak in bash command prefix cache
• Fixed MCP tool/resource cache leak on server reconnect
• Fixed IDE host IP detection cache incorrectly sharing results across ports
• Fixed WebSocket listener leak on transport reconnect
• Fixed memory leak in git root detection cache that could cause unbounded growth in long-running sessions
• Fixed memory leak in JSON parsing cache that grew unbounded over long sessions
• VSCode: Fixed remote sessions not appearing in conversation history
• Fixed a race condition in the REPL bridge where new messages could arrive at the server interleaved with historical messages during the initial connection flush, causing message ordering issues.
• Fixed memory leak where long-running teammates retained all messages in AppState even after conversation compaction
• Fixed a memory leak where MCP server fetch caches were not cleared on disconnect, causing growing memory usage with servers that reconnect frequently
• Improved memory usage in long sessions with subagents by stripping heavy progress message payloads during context compaction
• Added "Always copy full response" option to the /copy picker. When selected, future /copy commands will skip the code block picker and copy the full response directly.
• VSCode: Added session rename and remove actions to the sessions list
• Fixed /clear not resetting cached skills, which could cause stale skill content to persist in the new conversation

v2.1.62

Compare Source

• Fixed prompt suggestion cache regression that reduced cache hit rates

v2.1.61

Compare Source

• Fixed concurrent writes corrupting config file on Windows

v2.1.59

Compare Source

• Claude automatically saves useful context to auto-memory. Manage with /memory
• Added /copy command to show an interactive picker when code blocks are present, allowing selection of individual code blocks or the full response.
• Improved "always allow" prefix suggestions for compound bash commands (e.g. cd /tmp && git fetch && git push) to compute smarter per-subcommand prefixes instead of treating the whole command as one
• Improved ordering of short task lists
• Improved memory usage in multi-agent sessions by releasing completed subagent task state
• Fixed MCP OAuth token refresh race condition when running multiple Claude Code instances simultaneously
• Fixed shell commands not showing a clear error message when the working directory has been deleted
• Fixed config file corruption that could wipe authentication when multiple Claude Code instances ran simultaneously

v2.1.58

Compare Source

• Expand Remote Control to more users

v2.1.56

Compare Source

• VS Code: Fixed another cause of "command 'claude-vscode.editor.openLast' not found" crashes

v2.1.55

Compare Source

• Fixed BashTool failing on Windows with EINVAL error

v2.1.54

Compare Source

v2.1.53

Compare Source

• Fixed a UI flicker where user input would briefly disappear after submission before the message rendered
• Fixed bulk agent kill (ctrl+f) to send a single aggregate notification instead of one per agent, and to properly clear the command queue
• Fixed graceful shutdown sometimes leaving stale sessions when using Remote Control by parallelizing teardown network calls
• Fixed --worktree sometimes being ignored on first launch
• Fixed a panic ("switch on corrupted value") on Windows
• Fixed a crash that could occur when spawning many processes on Windows
• Fixed a crash in the WebAssembly interpreter on Linux x64 & Windows x64
• Fixed a crash that sometimes occurred after 2 minutes on Windows ARM64

v2.1.52

Compare Source

• VS Code: Fixed extension crash on Windows ("command 'claude-vscode.editor.openLast' not found")

v2.1.51

Compare Source

• Added claude remote-control subcommand for external builds, enabling local environment serving for all users.
• Updated plugin marketplace default git timeout from 30s to 120s and added CLAUDE_CODE_PLUGIN_GIT_TIMEOUT_MS to configure.
• Added support for custom npm registries and specific version pinning when installing plugins from npm sources
• BashTool now skips login shell (-l flag) by default when a shell snapshot is available, improving command execution performance. Previously this required setting CLAUDE_BASH_NO_LOGIN=true.
• Fixed a security issue where statusLine and fileSuggestion hook commands could execute without workspace trust acceptance in interactive mode.
• Tool results larger than 50K characters are now persisted to disk (previously 100K). This reduces context window usage and improves conversation longevity.
• Fixed a bug where duplicate control_response messages (e.g. from WebSocket reconnects) could cause API 400 errors by pushing duplicate assistant messages into the conversation.
• Added CLAUDE_CODE_ACCOUNT_UUID, CLAUDE_CODE_USER_EMAIL, and CLAUDE_CODE_ORGANIZATION_UUID environment variables for SDK callers to provide account info synchronously, eliminating a race condition where early telemetry events lacked account metadata.
• Fixed slash command autocomplete crashing when a plugin's SKILL.md description is a YAML array or other non-string type
• The /model picker now shows human-readable labels (e.g., "Sonnet 4.5") instead of raw model IDs for pinned model versions, with an upgrade hint when a newer version is available.
• Managed settings can now be set via macOS plist or Windows Registry. Learn more at https://code.claude.com/docs/en/settings#settings-files

v2.1.50

Compare Source

• Added support for startupTimeout configuration for LSP servers
• Added WorktreeCreate and WorktreeRemove hook events, enabling custom VCS setup and teardown when agent worktree isolation creates or removes worktrees.
• Fixed a bug where resumed sessions could be invisible when the working directory involved symlinks, because the session storage path was resolved at different times during startup. Also fixed session data loss on SSH disconnect by flushing session data before hooks and analytics in the graceful shutdown sequence.
• Linux: Fixed native modules not loading on systems with glibc older than 2.30 (e.g., RHEL 8)
• Fixed memory leak in agent teams where completed teammate tasks were never garbage collected from session state
• Fixed CLAUDE_CODE_SIMPLE to fully strip down skills, session memory, custom agents, and CLAUDE.md token counting
• Fixed /mcp reconnect freezing the CLI when given a server name that doesn't exist
• Fixed memory leak where completed task state objects were never removed from AppState
• Added support for isolation: worktree in agent definitions, allowing agents to declaratively run in isolated git worktrees.
• CLAUDE_CODE_SIMPLE mode now also disables MCP tools, attachments, hooks, and CLAUDE.md file loading for a fully minimal experience.
• Fixed bug where MCP tools were not discovered when tool search is enabled and a prompt is passed in as a launch argument
• Improved memory usage during long sessions by clearing internal caches after compaction
• Added claude agents CLI command to list all configured agents
• Improved memory usage during long sessions by clearing large tool results after they have been processed
• Fixed a memory leak where LSP diagnostic data was never cleaned up after delivery, causing unbounded memory growth in long sessions
• Fixed a memory leak where completed task output was not freed from memory, reducing memory usage in long sessions with many tasks
• Improved startup performance for headless mode (-p flag) by deferring Yoga WASM and UI component imports
• Fixed prompt suggestion cache regression that reduced cache hit rates
• Fixed unbounded memory growth in long sessions by capping file history snapshots
• Added CLAUDE_CODE_DISABLE_1M_CONTEXT environment variable to disable 1M context window support
• Opus 4.6 (fast mode) now includes the full 1M context window
• VSCode: Added /extra-usage command support in VS Code sessions
• Fixed memory leak where TaskOutput retained recent lines after cleanup
• Fixed memory leak in CircularBuffer where cleared items were retained in the backing array
• Fixed memory leak in shell command execution where ChildProcess and AbortController references were retained after cleanup

v2.1.49

Compare Source

• Improved MCP OAuth authentication with step-up auth support and discovery caching, reducing redundant network requests during server connections
• Added --worktree (-w) flag to start Claude in an isolated git worktree
• Subagents support isolation: "worktree" for working in a temporary git worktree
• Added Ctrl+F keybinding to kill background agents (two-press confirmation)
• Agent definitions support background: true to always run as a background task
• Plugins can ship settings.json for default configuration
• Fixed file-not-found errors to suggest corrected paths when the model drops the repo folder
• Fixed Ctrl+C and ESC being silently ignored when background agents are running and the main thread is idle. Pressing twice within 3 seconds now kills all background agents.
• Fixed prompt suggestion cache regression that reduced cache hit rates.
• Fixed plugin enable and plugin disable to auto-detect the correct scope when --scope is not specified, instead of always defaulting to user scope
• Simple mode (CLAUDE_CODE_SIMPLE) now includes the file edit tool in addition to the Bash tool, allowing direct file editing in simple mode.
• Permission suggestions are now populated when safety checks trigger an ask response, enabling SDK consumers to display permission options
• Sonnet 4.5 with 1M context is being removed from the Max plan in favor of our frontier Sonnet 4.6 model, which now has 1M context. Please switch in /model.
• Fixed verbose mode not updating thinking block display when toggled via /config — memo comparators now correctly detect verbose changes
• Fixed unbounded WASM memory growth during long sessions by periodically resetting the tree-sitter parser
• Fixed potential rendering issues caused by stale yoga layout references
• Improved performance in non-interactive mode (-p) by skipping unnecessary API calls during startup
• Improved performance by caching authentication failures for HTTP and SSE MCP servers, avoiding repeated connection attempts to servers requiring auth
• Fixed unbounded memory growth during long-running sessions caused by Yoga WASM linear memory never shrinking
• SDK model info now includes supportsEffort, supportedEffortLevels, and supportsAdaptiveThinking fields so consumers can discover model capabilities.
• Added ConfigChange hook event that fires when configuration files change during a session, enabling enterprise security auditing and optional blocking of settings changes.
• Improved startup performance by caching MCP auth failures to avoid redundant connection attempts
• Improved startup performance by reducing HTTP calls for analytics token counting
• Improved startup performance by batching MCP tool token counting into a single API call
• Fixed disableAllHooks setting to respect managed settings hierarchy — non-managed settings can no longer disable managed hooks set by policy (#​26637)
• Fixed --resume session picker showing raw XML tags for sessions that start with commands like /clear. Now correctly falls through to the session ID fallback.
• Improved permission prompts for path safety and working directory blocks to show the reason for the restriction instead of a bare prompt with no context

v2.1.48

Compare Source

v2.1.47

Compare Source

• Fixed FileWriteTool line counting to preserve intentional trailing blank lines instead of stripping them with trimEnd().
• Fixed Windows terminal rendering bugs caused by os.EOL (\r\n) in display code — line counts now show correct values instead of always showing 1 on Windows.
• Improved VS Code plan preview: auto-updates as Claude iterates, enables commenting only when the plan is ready for review, and keeps the preview open when rejecting so Claude can revise.
• Fixed a bug where bold and colored text in markdown output could shift to the wrong characters on Windows due to \r\n line endings.
• Fixed compaction failing when conversation contains many PDF documents by stripping document blocks alongside images before sending to the compaction API (#​26188)
• Improved memory usage in long-running sessions by releasing API stream buffers, agent context, and skill state after use
• Improved startup performance by deferring SessionStart hook execution, reducing time-to-interactive by ~500ms.
• Fixed an issue where bash tool output was silently discarded on Windows when using MSYS2 or Cygwin shells.
• Improved performance of @ file mentions - file suggestions now appear faster by pre-warming the index on startup and using session-based caching with background refresh.
• Improved memory usage by trimming agent task message history after tasks complete
• Improved memory usage during long agent sessions by eliminating O(n²) message accumulation in progress updates
• Fixed the bash permission classifier to validate that returned match descriptions correspond to actual input rules, preventing hallucinated descriptions from incorrectly granting permissions
• Fixed user-defined agents only loading one file on NFS/FUSE filesystems that report zero inodes (#​26044)
• Fixed plugin agent skills silently failing to load when referenced by bare name instead of fully-qualified plugin name (#​25834)
• Search patterns in collapsed tool results are now displayed in quotes for clarity
• Windows: Fixed CWD tracking temp files never being cleaned up, causing them to accumulate indefinitely (#​17600)
• Use ctrl+f to kill all background agents instead of double-pressing ESC. Background agents now continue running when you press ESC to cancel the main thread, giving you more control over agent lifecycle.
• Fixed API 400 errors ("thinking blocks cannot be modified") that occurred in sessions with concurrent agents, caused by interleaved streaming content blocks preventing proper message merging.
• Simplified teammate navigation to use only Shift+Down (with wrapping) instead of both Shift+Up and Shift+Down.
• Fixed an issue where a single file write/edit error would abort all other parallel file write/edit operations. Independent file mutations now complete even when a sibling fails.
• Added last_assistant_message field to Stop and SubagentStop hook inputs, providing the final assistant response text so hooks can access it without parsing transcript files.
• Fixed custom session titles set via /rename being lost after resuming a conversation (#​23610)
• Fixed collapsed read/search hint text overflowing on narrow terminals by truncating from the start.
• Fixed an issue where bash commands with backslash-newline continuation lines (e.g., long commands split across multiple lines with \) would produce spurious empty arguments, potentially breaking command execution.
• Fixed built-in slash commands (/help, /model, /compact, etc.) being hidden from the autocomplete dropdown when many user skills are installed (#​22020)
• Fixed MCP servers not appearing in the MCP Management Dialog after deferred loading
• Fixed session name persisting in status bar after /clear command (#​26082)
• Fixed crash when a skill's name or description in SKILL.md frontmatter is a bare number (e.g., name: 3000) — the value is now properly coerced to a string (#​25837)
• Fixed /resume silently dropping sessions when the first message exceeds 16KB or uses array-format content (#​25721)
• Added chat:newline keybinding action for configurable multi-line input (#​26075)
• Added added_dirs to the statusline JSON workspace section, exposing directories added via /add-dir to external scripts (#​26096)
• Fixed claude doctor misclassifying mise and asdf-managed installations as native installs (#​26033)
• Fixed zsh heredoc failing with "read-only file system" error in sandboxed commands (#​25990)
• Fixed agent progress indicator showing inflated tool use count (#​26023)
• Fixed image pasting not working on WSL2 systems where Windows copies images as BMP format (#​25935)
• Fixed background agent results returning raw transcript data instead of the agent's final answer (#​26012)
• Fixed Warp terminal incorrectly prompting for Shift+Enter setup when it supports it natively (#​25957)
• Fixed CJK wide characters causing misaligned timestamps and layout elements in the TUI (#​26084)
• Fixed custom agent model field in .claude/agents/*.md being ignored when spawning team teammates (#​26064)
• Fixed plan mode being lost after context compaction, causing the model to switch from planning to implementation mode (#​26061)
• Fixed alwaysThinkingEnabled: true in settings.json not enabling thinking mode on Bedrock and Vertex providers (#​26074)
• Fixed tool_decision OTel telemetry event not being emitted in headless/SDK mode (#​26059)
• Fixed session name being lost after context compaction — renamed sessions now preserve their custom title through compaction (#​26121)
• Increased initial session count in resume picker from 10 to 50 for faster session discovery (#​26123)
• Windows: fixed worktree session matching when drive letter casing differs ([#​26123](https://redirect.github.com/anthropics/claude-code/iss

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud