This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
ReleasePort's take
Light signalPlugins placed in ".claude/skills" directories are now automatically loaded without needing marketplace approval.
Why it matters: Enables developers to deploy custom plugins instantly; removes the prior marketplace gating step, streamlining integration for all teams.
Summary
AI summaryPlugins in .claude/skills are now automatically loaded, removing marketplace requirement.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Plugins in ".claude/skills" directories are now automatically loaded without marketplace requirement Plugins in ".claude/skills" directories are now automatically loaded without marketplace requirement Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Added "claude plugin init <name>" command to scaffold new plugins in ".claude/skills" Added "claude plugin init <name>" command to scaffold new plugins in ".claude/skills" Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Autocomplete for "/plugin" arguments now supports subcommands, installed plugins, and marketplace plugins Autocomplete for "/plugin" arguments now supports subcommands, installed plugins, and marketplace plugins Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
`claude agents` honors "agent" field in settings.json for dispatched sessions, with `--agent <name>` override `claude agents` honors "agent" field in settings.json for dispatched sessions, with `--agent <name>` override Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
`EnterWorktree` can now switch between Claude‑managed worktrees mid‑session `EnterWorktree` can now switch between Claude‑managed worktrees mid‑session Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
`tool_decision` telemetry now includes `tool_parameters` when OTEL_LOG_TOOL_DETAILS=1 `tool_decision` telemetry now includes `tool_parameters` when OTEL_LOG_TOOL_DETAILS=1 Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Claude‑managed worktrees are left unlocked after agent finishes, allowing `git worktree remove`/`prune` cleanup Claude‑managed worktrees are left unlocked after agent finishes, allowing `git worktree remove`/`prune` cleanup Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
WSL now supports image paste (Alt+V), Windows 11 screenshot paste, and dragging images from Explorer WSL now supports image paste (Alt+V), Windows 11 screenshot paste, and dragging images from Explorer Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Feature | Low |
/terminal-setup disables GPU acceleration in VS Code/Cursor/Windsurf terminals to prevent garbled text /terminal-setup disables GPU acceleration in VS Code/Cursor/Windsurf terminals to prevent garbled text Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Feature | Low |
Feature of the Week credit‑claim status now appears as a notification instead of a prompt line Feature of the Week credit‑claim status now appears as a notification instead of a prompt line Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Feature | Low |
/plugin slash‑command autocomplete now matches substrings /plugin slash‑command autocomplete now matches substrings Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Performance | Low |
Improved performance of long and resumed conversations by eliminating redundant message‑rendering recomputations Improved performance of long and resumed conversations by eliminating redundant message‑rendering recomputations Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Deprecation | Low |
Removed the "bash commands will be sandboxed" startup banner; status still shown in /status and on block events Removed the "bash commands will be sandboxed" startup banner; status still shown in /status and on block events Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Deprecation | Low |
Removed the "/ide for …" startup hint toast Removed the "/ide for …" startup hint toast Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Bugfix | Medium |
Fixed unprocessable images (zero‑byte, corrupt) attached via paste/MCP/dialog from crashing the request Fixed unprocessable images (zero‑byte, corrupt) attached via paste/MCP/dialog from crashing the request Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Fixed sandbox network permission prompts appearing in auto/bypass‑permissions mode across desktop, IDE extensions, and SDK Fixed sandbox network permission prompts appearing in auto/bypass‑permissions mode across desktop, IDE extensions, and SDK Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Fixed `claude agents` completed sessions not retiring when an idle subagent was parked or had leaked a background shell Fixed `claude agents` completed sessions not retiring when an idle subagent was parked or had leaked a background shell Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Low |
Fixed background agent worktrees under ".claude/worktrees/" being orphaned after the 30‑day retention sweep Fixed background agent worktrees under ".claude/worktrees/" being orphaned after the 30‑day retention sweep Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Bugfix | Low |
Fixed background sessions re‑attached after sleep/wake not receiving the correct date Fixed background sessions re‑attached after sleep/wake not receiving the correct date Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Bugfix | Low |
Fixed copy‑on‑select in `claude agents` not reaching clipboard inside tmux with `set-clipboard on` Fixed copy‑on‑select in `claude agents` not reaching clipboard inside tmux with `set-clipboard on` Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Bugfix | Low |
Fixed `--resume` not reporting background subagents that were running when the previous Claude Code process exited Fixed `--resume` not reporting background subagents that were running when the previous Claude Code process exited Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Bugfix | Low |
Fixed the `--resume` session picker leaving contents on terminal after exiting fullscreen mode Fixed the `--resume` session picker leaving contents on terminal after exiting fullscreen mode Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Bugfix | Low |
Fixed `--worktree` and `--worktree --tmux` returning to repo root instead of current linked worktree Fixed `--worktree` and `--worktree --tmux` returning to repo root instead of current linked worktree Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Bugfix | Low |
/model picker no longer shows incorrect "Newer version available" hint; pinned‑model row displays description /model picker no longer shows incorrect "Newer version available" hint; pinned‑model row displays description Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Bugfix | Low |
Fixed literal markdown markers appearing in in‑progress message text in fullscreen mode Fixed literal markdown markers appearing in in‑progress message text in fullscreen mode Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Bugfix | Low |
Fixed terminal freezing after approving the managed‑settings security dialog at startup Fixed terminal freezing after approving the managed‑settings security dialog at startup Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Bugfix | Low |
Fixed rare duplicate line appearing in scrollback after terminal redraw Fixed rare duplicate line appearing in scrollback after terminal redraw Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Bugfix | Low |
Fixed right‑click paste duplicating clipboard in VS Code, Cursor, and Windsurf integrated terminals Fixed right‑click paste duplicating clipboard in VS Code, Cursor, and Windsurf integrated terminals Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
| Bugfix | Low |
Fixed clicking Stop while a background subagent runs not actually stopping it (IDE) Fixed clicking Stop while a background subagent runs not actually stopping it (IDE) Source: granite4.1:30b@2026-05-29-audit Confidence: low |
— |
Full changelog
What's changed
- Plugins in
.claude/skillsdirectories are now automatically loaded, no marketplace required - Added
claude plugin init <name>to scaffold a new plugin in.claude/skills - Added autocomplete for
/pluginarguments: subcommands, installed plugin names, and plugins from known marketplaces claude agents: theagentfield insettings.jsonis now honored for dispatched sessions, with--agent <name>to override itEnterWorktreecan now switch between Claude-managed worktrees mid-sessiontool_decisiontelemetry events now includetool_parameters(bash commands, MCP/skill names) whenOTEL_LOG_TOOL_DETAILS=1- Worktrees managed by Claude are now left unlocked when the agent finishes, so
git worktree remove/prunecan clean them up - Fixed unprocessable images (zero-byte, corrupt) attached via paste, MCP, or dialog crashing the request instead of becoming a text placeholder
- Fixed sandbox network permission prompts appearing in auto and bypass-permissions mode when using the desktop app, IDE extensions, or SDK
- Fixed
claude agentscompleted sessions not retiring when an idle subagent was still parked or had leaked a backgrounded shell - Fixed
claude agentspressing Esc not cancelling a slow "opening…", leaving the list unresponsive - Fixed background agent worktrees under
.claude/worktrees/being orphaned after the 30-day job retention sweep - Fixed background sessions re-attached after a sleep/wake not telling the model the correct date
- Fixed copy-on-select in
claude agentsnot reaching the system clipboard inside tmux withset-clipboard on(regression in 2.1.153) - Fixed
--resumenot reporting background subagents that were running when the previous Claude Code process exited - Fixed the
--resumesession picker leaving its contents on the terminal after exiting in fullscreen mode - Fixed
--worktreeand--worktree --tmuxreturning to the canonical repo root instead of the current linked worktree - Fixed the
/modelpicker showing an incorrect "Newer version available" hint when the selected model is already the newest in its family; the pinned-model row now shows the model's description instead of its raw ID - Fixed literal markdown markers (backticks, asterisks) appearing in the in-progress message text in fullscreen mode
- Fixed the terminal freezing after approving the managed-settings security dialog at startup
- Fixed a rare duplicate line appearing in scrollback after the terminal UI redraws
- Fixed right-click paste duplicating the clipboard in the VS Code, Cursor, and Windsurf integrated terminals
- WSL: fixed image paste (
alt+vkeybinding), screenshot paste on Windows 11, and added support for dragging images from Windows Explorer - Improved performance of long and resumed conversations by eliminating redundant message-rendering recomputations
/terminal-setupnow disables GPU acceleration in VS Code/Cursor/Windsurf integrated terminals to prevent garbled-text rendering- The Feature of the Week credit-claim status now appears as a notification in the status area instead of a line above the prompt
claude agents: slash-command autocomplete in the dispatch input now matches substrings- Removed the "bash commands will be sandboxed" startup banner — sandbox status still shows in
/statusand when a command is blocked - Removed the "/ide for …" startup hint toast
- [IDE] Fixed clicking Stop while a background subagent is running not actually stopping it
- [VSCode] Fixed the fast mode indicator not appearing on Opus 4.8
- Pressing backspace right after a workflow trigger keyword now dismisses the workflow request (same as alt+w) instead of deleting a character
- Added a "Workflow keyword trigger" setting in /config to stop the word "workflow" in a prompt from triggering a dynamic workflow
Breaking Changes
- Removed the "bash commands will be sandboxed" startup banner; sandbox status now only shown in `/status` or when a command is blocked.
- Removed the "/ide for …" startup hint toast.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About claude-code
All releases →Related context
Related tools
Earlier breaking changes
- v2.1.160 Renames dynamic‑workflow trigger keyword from `workflow` to `ultracode`; `workflow` no longer triggers a run
- v2.1.160 Deprecates and removes the `CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE` environment variable; it is now a no‑op
- v2.1.147 Renames /simplify to /code-review; removes cleanup-and-fix behavior.
Beta — feedback welcome: [email protected]