claude-code

v2.1.175 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 1mo Developer Productivity

✓ No known CVEs patched

✓ No known CVEs patched in this version

Affected surfaces

rbac

Summary

AI summary

Added enforceAvailableModels setting to constrain the default model based on an allowlist.

Type	Severity	Summary	CVE
Feature	Medium	Adds enforceAvailableModels managed setting constraining Default model selection Adds enforceAvailableModels managed setting constraining Default model selection Source: llm_adapter@2026-06-12 Confidence: high	—

Full changelog

Added enforceAvailableModels managed setting — when enabled, the availableModels allowlist also constrains the Default model (a Default that would resolve to a disallowed model now falls back to the first allowed model), and user or project settings can no longer widen a managed availableModels list

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track claude-code

Get notified when new releases ship.

About claude-code

v2.1.215 Claude no longer automatically runs /verify and /code-review skills
v2.1.160 Renames dynamic‑workflow trigger keyword from `workflow` to `ultracode`; `workflow` no longer triggers a run
v2.1.160 Deprecates and removes the `CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE` environment variable; it is now a no‑op
v2.1.147 Renames /simplify to /code-review; removes cleanup-and-fix behavior.