This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Summary
AI summaryFixed Remote Control disconnect notifications to display human‑readable reasons instead of numeric codes.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds `footerLinksRegexes` setting for regex‑matched link badges in the footer row, configurable via user or managed settings. Adds `footerLinksRegexes` setting for regex‑matched link badges in the footer row, configurable via user or managed settings. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Feature | Low |
Generates session titles in the conversation's language; `language` setting can pin a specific language. Generates session titles in the conversation's language; `language` setting can pin a specific language. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Feature | Low |
Provides clearer guidance when a window left open across an auto‑update cannot submit a reply, and `claude daemon status` explains version‑skew behavior. Provides clearer guidance when a window left open across an auto‑update cannot submit a reply, and `claude daemon status` explains version‑skew behavior. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Performance | Low |
Improves Bedrock credential caching: credentials from `awsCredentialExport` are cached until their expiration instead of a fixed 1 hour. Improves Bedrock credential caching: credentials from `awsCredentialExport` are cached until their expiration instead of a fixed 1 hour. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes hook if conditions for Read/Edit/Write tool paths to match documented patterns. Fixes hook if conditions for Read/Edit/Write tool paths to match documented patterns. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Fixes Linux sandbox startup failure when `.claude/settings.json` is a symlink with an absolute target. Fixes Linux sandbox startup failure when `.claude/settings.json` is a symlink with an absolute target. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Fixes copy and mouse-selection clipboard issues inside tmux over SSH, and loads tmux paste buffer on versions older than 3.2. Fixes copy and mouse-selection clipboard issues inside tmux over SSH, and loads tmux paste buffer on versions older than 3.2. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Fixes Remote Control disconnect notifications to show human‑readable reasons instead of numeric codes, and prevents duplicate transcript lines on connection failures. Fixes Remote Control disconnect notifications to show human‑readable reasons instead of numeric codes, and prevents duplicate transcript lines on connection failures. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Fixes backgrounded sessions stuck displaying "Working" forever after `/bg` mid‑turn with no remaining work. Fixes backgrounded sessions stuck displaying "Working" forever after `/bg` mid‑turn with no remaining work. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Fixes `claude agents` so pressing back in one window no longer detaches other windows attached to the same session. Fixes `claude agents` so pressing back in one window no longer detaches other windows attached to the same session. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Fixes background sessions to neutralize Windows network paths in persisted state before respawn. Fixes background sessions to neutralize Windows network paths in persisted state before respawn. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Fixes Remote Control connecting from web/mobile silently switching the session's model. Fixes Remote Control connecting from web/mobile silently switching the session's model. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Fixes Remote Control sessions not disconnecting when signing in to a different account. Fixes Remote Control sessions not disconnecting when signing in to a different account. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
Prevents `availableModels` enforcement bypass via `ANTHROPIC_DEFAULT_*_MODEL` environment variables and blocks `/fast` model switches outside the allowlist. Prevents `availableModels` enforcement bypass via `ANTHROPIC_DEFAULT_*_MODEL` environment variables and blocks `/fast` model switches outside the allowlist. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Low |
Fixes auto mode failure on Fable 5 for organizations without Opus 4.8 by falling back to the best available Opus model. Fixes auto mode failure on Fable 5 for organizations without Opus 4.8 by falling back to the best available Opus model. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Low |
Corrects `/cd` and worktree moves so the session reports the current git branch instead of the previous one. Corrects `/cd` and worktree moves so the session reports the current git branch instead of the previous one. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Low |
Makes `claude agents` search include PRs opened during scheduled wakeups or while a job was blocked. Makes `claude agents` search include PRs opened during scheduled wakeups or while a job was blocked. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Low |
Restores the text cursor in the agents view input on Windows. Restores the text cursor in the agents view input on Windows. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Low |
Ensures `claude --bg -cn <name>` seeds the session name correctly. Ensures `claude --bg -cn <name>` seeds the session name correctly. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Low |
Allows background-session respawn to handle malformed resume IDs from corrupted state files gracefully. Allows background-session respawn to handle malformed resume IDs from corrupted state files gracefully. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Low |
Starts the Windows background‑service daemon even when `~/.claude/daemon` has the ReadOnly attribute set. Starts the Windows background‑service daemon even when `~/.claude/daemon` has the ReadOnly attribute set. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
| Bugfix | Low |
Resolves cloud session authentication failures after long idle periods before claim. Resolves cloud session authentication failures after long idle periods before claim. Source: granite4.1:30b@2026-06-12-audit Confidence: low |
— |
Full changelog
What's changed
- Session titles are now generated in the language of your conversation (set the
languagesetting to pin a specific language) - Added
footerLinksRegexessetting for regex-matched link badges in the footer row, configurable via user or managed settings - Improved Bedrock credential caching: credentials from
awsCredentialExportare now cached until theirExpirationinstead of a fixed 1 hour - Fixed
availableModelsenforcement: alias model picks can no longer be redirected to a blocked model viaANTHROPIC_DEFAULT_*_MODELenvironment variables, and/fastnow refuses to toggle when it would switch to a model outside the allowlist - Fixed auto mode failing on Fable 5 for organizations without Opus 4.8 enabled — the classifier now falls back to the best available Opus model
- Fixed hook
ifconditions for Read/Edit/Write tool paths: documented patterns likeEdit(src/**),Read(~/.ssh/**), andRead(.env)now match correctly - Fixed Linux sandbox failing to start when
.claude/settings.jsonis a symlink with an absolute target - Fixed
/copyand mouse-selection copy not reaching the system clipboard inside tmux over SSH, and tmux paste buffer not loading on versions older than 3.2 - Fixed Remote Control connecting from web/mobile silently switching the session's model
- Fixed Remote Control disconnect notifications showing a bare numeric code instead of a human-readable reason, and connection failures adding a duplicate line to the conversation transcript
- Fixed Remote Control sessions not disconnecting when you sign in to a different account
- Fixed
/cdand worktree moves leaving the session reporting the previous directory's git branch - Fixed
claude agents: pressing back in one window no longer detaches other windows attached to the same session - Fixed backgrounded sessions showing "Working" forever when
/bgmid-turn had nothing left to continue - Fixed background agent search by PR URL: PRs opened during scheduled wakeups or while a job was blocked now appear in
claude agentssearch - Fixed the agents view input showing no text cursor on Windows
- Fixed
claude --bg -cn <name>not seeding the session name - Fixed background sessions to neutralize Windows network paths in persisted state before respawn
- Fixed background-session respawn rejecting malformed resume IDs from corrupted state files
- Fixed the Windows background-service daemon not starting when
~/.claude/daemonhas the ReadOnly attribute set - Fixed cloud sessions failing with "Could not resolve authentication method" when idle for too long before being claimed
- Background sessions now show clearer guidance when a window left open across an auto-update can't submit a reply, and
claude daemon statusexplains version-skew behavior
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About claude-code
All releases →Related context
Earlier breaking changes
- v2.1.215 Claude no longer automatically runs /verify and /code-review skills
- v2.1.160 Renames dynamic‑workflow trigger keyword from `workflow` to `ultracode`; `workflow` no longer triggers a run
- v2.1.160 Deprecates and removes the `CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE` environment variable; it is now a no‑op
- v2.1.147 Renames /simplify to /code-review; removes cleanup-and-fix behavior.
Beta — feedback welcome: [email protected]